主页 / 问题

问题[token]

Martin Hope
alex_us
Asked: 2022-08-19 16:50:02 +0800 CST
  • 0

有一条微服务链通过 eureka 和 gateway-api 进行交互。
在其中，传递了一个令牌以进行身份​​验证。但是在微服务 #1 中，我使用 Feign 来调用
微服务 #2。为了将令牌传递给#2，我创建了一个 RequestInterceptor bean。

@SpringBootApplication
@EnableEurekaClient
@EnableFeignClients
public class OrderServiceApplication {

    public static void main(String[] args) {
        SpringApplication.run(OrderServiceApplication.class, args);
    }

    @Bean
    public RequestInterceptor requestTokenBearerInterceptor() {
        return new RequestInterceptor() {
            @Override
            public void apply(RequestTemplate requestTemplate) {

                System.out.println("In the request interceptor");

                System.out.println(SecurityContextHolder.getContext());
                System.out.println(SecurityContextHolder.getContext().getAuthentication());

                JwtAuthenticationToken token = (JwtAuthenticationToken) SecurityContextHolder
                        .getContext().getAuthentication();

                requestTemplate.header("Authorization", "Bearer" + token.getToken().getTokenValue());
            }
        };
    }

}

但是由于某种原因，当在拦截器 bean 中通过邮递员发送请求时，SecurityContextHolder.getContext().getAuthentication() 值返回 null。

签入控制器时，很明显令牌到达

@RestController
@RequestMapping("/api/order")
@Slf4j
@RequiredArgsConstructor
public class OrderController {

    private final OrderRepository orderRepository;
    private final InventoryClient inventoryClient;

    @PostMapping
    public String placeOrder(@RequestBody OrderDto orderDto, @RequestHeader("Authorization") String authHeader) {

        System.out.println("In the order controller");

        System.out.println("Authorization:"  + authHeader);

        boolean isAllProductsInStock = orderDto.getOrderLineItems().stream()
                .allMatch(orderLineItem -> inventoryClient.checkStock(orderLineItem.getScuCode()));

        if (isAllProductsInStock) {
            Order order = new Order();
            order.setOrderLineItems(orderDto.getOrderLineItems());
            order.setOrderNumber(UUID.randomUUID().toString());

            orderRepository.save(order);

            return "Order place successfully";
        }

        return "Please try again";
    }
}

令牌输出到控制台：授权：承载 eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJ5cXNCUnktOVFBZ0pJZmFxa2VybVNVMEQ0UGVCalFpRTNtNF9RRnVjMlowIn0。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.YIzc-z1ojQp6ohZfE1KD8O8Z_CQfLTtK7C9tQA8XUxQQ56RZOOuO_6X2k_yTLCis7a9ecTV7bpza9_Nm3M2dPy9h1MMV6d__kWG_kCXmEPbfCl0O2XDWnw0RTqyAGm4ZvupMgAGZCA6wmr7yqDQMadgMkRLD7P25ops6du48OeTnY6aMest0xhZnjCwWqmKRtrUAlrJ2jo-eQ8ujxq8UWOA8EOpELLZZllV9h6JKEXF5Rv6G8LtBJR4MPYEPoVqSI37AyFomLJeWsDqFE6BFHmdOteivTx0j8dLveaXR58rMdh0JC5TGf3aq57EiLsX-nkniiKGcs3DkrkMeUkMxNAYIzc-z1ojQp6ohZfE1KD8O8Z_CQfLTtK7C9tQA8XUxQQ56RZOOuO_6X2k_yTLCis7a9ecTV7bpza9_Nm3M2dPy9h1MMV6d__kWG_kCXmEPbfCl0O2XDWnw0RTqyAGm4ZvupMgAGZCA6wmr7yqDQMadgMkRLD7P25ops6du48OeTnY6aMest0xhZnjCwWqmKRtrUAlrJ2jo-eQ8ujxq8UWOA8EOpELLZZllV9h6JKEXF5Rv6G8LtBJR4MPYEPoVqSI37AyFomLJeWsDqFE6BFHmdOteivTx0j8dLveaXR58rMdh0JC5TGf3aq57EiLsX-nkniiKGcs3DkrkMeUkMxNAYIzc-z1ojQp6ohZfE1KD8O8Z_CQfLTtK7C9tQA8XUxQQ56RZOOuO_6X2k_yTLCis7a9ecTV7bpza9_Nm3M2dPy9h1MMV6d__kWG_kCXmEPbfCl0O2XDWnw0RTqyAGm4ZvupMgAGZCA6wmr7yqDQMadgMkRLD7P25ops6du48OeTnY6aMest0xhZnjCwWqmKRtrUAlrJ2jo-eQ8ujxq8UWOA8EOpELLZZllV9h6JKEXF5Rv6G8LtBJR4MPYEPoVqSI37AyFomLJeWsDqFE6BFHmdOteivTx0j8dLveaXR58rMdh0JC5TGf3aq57EiLsX-nkniiKGcs3DkrkMeUkMxNA

为什么身份验证不进入上下文。在我看的教程中，它自动通过

token