<!--java-JWT坐標(biāo) -->
        <dependency>
            <groupId>com.auth0</groupId>
            <artifactId>java-jwt</artifactId>
            <version>4.4.0</version>
        </dependency>

/**
     * 生成 JWT 令牌
     */
    public static String createToken(String data,String sign) {
        return JWT.create().withAudience(data)//將userid-role保存到token里面作為載荷
                .withExpiresAt(DateUtil.offsetDay(new Date(),1))//1天后token過期
                .sign(Algorithm.HMAC256(sign));//以password作為token的密鑰，使用HMAC256算法加密
    }

String token = TokenUtil.createToken(dbUser.getId()+"-"+"管理員",dbUser.getPassword());<br data-filtered="filtered">dbUser.setToken(token);

"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiIxLeeuoeeQhuWRmCIsImV4cCI6MTc0MjkyMTk5Mn0.PH2OJMzhqZFuJz-aW5nWfE5wZk9fbM-tgxPql1_NNVI"

@Configuration
public class WebConfig implements WebMvcConfigurer {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(jwtInterceptor())
                .addPathPatterns("/**")//校驗(yàn)規(guī)則所有接口
                .excludePathPatterns("/login","/register");//排除登錄和注冊(cè)接口
    }
    @Bean
    public JWTInterceptor jwtInterceptor(){
        return new JWTInterceptor();
    }
}

/**
 * JWT攔截器
 * 做攔截器的實(shí)現(xiàn)
 * 對(duì)Token進(jìn)行攔截并進(jìn)一步解析Token、驗(yàn)證Token，看看Token是否是合法的
 */
@Component
public class JWTInterceptor implements HandlerInterceptor {
    @Resource
    private UserService userService;
    @Resource
    private ZuKeService zuKeService;
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        //1.從請(qǐng)求頭拿到Token
        String token=request.getHeader("token");
        if (StrUtil.isEmpty(token)){
            //如果沒拿到，從參數(shù)中再拿一次
            token=request.getParameter("token");
        }
        //2.認(rèn)證Token
        if (StrUtil.isBlank(token)){
            throw new CustomException("401","您無權(quán)操作");
        }
        Account account=null;
        try {
            //拿到Token載荷數(shù)據(jù)
            String audience = JWT.decode(token).getAudience().get(0);
            String[] split=audience.split("-");
            String userId=split[0];
            String role=split[1];
            //柑橘Token解析出來的userId去對(duì)應(yīng)的表查詢信息
            if ("管理員".equals(role)){
                account=userService.selectById(userId);
            } else if ("租客".equals(role)) {
                account=zuKeService.selectById(userId);
            }
        } catch (Exception e) {
            throw new CustomException("401","您無權(quán)操作");
        }
        if (account==null){
            throw new CustomException("401","您無權(quán)操作");
        }
        try {
            //用戶加簽 驗(yàn)證簽名
            JWTVerifier jwtVerifier=JWT.require(Algorithm.HMAC256(account.getPassword())).build();
            jwtVerifier.verify(token);
        } catch (Exception e) {
            throw new CustomException("401","您無權(quán)操作");
        }
        return true;
    }
}

import axios from "axios";
import {ElMessage} from "element-plus";
const request = axios.create({
    baseURL:'http://localhost:8080',//后端統(tǒng)一的請(qǐng)求地址
    timeout:30000 //后臺(tái)接口時(shí)間
})
//request 攔截器
//可以自請(qǐng)求發(fā)送前對(duì)請(qǐng)求做一些處理
request.interceptors.request.use(config =>{
    //統(tǒng)一的數(shù)據(jù)傳輸格式為json，統(tǒng)一的編碼utf-8
    config.headers['Content-Type']='application/json;charset=utf-8';
    //let user=JSON.parse(localStorage.getItem('pro1-user') || '{}');
    //config.headers['token']=user.token;
    // ? 安全獲取 user（兼容 null 和異常情況）
    let user = {};
    try {
        const userStr = localStorage.getItem('pro1-user');
        user = userStr ? JSON.parse(userStr) : {};
    } catch (e) {
        console.error('解析 pro1-user 失敗:', e);
    }
    // 僅當(dāng) token 存在時(shí)才添加到 headers
    if (user.token) {
        config.headers['token'] = user.token;
    } else {
        console.warn('Token 不存在，請(qǐng)求可能被后端拒絕');
        // 可選：跳轉(zhuǎn)到登錄頁
        // window.location.href = '/login';
    }
    return config;
},error=>{
    return Promise.reject(error)
});
//response攔截器
//可以在接口響應(yīng)后統(tǒng)一處理結(jié)果
request.interceptors.response.use(
    response =>{
        let res=response.data;
        //兼容服務(wù)端返回的字符串?dāng)?shù)據(jù)
        if(typeof  res === 'string'){
            //如果是string，轉(zhuǎn)成json
            res = res ? JSON.parse(res) : res
        }
        if (res.code === '401'){
            ElMessage.error(res.msg);
            router.push('/login')
        }else {
            return res;
        }
    },
    error =>{
        //后端返回?cái)?shù)據(jù)判斷
        if (error.response.status === 404){
            ElMessage.error('未找到請(qǐng)求接口')
        }else if (error.response.status === 500){
            ElMessage.error('系統(tǒng)異常，請(qǐng)查看后端控制臺(tái)報(bào)錯(cuò)')
        }else{
            console.error(error.message)
        }
        return Promise.reject(error)
    }
)
export default request

@Component
public class TokenUtil {
    @Resource
    UserService userService;
    @Resource
    ZuKeService zuKeService;
    static UserService stasticUserService;
    static ZuKeService stasticZuKeService;
    /**
     * 生成 JWT 令牌
     */
    public static String createToken(String data,String sign) {
        return JWT.create().withAudience(data)//將userid-role保存到token里面作為載荷
                .withExpiresAt(DateUtil.offsetDay(new Date(),1))//1天后token過期
                .sign(Algorithm.HMAC256(sign));//以password作為token的密鑰，使用HMAC256算法加密
    }
    /**
     * 獲取當(dāng)前登錄用戶信息
     * @return
     */
    public static Account getCurrentUser(){
        Account account=null;
        HttpServletRequest request=((ServletRequestAttributes)RequestContextHolder.getRequestAttributes()).getRequest();
        String token=request.getHeader("token");
        if (StrUtil.isEmpty(token)){
            //如果沒拿到，從參數(shù)中再拿一次
            token=request.getParameter("token");
        }
        //拿到Token載荷數(shù)據(jù)
        String audience = JWT.decode(token).getAudience().get(0);
        String[] split=audience.split("-");
        String userId=split[0];
        String role=split[1];
        if ("管理員".equals(role)){
            return stasticUserService.selectById(userId);
        }else if ("租客".equals(role)){
            return stasticZuKeService.selectById(userId);
        }
        return null;
    }
}

Account currentUser=TokenUtil.getCurrentUser();