@Override
    public Result sedCode(String phone, HttpSession session) {
        //1. 校驗手機號
        if (RegexUtils.isPhoneInvalid(phone)) {
            //2.如果不符合，返回錯誤信息
            return Result.fail("手機號格式錯誤");
        }
        // 3.從redis里獲取驗證碼是否存在
        if(null==stringRedisTemplate.opsForValue().get("loginCode" + phone)){
            log.info("請勿重復(fù)獲取驗證碼");
            return Result.fail("請勿重復(fù)獲取驗證碼");
        }
        //4. 符合，生成驗證碼
        String code = RandomUtil.randomNumbers(6);
        //5. 保存驗證碼到redis,并設(shè)置有效期1分鐘,在設(shè)置key的時候，可以提前設(shè)置一個常量，然后在這里引用即可
        stringRedisTemplate.opsForValue().set("loginCode:"+phone,code,1, TimeUnit.MINUTES);

        //5. 發(fā)送驗證碼 模擬發(fā)送
        log.debug("發(fā)送短信驗證碼成功，驗證碼:{}",code);
        //返回ok
        return Result.ok();
    }

@Override
    public Result login(LoginFormDTO loginForm, HttpSession session) {
        //1. 校驗手機號
        String phone = loginForm.getPhone();
        if (RegexUtils.isPhoneInvalid(phone)) {
            return Result.fail("手機號格式錯誤");
        }
        //2. 獲取Redis中的校驗驗證碼
        String cacheCode = stringRedisTemplate.opsForValue().get("loginCode" + phone);

        // 3.獲取表單中的驗證碼
        String code = loginForm.getCode();
        if (cacheCode == null || !cacheCode.toString().equals(code)){
            //3. 不一致，報錯
            return Result.fail("驗證碼錯誤");
        }

        //4.一致，根據(jù)手機號查詢用戶
        User user = query().eq("phone", phone).one();

        //5. 判斷用戶是否存在
        if (user == null){
            //6. 不存在，創(chuàng)建新用戶
            user = createUserWithPhone(phone);
        }

        //7.保存用戶信息到session
        // 生成token
        String token = UUID.randomUUID().toString();
        // 將User轉(zhuǎn)為Map
        UserDTO userDTO = BeanUtil.copyProperties(user, UserDTO.class);
        Map<String, Object> userDtoMap = BeanUtil.beanToMap(userDTO);
        // 存儲
        stringRedisTemplate.opsForHash().putAll("login:token:"+token,userDtoMap);
        // 設(shè)置有效期30分鐘
        stringRedisTemplate.expire("login:token:"+token,30, TimeUnit.MINUTES);
        // 返回token給前端
        return Result.ok(token);
    }

public class RefreshTokenInterceptor implements HandlerInterceptor {

    private StringRedisTemplate stringRedisTemplate;

    public RefreshTokenInterceptor(StringRedisTemplate stringRedisTemplate) {
        this.stringRedisTemplate = stringRedisTemplate;
    }

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        // 1.獲取請求頭中的token
        String token = request.getHeader("authorization");
        if (StrUtil.isBlank(token)) {
            return true;
        }
        // 2.基于TOKEN獲取redis中的用戶
        String key  = "login:token:" + token;
        Map<Object, Object> userMap = stringRedisTemplate.opsForHash().entries(key);
        // 3.判斷用戶是否存在
        if (userMap.isEmpty()) {
            return true;
        }
        // 5.將查詢到的hash數(shù)據(jù)轉(zhuǎn)為UserDTO
        UserDTO userDTO = BeanUtil.fillBeanWithMap(userMap, new UserDTO(), false);
        // 6.存在，保存用戶信息到 ThreadLocal
        UserHolder.saveUser(userDTO);
        // 7.刷新token有效期
        stringRedisTemplate.expire(key, LOGIN_USER_TTL, TimeUnit.MINUTES);
        // 8.放行
        return true;
    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
        // 移除用戶
        UserHolder.removeUser();
    }
}

public class LoginInterceptor implements HandlerInterceptor {

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        // ThreadLocal中獲取用戶信息
        if (UserHolder.getUser()==null){
            response.setStatus(401);
            return false;
        }
        // 放行
        return true;
    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
        //移除用戶
        UserHolder.removeUser();
    }
}

@Configuration
public class MvcConfig implements WebMvcConfigurer {
    @Autowired
    private StringRedisTemplate redisTemplate;

    @Override
    public void addInterceptors(InterceptorRegistry registry) {


        // 登錄攔截器
        registry.addInterceptor(new LoginInterceptor())
                .excludePathPatterns(
                        // 配置不需要被攔截的路徑
                        "/shop/**",
                        "/voucher/**",
                        "/shop-type/**",
                        "/upload/**",
                        "/blog/hot",
                        "/user/code",
                        "/user/login"
                ).order(1);

        registry.addInterceptor(new RefreshTokenInterceptor(redisTemplate))
                .excludePathPatterns(
                        "/user/login",
                        "/user/code"
                ).order(0);
    }
}