记一次应用接入第三方统一认证服务的过程, 基于 JWT 和 OAuth2.0

public void login(HttpServletRequest request, HttpServletResponse response,String redirect_uri) {    String contextPath = request.getContextPath();    String redirectUri = serverUri + contextPath + "/api/authsuccess";    //->/api/authsuccess是应用提供的验证地址    logger.info("认证成功之后调转到目标地址为：redirectUri：{}", redirectUri);    String url = UriComponentsBuilder.fromUriString(authorizeUrl).queryParam("app_id", clientId)          .queryParam("app_secret", clientSecret).queryParam("state", redirect_uri)          .queryParam("redirect_uri", redirectUri).build().encode().toUriString();    response.sendRedirect(url);      }

// state为上一步传递的参数public void authenticate(HttpServletRequest request, HttpServletResponse response, String code,      String state) {      Map<String, Object> userInfo = getUserInfo(code); //获取用户信息        String userId = (String) userInfo.get("username");          String _jwt = generateToken(userId);        String jwt_iss = (System.currentTimeMillis()/ 1000) + "";        String jwt_expire = (30 * 1000) + "";        Cookie jwt_cookie = new Cookie("_jwt", jwt);        Cookie jwtActiveCookie = new Cookie("_jwt_active", jwt_iss );        Cookie jwtExpireTimeCookie = new Cookie("_jwt_exp", jwt_expire );        jwtCookie.setPath("/");        jwtActiveCookie.setPath("/");        jwtExpireTimeCookie.setPath("/");        response.addCookie(jwtCookie);        response.addCookie(jwtActiveCookie);        response.addCookie(jwtExpireTimeCookie);        response.sendRedirect(state);}