l.root=INFO logging.level.org.springframework.web=WARN logging.file=minibox.log

server_config

使用了SSL，并且在ldap配置中使用了ldaps，这里同时也需要把AD的证书导入到server.keystore中。具体的可以查看java的keytool工具

server.port=8443
server.ssl.key-store=classpath:server.keystore
server.ssl.key-store-password=minibox
server.ssl.key-password=minibox

jwt

jwt加解密时使用的key

jwt.key=minibox

ldap_config

ldap配置信息，注意这里的userDn一定要写这种形式。referral设置为follow，说不清用途，似乎只有连接AD时才需要配置

ldap.url=ldaps://192.168.227.128:636
ldap.base=ou=employees,dc=minibox,dc=com
ldap.userDn=cn=Administrator,cn=Users,dc=com
ldap.userPwd=qqq111!!!!
ldap.referral=follow
ldap.domainName=@minibox.com

.beans.factory.Annotation.Value; import org.springframework.boot.SpringApplication; import org.springframework.boot.autoconfigure.SpringBootApplication; import org.springframework.context.Annotation.bean; import org.springframework.ldap.core.LdapTemplate; import org.springframework.ldap.core.support.LdapContextsource; @SpringBootApplication//相当于@Configuration，@EnableAutoConfiguration，@ComponentScan public class Application {

/*

• SpringLdap配置。通过@Value注解读取之前配置文件中的值
  */
  @Value("${ldap.url}")
  private String ldapUrl;

@Value("${ldap.basE}")
private String ldapBase;

@Value("${ldap.userDn}")
private String ldapUserDn;

@Value("${ldap.userPwD}")
private String ldapUserPwd;

@Value("${ldap.referral}")
private String ldapReferral;

/
SpringLdap的javaConfig注入方式
*/
@Bean
public LdapTemplate ldapTemplate() {
return new LdapTemplate(contextsourceTarget());
}

@Bean
public LdapContextsource contextsourceTarget() {
LdapContextsource ldapContextsource = new LdapContextsource();
ldapContextsource.setUrl(ldapUrl);
ldapContextsource.setBase(ldapBasE);
ldapContextsource.setUserDn(ldapUserDn);
ldapContextsource.setpassword(ldapUserPwd);
ldapContextsource.setReferral(ldapReferral);
return ldapContextsource;
}

public static void main(String[] args) throws Exception {
SpringApplication.run(Application.class,args);
}
}

ntext; import org.springframework.beans.factory.Annotation.Autowired; import org.springframework.beans.factory.Annotation.Value; import org.springframework.http.httpStatus; import org.springframework.http.ResponseEntity; import org.springframework.ldap.NamingException; import org.springframework.ldap.core.Attributesmapper; import org.springframework.ldap.core.LdapTemplate; import org.springframework.ldap.support.LdapUtils; import org.springframework.web.bind.Annotation.CrossOrigin; import org.springframework.web.bind.Annotation.requestMapping; import org.springframework.web.bind.Annotation.requestMethod; import org.springframework.web.bind.Annotation.requestParam; import org.springframework.web.bind.Annotation.RestController; import com.alibaba.fastjson.JSON; import com.alibaba.fastjson.serializer.serializerFeature; import static org.springframework.ldap.query.LdapQueryBuilder.query; import java.util.Date; import java.util.HashMap; import java.util.Map; import an.entity.employee; import io.jsonwebtoken.Jwts; import io.jsonwebtoken.SignatureAlgorithm; @RestController @requestMapping("/auth") public class JwtAuth {

//jwt加密密匙
@Value("${jwt.key}")
private String jwtKey;

//域名后缀
@Value("${ldap.domainNamE}")
private String ldapDomainName;

//ldap模板
@Autowired
private LdapTemplate ldapTemplate;

/**

• 将域用户属性通过employeeAttributesmapper填充到employee类中，返回一个填充信息的employee实例
  */
  private class employeeAttributesmapper implements Attributesmapper {
  public employee mapFromAttributes(Attributes attrs) throws NamingException,javax.naming.NamingException {
  employee employee = new employee();
  employee.setName((String) attrs.get("sAMAccountName").get());
  employee.setDisplayName((String) attrs.get("displayName").get());
  employee.setRole((String) attrs.get("memberOf").toString());
  return employee;
  }
  }

/**

• @param username 用户提交的名称
• @param password 用户提交的密码
• @return 成功返回加密后的token信息，失败返回错误http状态码
  /
  @CrossOrigin//因为需要跨域访问，所以要加这个注解
  @requestMapping(method = requestMethod.POST)
  public ResponseEntity authByAd(
  @requestParam(value = "username") String username,@requestParam(value = "password") String password) {
  //这里注意用户名加域名后缀 userDn格式：anwx@minibox.com
  String userDn = username + ldapDomainName;
  //token过期时间 4小时
  Date tokenExpired = new Date(new Date().getTime() + 606041000);
  DirContext ctx = null;
  try {
  //使用用户名、密码验证域用户
  ctx = ldapTemplate.getContextsource().getContext(userDn,password);
  //如果验证成功根据sAMAccountName属性查询用户名和用户所属的组
  employee employee = ldapTemplate .search(query().where("objectclass").is("person").and("sAMAccountName").is(userName),new employeeAttributesmapper())
  .get(0);
  //使用Jwt加密用户名和用户所属组信息
  String compactJws = Jwts.builder()
  .setSubject(employee.getName())
  .setAudience(employee.getRole())
  .setExpiration(tokenExpired)
  .signWith(SignatureAlgorithm.HS512,jwtKey).compact();
  //登录成功，返回客户端token信息。这里只加密了用户名和用户角色，而displayName和tokenExpired没有加密
  Map<String,Object> userInfo = new HashMap<String,Object>();
  userInfo.put("token",compactJws);
  userInfo.put("displayName",employee.getDisplayName());
  userInfo.put("tokenExpired",tokenExpired.getTime());
  return new ResponseEntity(JSON.toJSONString(userInfo,serializerFeature.DisableCircularReferenceDetect),httpStatus.OK);
  } catch (Exception E) {
  //登录失败，返回失败http状态码
  return new ResponseEntity(httpStatuS.UNAUTHORIZED);
  } finally {
  //关闭ldap连接
  LdapUtils.closeContext(ctX);
  }
  }

}

E) has been set in webpack.base.conf with an alias. import Vue from 'vue' import VueRouter from 'vue-router' import Vueresource from 'vue-resource' import store from './store/store' import 'bootstrap/dist/css/bootstrap.css' import App from './App' import Login from './components/login' import Hello from './components/Hello'

Vue.use(VueRouter)
Vue.use(VueresourcE)
//Vue-resource默认以payload方式提交数据，这样设置之后以formData方式提交
Vue.http.options.emulateJSON = true;

const routes = [
{
path: '/login',component : Login
},{
path: '/Hello',component: Hello
}
]

const router = new VueRouter({
routes
})

//默认导航到登录页
router.push('/login')

/
全局路由钩子
访问资源时需要验证localStorage中是否存在token
以及token是否过期
验证成功可以继续跳转
失败返回登录页重新登录
/
router.beforeEach((to,from,next) => {
if(localStorage.token && new Date().getTime() < localStorage.tokenExpired){
next()
}
else{
next('/login')
}
})

new Vue({
el: '#app',template: '',components: { App },router,store
})