Spring 启动 controller 检索用户详情

Question

Hello so i have this method in JwtUtill

public Boolean validateToken(String token, UserDetails userDetails) {
    final String username = extractEmail(token);
    return (username.equals(userDetails.getUsername()) && !isTokenExpired(token));
}

But how can i request UserDetails in controller?

@GetMapping("/validateToken")
public String validateToken(@RequestHeader(value="token") String token) {
    if(jwtUtil.validateToken(token,???)) {

    }
}

Angular side

  public isTokenExpired(): Observable<string> {
    const headers = new HttpHeaders().set('token', localStorage.getItem('token'));
    return this.httpClient.get<string>('http://localhost:8080/api/validateToken', {headers, responseType: 'text' as 'json'});
  }

Also as frontend im using angular

Answer 1

You can simply inject it using @AuthenticationPrincipal . Eg:

@GetMapping("/validateToken")
public String validateToken(@AuthenticationPrincipal UserDetails userDetails, ...

Answer 2

UserDetails comes in the security context in the principal

UserDetails userDetails =
 (UserDetails)SecurityContextHolder.getContext().getAuthentication().getPrincipal();

Answer 3

It seems like you are using jwt , you don't need UserDetails to compare it with.

change methods as:

public Boolean validateToken(String token) {
    final String username = extractEmail(token);
    return (!StringUtils.isEmpty(username) && !isTokenExpired(token));
}

@GetMapping("/validateToken")
public String validateToken(@RequestHeader(value="token") String token) {
    if(jwtUtil.validateToken(token)) {

    }
}

If your token is invalid you will not get exception in extractEmail method and if it is expired then method isTokenExpired will return false .