Spring RSocket 安全 + RSocket-WebSocket-客户端（浏览器）

Question

我正在尝试在 Vue 中创建站点并在 Spring 中创建后端。我想使用 rsocket 来传输数据，但是当我在 spring 中添加 rsocket seurity 时，我得到：

'metadata is malformed'

想看看使用 jwt/simpleauth

的工作示例

Answer 1

我用 Simple Auth 解决了这个问题，现在我想将此授权与 spring 网络安全同步。那些。以便 rsocket 中的路由通过网络安全检查授权。我知道这可以通过 jwt 令牌实现，即通过 rest 向客户端发送 jwt 令牌，但我如何在代码中执行此操作？ JS客户端（浏览器）和Spring，如何生成userdetails token？为了以防万一，我将留下一个 simpleauth 实现的例子：

// METADATA BUILDER
    import {encodeRoute, encodeBearerAuthMetadata, encodeSimpleAuthMetadata, encodeAndAddCustomMetadata, encodeAndAddWellKnownMetadata, MESSAGE_RSOCKET_ROUTING, MESSAGE_RSOCKET_AUTHENTICATION} from "rsocket-core";
    
    export default class Metadata {
        constructor(json) {
            this.route = json['route'];
            this.auth = json['auth'];
        }
    
        toMetadata() {
            let metadata = Buffer.alloc(0);
            if (this.auth) {
                if (this.auth["type"] === 'bearer') {
                    metadata = encodeAndAddCustomMetadata(
                        metadata,
                        MESSAGE_RSOCKET_AUTHENTICATION.string,
                        encodeBearerAuthMetadata(this.auth["token"]),
                    );
                }
                if (this.auth["type"] === 'simple') {
                    metadata = encodeAndAddCustomMetadata(
                        metadata,
                        MESSAGE_RSOCKET_AUTHENTICATION.string,
                        encodeSimpleAuthMetadata(this.auth["username"], this.auth["password"]),
                    );
                }
            }
            if (this.route) {
                metadata = encodeAndAddWellKnownMetadata(
                    metadata,
                    MESSAGE_RSOCKET_ROUTING,
                    encodeRoute(this.route)
                );
            }
            return metadata;
        }
    }

// RSOCKET CLIENT CLASS
    import RSocketWebSocketClient from "rsocket-websocket-client";
    import {BufferEncoders, MESSAGE_RSOCKET_COMPOSITE_METADATA, RSocketClient,toBuffer} from "rsocket-core";
    import Metadata from "./metadata";
    
    
    export default class SpringClient {
        constructor(wsUrl, keepAlive = 60000, lifetime = 180000, dataMimeType = "application/json") {
            this.client = new RSocketClient({
                "setup": {
                    "keepAlive": keepAlive,
                    "lifetime": lifetime,
                    "dataMimeType": dataMimeType,
                    "metadataMimeType": MESSAGE_RSOCKET_COMPOSITE_METADATA.string
                },
                "transport": new RSocketWebSocketClient({
                    "url": wsUrl
                }, BufferEncoders)
            });
        }
    
        bearerAuth(token) {
            this.auth = {type: "bearer", token: token}
        }
    
        simpleAuth(username, password) {
            this.auth = {type: "simple", username: username, password: password}
        }
    
        logout() {
            this.auth = null;
        }
    
        connect(
            completeCallback = (socket) => {
            }, errorCallback = (error) => {
            }, subscribeCallback = (cancel) => {
            }
        ) {
            this.client.connect().subscribe({
                onComplete: socket => {
                    this.socket = socket;
                    completeCallback(socket);
                },
                onError: error => {
                    errorCallback(error);
                },
                onSubscribe: cancel => {
                    subscribeCallback(cancel);
                }
            });
        }
    
        requestResponse(data, route,
                        completeCallback = (data) => {
                        },
                        errorCallback = (error) => {
                        },
                        subscribeCallback = (cancel) => {
                        }
        ) {
            if (this.socket) {
                const metadata = new Metadata({
                    route: route,
                    auth: this.auth
                }).toMetadata();
                data = toBuffer(data);
                this.socket.requestResponse({
                    data,
                    metadata
                }).subscribe({
                    onComplete: data => {
                        completeCallback(data);
                    },
                    onError: error => {
                        errorCallback(error);
                    },
                    onSubscribe: cancel => {
                        subscribeCallback(cancel);
                    }
                });
            }
        }
    }
// EXAMPLE, HOW TO USE

    import SpringClient from "./springclient";
    
    this.client = new SpringClient("ws://localhost:7000/", 5000, 15000, "text/plain");
    this.client.connect(
        (socket) => {
            console.log("got connection complete");
            this.socket = socket;
        },
        (error) => {
            console.log("got connection error");
            console.error(error);
        },
        (cancel) => {
            console.log("got connection subscribe");
            /* call cancel() to abort */
        }
    )
    this.client.simpleAuth("LOGIN", "PASSWORD");
    this.client.requestResponse("MESSAGE", "ROUTE",
        (data) => {
            console.log("got response with requestResponse");
            console.log(data.data);
        },
        (error) => {
    
            console.log("got error with requestResponse");
            console.error(error);
        },
        (cancel) => {
            console.log(message);
            /* call cancel() to stop onComplete/onError */
        }
    );

Spring RSocket 安全 + RSocket-WebSocket-客户端（浏览器）

Spring RSocket Security + RSocket-WebSocket-Client (browser)

javascript

java

spring-security

rsocket