refactor(admin): 重构管理员认证逻辑

- 新增 AdminAuthController 专门处理认证相关接口
- 重写管理员登录和 token 刷新逻辑
- 更新 JwtAuthenticationFilter 中的白名单路径- 调整 SecurityConfig 中的认证规则
- 删除 AdminMainController 类

src/main/java/com/example/admin_server/config/SecurityConfig.java

@@ -44,7 +44,7 @@ public class SecurityConfig {
                         "/swagger-ui/**",
                         "/v3/api-docs/**",
                         "/api/public/**",
-                        "/api/admin/login",
+                        "/api/admin/auth/login",
                         "/api/client/wx/login"
                 ).permitAll()
                 .antMatchers("/api/admin/**").authenticated()

src/main/java/com/example/admin_server/controller/admin/AdminAuthController.java

@@ -0,0 +1,97 @@
+package com.example.admin_server.controller.admin;
+
+import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
+import com.example.admin_server.common.Result;
+import com.example.admin_server.enums.ResultCode;
+import com.example.admin_server.mapper.AdminMapper;
+import com.example.admin_server.model.dto.LoginDto;
+import com.example.admin_server.model.entity.Admin;
+import com.example.admin_server.utils.JwtUtil;
+import io.jsonwebtoken.Claims;
+import io.swagger.annotations.Api;
+import io.swagger.annotations.ApiOperation;
+import lombok.RequiredArgsConstructor;
+import org.springframework.util.DigestUtils;
+import org.springframework.util.StringUtils;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Optional;
+
+@RestController
+@RequestMapping("/api/admin/auth")
+@RequiredArgsConstructor
+@Api(tags = {"管理员认证接口"})
+public class AdminAuthController {
+
+    private final AdminMapper adminMapper;
+    private final JwtUtil jwtUtil;
+
+    @PostMapping("/login")
+    @ApiOperation("管理员登录")
+    public Result<?> login(@RequestBody LoginDto request) {
+        Admin admin = adminMapper.selectOne(
+                new QueryWrapper<Admin>().eq("username", request.getUsername())
+        );
+
+        if (admin == null) {
+            return Result.of(ResultCode.UNAUTHORIZED, "用户不存在");
+        }
+
+        String inputPassword = DigestUtils.md5DigestAsHex(request.getPassword().getBytes());
+        if (!admin.getPassword().equals(inputPassword)) {
+            return Result.of(ResultCode.UNAUTHORIZED, "密码错误");
+        }
+
+        if (admin.getStatus() == 0) {
+            return Result.of(ResultCode.FAIL, "账号已禁用");
+        }
+
+        // JWT Claims
+        Map<String, Object> claims = new HashMap<>();
+        claims.put("id", admin.getId());
+        claims.put("username", admin.getUsername());
+        claims.put("isSuper", admin.getIsSuper());
+
+        // Token 与 RefreshToken
+        return getResult(claims);
+    }
+
+    @PostMapping("/refreshToken")
+    @ApiOperation("刷新 Token")
+    public Result<?> refreshToken(@RequestBody Map<String, String> request) {
+        String refreshToken = request.get("refreshToken");
+
+        if (!StringUtils.hasText(refreshToken)) {
+            return Result.of(ResultCode.UNAUTHORIZED, "缺少 refreshToken");
+        }
+
+        Optional<Claims> claimsOpt = jwtUtil.parseToken(refreshToken);
+        if (!claimsOpt.isPresent() || jwtUtil.isTokenExpired(refreshToken)) {
+            return Result.of(ResultCode.UNAUTHORIZED, "refreshToken 无效或已过期");
+        }
+
+        Claims claims = claimsOpt.get();
+        Map<String, Object> data = new HashMap<>();
+        data.put("id", claims.get("id"));
+        data.put("username", claims.get("username"));
+        data.put("isSuper", claims.get("isSuper"));
+
+        return getResult(data);
+    }
+
+    private Result<?> getResult(Map<String, Object> data) {
+        String newToken = jwtUtil.generateToken(data);
+        String newRefreshToken = jwtUtil.generateRefreshToken(data);
+
+        Map<String, String> tokenMap = new HashMap<>();
+        tokenMap.put("token", newToken);
+        tokenMap.put("refreshToken", newRefreshToken);
+
+        return Result.ok("请求成功", tokenMap);
+    }
+}

src/main/java/com/example/admin_server/controller/admin/AdminController.java

@@ -1,60 +1,13 @@
 package com.example.admin_server.controller.admin;
 
