swagger auth获取 token

Swagger Auth获取token可以通过以下步骤实现：
首先，在Swagger的文档中找到需要进行认证的接口，在接口的右上方可能会有一个按钮，用于展示认证相关的参数。
接下来，点击该按钮，将弹出一个对话框，要求输入认证所需的参数，如用户名和密码等。根据具体的认证方式，填写相应的参数。
然后，点击“Authorize”按钮，Swagger将以认证所需的参数和认证方式，向后端发送请求，在成功认证后，将返回一个token。
最后，在Swagger中找到需要进行认证的接口，点击该接口以展开详细信息，然后在右上方找到“Authorization”字段，点击下拉菜单，在弹出的对话框中选择合适的认证方式，如Bearer Token，然后将刚获取到的token填入对应的输入框中。
现在，你已经成功在Swagger中进行了认证并获取到了token，可以继续测试和调用需要认证的接口了。这个token会在每次发送请求时自动添加到请求头中，确保接口能够正常访问。

相关问题

springboot2.7.8 整合swagger 2.9.2,需要整合token

为了在Swagger中添加token，可以使用Spring Security来保护API并生成token。以下是如何在Spring Boot应用程序中使用Swagger和Spring Security整合token的步骤：

1. 添加Spring Security和JWT依赖

在pom.xml文件中添加以下依赖：

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>

<dependency>
   <groupId>io.jsonwebtoken</groupId>
   <artifactId>jjwt</artifactId>
   <version>0.9.0</version>
</dependency>

2. 创建Spring Security配置类

创建一个类，继承WebSecurityConfigurerAdapter并重写configure(HttpSecurity http)方法。在该方法中，配置Spring Security以保护API并生成token。以下是一个示例：

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

   @Autowired
   private UserDetailsService userDetailsService;

   @Autowired
   private JwtAuthenticationEntryPoint jwtAuthenticationEntryPoint;

   @Bean
   public JwtAuthenticationFilter jwtAuthenticationFilter() {
      return new JwtAuthenticationFilter();
   }

   @Bean
   public PasswordEncoder passwordEncoder() {
      return new BCryptPasswordEncoder();
   }

   @Autowired
   public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
      auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder());
   }

   @Override
   protected void configure(HttpSecurity http) throws Exception {
      http.cors().and().csrf().disable()
         .authorizeRequests()
         .antMatchers("/api/auth/**").permitAll()
         .anyRequest().authenticated()
         .and()
         .exceptionHandling().authenticationEntryPoint(jwtAuthenticationEntryPoint)
         .and()
         .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);

      http.addFilterBefore(jwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);
   }
}

3. 创建JWT工具类

创建一个类，用于生成和解析JWT token。以下是一个示例：

@Component
public class JwtUtils {

   @Value("${jwt.secret}")
   private String secret;

   @Value("${jwt.expiration}")
   private int expiration;

   public String generateToken(Authentication authentication) {
      UserDetailsImpl userPrincipal = (UserDetailsImpl) authentication.getPrincipal();

      Date now = new Date();
      Date expiryDate = new Date(now.getTime() + expiration);

      return Jwts.builder()
              .setSubject(userPrincipal.getUsername())
              .setIssuedAt(now)
              .setExpiration(expiryDate)
              .signWith(SignatureAlgorithm.HS512, secret)
              .compact();
   }

   public String getUsernameFromToken(String token) {
      return Jwts.parser().setSigningKey(secret).parseClaimsJws(token).getBody().getSubject();
   }

   public boolean validateToken(String authToken) {
      try {
         Jwts.parser().setSigningKey(secret).parseClaimsJws(authToken);
         return true;
      } catch (SignatureException ex) {
         log.error("Invalid JWT signature");
      } catch (MalformedJwtException ex) {
         log.error("Invalid JWT token");
      } catch (ExpiredJwtException ex) {
         log.error("Expired JWT token");
      } catch (UnsupportedJwtException ex) {
         log.error("Unsupported JWT token");
      } catch (IllegalArgumentException ex) {
         log.error("JWT claims string is empty");
      }
      return false;
   }
}

4. 创建JWT认证过滤器

创建一个类，用于验证token并将用户信息添加到Spring Security上下文中。以下是一个示例：

public class JwtAuthenticationFilter extends OncePerRequestFilter {

   @Autowired
   private JwtUtils jwtUtils;

   @Autowired
   private UserDetailsService userDetailsService;

   @Override
   protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
      try {
         String jwt = getJwtFromRequest(request);

         if (StringUtils.hasText(jwt) && jwtUtils.validateToken(jwt)) {
            String username = jwtUtils.getUsernameFromToken(jwt);

            UserDetails userDetails = userDetailsService.loadUserByUsername(username);
            UsernamePasswordAuthenticationToken authentication = new UsernamePasswordAuthenticationToken(userDetails, null, userDetails.getAuthorities());
            authentication.setDetails(new WebAuthenticationDetailsSource().buildDetails(request));

            SecurityContextHolder.getContext().setAuthentication(authentication);
         }
      } catch (Exception ex) {
         log.error("Could not set user authentication in security context", ex);
      }

      filterChain.doFilter(request, response);
   }

   private String getJwtFromRequest(HttpServletRequest request) {
      String bearerToken = request.getHeader("Authorization");
      if (StringUtils.hasText(bearerToken) && bearerToken.startsWith("Bearer ")) {
         return bearerToken.substring(7);
      }
      return null;
   }
}

5. 在Swagger中添加token

在Spring Boot应用程序中添加Swagger，并在Swagger配置类中添加以下代码：

@Configuration
@EnableSwagger2
public class SwaggerConfig {

   @Autowired
   private JwtUtils jwtUtils;

