Redis stores user token

When designing a system similar to e-commerce, a common requirement is that each page needs to carry logged-in user information.

There are two common solutions:

• Use cookies to save

• Use JWT to save

But if Redis cache is used in the system, then there is a third solution - cache the user token in Redis.

Generate a token when logging in and store it in Redis

//生成一個(gè)token對(duì)象,保存在redis中
redisTemplate.opsForHash().put("token","user",user);

When each page is generated, provide the token

//以JSON字符串形式返回token
@RequestMapping(value = "/getToken",method = RequestMethod.GET)
@ResponseBody
public User getToken(){
    User user = (User) redisTemplate.opsForHash().get("token", "user");
    return user;
}

//發(fā)送ajax請(qǐng)求，獲取token
function get_token(){
    $.ajax({
        url:"getToken",
        type:"GET",
        dataType:"JSON",
        success:function(result){
            //將返回的用戶信息保存在token中
            var token = result;
            //打印登錄用戶
            console.log(token);
            //打印登錄用戶的id
            console.log(token.id);
            document.getElementById('username').innerText = "用戶名:"+token.username;
        }
    });
}

Delete the token when logging out

//注銷
@RequestMapping("/logout")
public String logout(){
    redisTemplate.opsForHash().delete("token","user");
    return "/login";
}

Redis Dealing with token issues

java—Handling tokens based on redis

First of all, make it clear that token: token is a way of processing user information for front-end and back-end interaction after logging in. There are two main types Methods, one is based on session storage, and the other is based on redis storage. This article only discusses user information processing based on redis.   

For every information interaction after a user logs in, if user information needs to be passed, especially user IDs and the like, it is obviously unwise to query the database every time. We can Create a space in redis to save user information, and then we will use it from redis every time we need user information.

First create RedisUtil

@Component

public class RedisUtil {

    @Autowired
    private RedisTemplate redisTemplate;   //key-value是對(duì)象的

    //判斷是否存在key
    public boolean hasKey(String key) {
        return redisTemplate.hasKey(key);
    }

    //從redis中獲取值
    public Object get(String key) {
        return redisTemplate.opsForValue().get(key);
    }

    //向redis插入值
    public boolean set(final String key, Object value) {
        boolean result = false;
        try {
            redisTemplate.opsForValue().set(key, value);
            result = true;
        } catch (Exception e) {
            e.printStackTrace();
        }
        return result;
    }

    //向redis插入值帶過(guò)期時(shí)間 單位:分鐘
    public boolean set(final String key, Object value, long time) {
        boolean result = false;
        try {
            redisTemplate.opsForValue().set(key, value, time, TimeUnit.MINUTES);
            result = true;
        } catch (Exception e) {
            e.printStackTrace();
        }
        return result;
    }

    //redis刪除值
    public boolean del(final String key) {
        return redisTemplate.delete(key);
    }

    //批量刪除某個(gè)字段開(kāi)始的key
    public long batchDel(String key) {
        Set<String> set = redisTemplate.keys(key + "*");
        return redisTemplate.delete(set);
    }

}

After creating RedisUtil, we need to store the value in redis. At this time, we need to pay attention to the fact that our key needs to be discussed with the front-end in advance, which field name to use, and the current-end When requesting, the key must be passed in the header. The value is encrypted and returned to the front end after the first login. After we get the header information, we need to decrypt the value first and use the value as the key to get the user information.

@Component
public class UserUtil {
    @Autowired
    private RedisUtil redisUtil;
    @Autowired
    private HttpServletRequest request;

    /**
     * 后臺(tái)管理的登錄id
     *
     * @return
     */
    public JsonResult getUser() {
        String header = request.getHeader("#與前端約定的統(tǒng)一字段#");
        //解密
        String decrypt = DESUtil.decrypt(header);
        if (!redisUtil.hasKey(decrypt))return JsonResult.error("未登錄");
        User user = null;
        try {
            user = (User) redisUtil.get(decrypt);
        } catch (Exception e) {
            e.printStackTrace();
        }
        if (decrypt == null) return JsonResult.error("權(quán)限不足");
        return JsonResult.success(user);
    }
}

When we need it

        JsonResult jsonResult = userUtil.getUser();
        if (jsonResult.getCode() != 1) return jsonResult;
        //強(qiáng)轉(zhuǎn)成對(duì)象。此處不用擔(dān)心強(qiáng)轉(zhuǎn)失敗，因?yàn)榇嫒氲臅r(shí)候就是對(duì)象存儲(chǔ)，只不過(guò)為了復(fù)用，存的是object類型
        User user= (User) jsonResult.getData();
        return JsonResult.success(#service層#);
    }

The above is the detailed content of How to solve the problem of storing user tokens in Redis. For more information, please follow other related articles on the PHP Chinese website!