-import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
-import com.example.admin_server.common.Result;
-import com.example.admin_server.enums.ResultCode;
-import com.example.admin_server.mapper.AdminMapper;
-import com.example.admin_server.model.dto.LoginDto;
-import com.example.admin_server.model.entity.Admin;
-import com.example.admin_server.utils.JwtUtil;
 import io.swagger.annotations.Api;
-import io.swagger.annotations.ApiOperation;
 import lombok.RequiredArgsConstructor;
-import org.springframework.util.DigestUtils;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
-import java.util.HashMap;
-import java.util.Map;
-
 @RestController
 @RequestMapping("/api/admin")
 @RequiredArgsConstructor
 @Api(tags = {"管理员接口"})
 public class AdminController {
-
-    private final AdminMapper adminMapper;
-    private final JwtUtil jwtUtil;
-
-    @PostMapping("/auth/login")
-    @ApiOperation(value = "管理员登陆")
-    public Result<?> login(@RequestBody LoginDto request) {
-        Admin admin = adminMapper.selectOne(new QueryWrapper<Admin>()
-                .eq("username", request.getUsername()));
-
-        if (admin == null) {
-            return Result.of(ResultCode.UNAUTHORIZED, "用户不存在");
-        }
-
-        String inputPassword = DigestUtils.md5DigestAsHex(request.getPassword().getBytes());
-        System.out.println(inputPassword);
-        if (!admin.getPassword().equals(inputPassword)) {
-            return Result.of(ResultCode.UNAUTHORIZED, "密码错误");
-        }
-
-        if (admin.getStatus() == 0) {
-            return Result.of(ResultCode.FAIL, "账号已禁用");
-        }
-
-        Map<String, Object> claims = new HashMap<>();
-        claims.put("id", admin.getId());
-        claims.put("username", admin.getUsername());
-        claims.put("isSuper", admin.getIsSuper());
-
-        String token = jwtUtil.generateToken(claims);
-        return Result.ok(token);
-    }
-
 }

src/main/java/com/example/admin_server/controller/admin/AdminMainController.java

@@ -1,24 +0,0 @@
-package com.example.admin_server.controller.admin;
-
-import com.example.admin_server.config.AppConfig;
-import io.swagger.annotations.Api;
-import io.swagger.annotations.ApiOperation;
-import lombok.RequiredArgsConstructor;
-import org.springframework.web.bind.annotation.GetMapping;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RestController;
-
-@RestController
-@RequestMapping("/api/admin")
-@Api(tags = {"AdminMain"})
-@RequiredArgsConstructor
-public class AdminMainController {
-
-    private final AppConfig appConfig;
-
-    @GetMapping("/welcome")
-    @ApiOperation(value = "Hello admin")
-    public String welcome() {
-        return "Hello admin" + appConfig.getEnvName();
-    }
-}

src/main/java/com/example/admin_server/filter/JwtAuthenticationFilter.java

@@ -28,9 +28,9 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
     private static final Set<String> WHITELIST = new HashSet<>();
 
     static {
-        WHITELIST.add("/api/admin/login");
+        WHITELIST.add("/api/admin/auth/login");
-        WHITELIST.add("/api/client/login");
+        WHITELIST.add("/api/client/auth/login");
-        WHITELIST.add("/api/employee/login");
+        WHITELIST.add("/api/employee/auth/login");
         WHITELIST.add("/api/client/wx/login");
     }
 

src/main/java/com/example/admin_server/utils/JwtUtil.java

@@ -60,4 +60,8 @@ public class JwtUtil {
                 .map(c -> c.getExpiration().before(new Date()))
                 .orElse(true);
     }
+
+    public String generateRefreshToken(Map<String, Object> claims) {
+        return generateToken(claims);
+    }
 }