   @Bean
   public Docket api() {
      return new Docket(DocumentationType.SWAGGER_2)
              .securityContexts(Arrays.asList(securityContext()))
              .securitySchemes(Arrays.asList(apiKey()))
              .select()
              .apis(RequestHandlerSelectors.any())
              .paths(PathSelectors.any())
              .build();
   }

   private ApiKey apiKey() {
      return new ApiKey("JWT", "Authorization", "header");
   }

   private SecurityContext securityContext() {
      return SecurityContext.builder()
              .securityReferences(Arrays.asList(new SecurityReference("JWT", new AuthorizationScope[]{})))
              .forPaths(PathSelectors.any())
              .build();
   }

   @Bean
   public SecurityConfiguration security() {
      return SecurityConfigurationBuilder.builder()
              .clientId(null)
              .clientSecret(null)
              .realm(null)
              .appName(null)
              .scopeSeparator(",")
              .additionalQueryStringParams(null)
              .useBasicAuthenticationWithAccessCodeGrant(false)
              .build();
   }

   @Bean
   public UiConfiguration uiConfig() {
      return UiConfigurationBuilder.builder()
              .displayRequestDuration(true)
              .validatorUrl("")
              .build();
   }

   @Override
   public void addResourceHandlers(ResourceHandlerRegistry registry) {
      registry.addResourceHandler("swagger-ui.html")
              .addResourceLocations("classpath:/META-INF/resources/");

      registry.addResourceHandler("/webjars/**")
              .addResourceLocations("classpath:/META-INF/resources/webjars/");
   }

   @Bean
   public SecurityConfiguration securityConfiguration() {
      return SecurityConfigurationBuilder.builder()
              .clientId("test-app-client-id")
              .clientSecret("test-app-client-secret")
              .realm("test-app-realm")
              .appName("test-app")
              .scopeSeparator(",")
              .additionalQueryStringParams(null)
              .useBasicAuthenticationWithAccessCodeGrant(false)
              .build();
   }

   @Bean
   public SecurityConfiguration securityConfiguration() {
      return SecurityConfigurationBuilder.builder()
              .clientId("test-app-client-id")
              .clientSecret("test-app-client-secret")
              .realm("test-app-realm")
              .appName("test-app")
              .scopeSeparator(",")
              .additionalQueryStringParams(null)
              .useBasicAuthenticationWithAccessCodeGrant(false)
              .build();
   }

   @Bean
   public OAuth securitySchema() {
      List<AuthorizationScope> authorizationScopeList = new ArrayList<>();
      authorizationScopeList.add(new AuthorizationScope("read", "read all"));
      authorizationScopeList.add(new AuthorizationScope("write", "access all"));

      List<GrantType> grantTypes = new ArrayList<>();
      GrantType passwordCredentialsGrant = new ResourceOwnerPasswordCredentialsGrant("http://localhost:8080/auth/token");

      grantTypes.add(passwordCredentialsGrant);

      return new OAuth("oauth2schema", authorizationScopeList, grantTypes);
   }

   @Bean
   public SecurityConfiguration securityInfo() {
      return new SecurityConfiguration(
              "test-app-client-id",
              "test-app-client-secret",
              "test-app-realm",
              "test-app",
              "",
              ApiKeyVehicle.HEADER,
              "Authorization",
              ","
      );
   }

   @Bean
   public SecurityConfiguration security() {
      return SecurityConfigurationBuilder.builder()
              .clientId("test-app-client-id")
              .clientSecret("test-app-client-secret")
              .realm("test-app-realm")
              .appName("test-app")
              .scopeSeparator(",")
              .additionalQueryStringParams(null)
              .useBasicAuthenticationWithAccessCodeGrant(false)
              .build();
   }

   @Bean
   public UiConfiguration uiConfiguration() {
      return new UiConfiguration(
              null,
              "none",
              "alpha",
              "schema",
              UiConfiguration.Constants.DEFAULT_SUBMIT_METHODS,
              false,
              true,
              60000L
      );
   }
}

完成以上步骤后，您就可以在Swagger中使用token来访问受保护的API了。在Swagger界面的右上方，单击“Authorize”按钮并输入您的token即可。

Swagger ApiKey

Swagger ApiKey是用来进行接口验证的一种方式。在Swagger中，可以通过修改SwaggerConfig文件和添加api-key-header-auth.js文件来实现ApiKey验证。首先，在SwaggerConfig文件中取消注释c.BasicAuth("basic")和c.InjectJavaScript(thisAssembly, "wang2650.CustomContent.api-key-header-auth.js")，使其生效。然后，在根目录下创建CustomContent文件夹，并添加api-key-header-auth.js文件。该文件中的代码会在调用接口时，在head中加入一个名为Authorization的key，内容为apikey的文本框中的值。最后，在需要进行验证的接口上使用注解@ApiOperation(value = "接口名称", authorizations = {@Authorization(value="access_token")})，其中value对应的是ApiKey的名称。这样就可以在Swagger UI中进行ApiKey验证了。\[1\]\[2\]\[3\]
#### 引用[.reference_title]
- *1* *2* [Swagger ui测试中的验证 apikey](https://blog.csdn.net/weixin_30608503/article/details/95863960)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v91^insertT0,239^v3^insert_chatgpt"}} ] [.reference_item]
- *3* [swagger2-身份认证Authenticatio（二）ApiKey](https://blog.csdn.net/lanwp5302/article/details/101629730)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v91^insertT0,239^v3^insert_chatgpt"}} ] [.reference_item]
[ .reference_list ]