JWT 身份验证 Spring Boot 和 Swagger UI答案

【问题标题】：JWT Authentication Spring Boot & Swagger UIJWT 身份验证 Spring Boot 和 Swagger UI
【发布时间】：2021-07-20 14:36:21
【问题描述】：

我有一个这样的 SwaggerConfig：

@Configuration
@EnableSwagger2
public class SwaggerConfiguration {

    public static final String AUTHORIZATION_HEADER = "Authorization";

    @Bean
    public Docket api() {
        return new Docket(DocumentationType.SWAGGER_2)
                .securityContexts(Arrays.asList(securityContext()))
                .securitySchemes(Arrays.asList(apiKey()))
                .select()
                .apis(RequestHandlerSelectors.any())
                .paths(PathSelectors.any())
                .build();
    }

    private ApiKey apiKey() {
        return new ApiKey("JWT", AUTHORIZATION_HEADER, "header");
    }

    private SecurityContext securityContext() {
        return SecurityContext.builder()
                .securityReferences(defaultAuth())
                .build();
    }

    List<SecurityReference> defaultAuth() {
        AuthorizationScope authorizationScope
                = new AuthorizationScope("global", "accessEverything");
        AuthorizationScope[] authorizationScopes = new AuthorizationScope[1];
        authorizationScopes[0] = authorizationScope;
        return Arrays.asList(new SecurityReference("JWT", authorizationScopes));
    }

}

当我在 swagger ui 中测试 API 时，它会发出 JWT 罚款，但它仍然会给出一个

{
  "error": "Full authentication is required to access this resource"
}

在邮递员中尝试相同的令牌效果很好。

这里是招摇的 ui curl：

curl -X GET "http://localhost:8082/api/helloadmin" -H "accept: */*" -H "Authorization: eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJuYXoiLCJpc0FkbWluIjp0cnVlLCJleHAiOjE2MTk1MzA3MTUsImlhdCI6MTYxOTUxMjcxNX0.GvEuOYqIPuS98DqhDrtHDFhjXrtwhGjLfylEXwkPeRTGRoWxcwIAYBEawl2Bl5qoQrI2zQOjKZGDq3KEZuyALQ"

我做错了什么？

【问题讨论】：

标签： spring-boot jwt swagger-ui

【解决方案1】：

正确的头部格式是“Authorization: Bearer [token]”

【讨论】：

谢谢！在 Swagger UI 中输入令牌时，我只是在它前面添加了“Bearer”，它工作得很好。