fix: [新增课程报名情况]

This commit is contained in:
ovo 2025-05-11 19:43:22 +08:00
parent 86f1df5e08
commit 541a993cb5
9 changed files with 161 additions and 4 deletions

46
docs/springSecurity.md Normal file
View File

@ -0,0 +1,46 @@
是的Spring Security 在每次带有 token 的请求中,确实都会走一遍认证流程,但并不一定每次都“存储”认证信息,具体行为取决于你使用的 token 类型(如 JWT、Session、OAuth2 等)和安全配置。
一、JWT常见于无状态登录
如果你使用的是 JWTJSON Web Token这种无状态认证机制
每次请求都要带上 token通常放在 Authorization Header 中)
Spring Security 会通过一个过滤器(如 OncePerRequestFilter解析这个 token
验证 token 的有效性(比如签名、过期时间)
从 token 中解析用户信息(如用户名、角色),然后在当前请求的 SecurityContext 中构建认证对象
请求处理完后SecurityContext 是线程局部的,不会跨请求存储,下次请求又要重新走这个流程
✅ 好处是服务无状态、扩展性强
❌ 每次请求都要解析和验证 token有一定性能开销
二、Session默认方式
如果你使用的是 Spring Security 默认的基于 Session 的认证机制:
登录成功后服务端会生成一个 SessionId并将其通过 Cookie 返回给客户端
客户端下次请求自动带上 Cookie
Spring Security 会通过这个 SessionId 直接从服务端 Session 中获取用户的认证信息
如果存在有效 Session就不需要重新认证不走身份验证流程
✅ 好处是性能较高
❌ 缺点是服务有状态,不利于分布式部署(需共享 Session
三、OAuth2 TokenResource Server 模式)
如果你用的是 OAuth2比如使用 spring-security-oauth2-resource-server
每次请求带上 Bearer Token
Spring Security 会通过配置好的 JwtDecoder 验证 token或远程调用 introspection endpoint
同样会在请求级别构建一次 Authentication 对象,不会存储
总结
场景 每次验证 Token 认证信息是否持久化
JWT ✅ 是 ❌ 否,线程局部
Session ❌ 否,登录一次 ✅ 是,存储在 Session
OAuth2 Resource Server ✅ 是 ❌ 否,线程局部

View File

@ -7,5 +7,3 @@ courseDetail查询时候加入userId
进度表
webChat
courseCenter View 里面对于course 新增分类 级别

View File

@ -19,6 +19,8 @@ public class SecurityConstants {
"/bs/user/getPhoneCode",
"/bs/user/verifyFace",
"/bs/courses/queryByPage",
"/challenge",
"/ws/**",
"/faceTest", "/compareFaces",
@ -26,7 +28,7 @@ public class SecurityConstants {
"/exam/api/paper/**",
"/bs/courses/**",
"/bs/courses/queryByPage",
"/api/common/**", //公共接口
"/demo/**", // 测试接口
"/api/products",

View File

@ -0,0 +1,18 @@
package com.guwan.backend.mapper;
import com.guwan.backend.pojo.entity.UserCourseRegistration;
import com.baomidou.mybatisplus.core.mapper.BaseMapper;
/**
* @author 12455
* @description 针对表user_course_registration的数据库操作Mapper
* @createDate 2025-05-11 19:27:07
* @Entity com.guwan.backend.pojo.entity.UserCourseRegistration
*/
public interface UserCourseRegistrationMapper extends BaseMapper<UserCourseRegistration> {
}

View File

@ -0,0 +1,30 @@
package com.guwan.backend.pojo.entity;
import com.baomidou.mybatisplus.annotation.IdType;
import com.baomidou.mybatisplus.annotation.TableId;
import com.baomidou.mybatisplus.annotation.TableName;
import lombok.Data;
/**
*
* @TableName user_course_registration
*/
@TableName(value ="user_course_registration")
@Data
public class UserCourseRegistration {
/**
*
*/
@TableId(type = IdType.AUTO)
private Integer id;
/**
*
*/
private Integer userId;
/**
*
*/
private Integer courseId;
}

View File

@ -0,0 +1,13 @@
package com.guwan.backend.service;
import com.guwan.backend.pojo.entity.UserCourseRegistration;
import com.baomidou.mybatisplus.extension.service.IService;
/**
* @author 12455
* @description 针对表user_course_registration的数据库操作Service
* @createDate 2025-05-11 19:27:07
*/
public interface UserCourseRegistrationService extends IService<UserCourseRegistration> {
}

View File

@ -11,6 +11,7 @@ import com.guwan.backend.pojo.response.courseDetail.ChapterVO;
import com.guwan.backend.pojo.response.courseDetail.CourseDetailVO;
import com.guwan.backend.pojo.response.courseDetail.ReviewVO;
import com.guwan.backend.service.CourseService;
import com.guwan.backend.util.SecurityUtil;
import lombok.RequiredArgsConstructor;
import org.springframework.beans.BeanUtils;
import org.springframework.stereotype.Service;
@ -50,11 +51,17 @@ public class CourseServiceImpl extends ServiceImpl<CourseMapper, Course>
private final CourseTypeMapper courseTypeMapper;
private final SecurityUtil securityUtil;
private final UserCourseRegistrationMapper userCourseRegistrationMapper;
private static final Map<String, Integer> courseStudentCounts = new ConcurrentHashMap<>();
@Override
public CourseDetailVO getCourseDetail(String courseId) {
Long currentUserId = securityUtil.getCurrentUserId();
//首选查询course表
Course course = courseMapper.selectOne(new LambdaQueryWrapper<Course>().eq(Course::getId, courseId));
@ -130,7 +137,12 @@ public class CourseServiceImpl extends ServiceImpl<CourseMapper, Course>
courseDetailVO.setTotalDuration(totalTimeOfMinute / 60);
courseDetailVO.setEnrolled(false);
UserCourseRegistration userCourseRegistration = userCourseRegistrationMapper.selectOne(new LambdaQueryWrapper<UserCourseRegistration>()
.eq(UserCourseRegistration::getCourseId, courseId)
.eq(UserCourseRegistration::getUserId, currentUserId));
courseDetailVO.setEnrolled(userCourseRegistration != null);
courseDetailVO.setCoverImg(course.getCoverImg());
List<ChapterVO> chapterVOList = new ArrayList<>();

View File

@ -0,0 +1,22 @@
package com.guwan.backend.service.impl;
import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl;
import com.guwan.backend.mapper.UserCourseRegistrationMapper;
import com.guwan.backend.pojo.entity.UserCourseRegistration;
import com.guwan.backend.service.UserCourseRegistrationService;
import org.springframework.stereotype.Service;
/**
* @author 12455
* @description 针对表user_course_registration的数据库操作Service实现
* @createDate 2025-05-11 19:27:07
*/
@Service
public class UserCourseRegistrationServiceImpl extends ServiceImpl<UserCourseRegistrationMapper, UserCourseRegistration>
implements UserCourseRegistrationService {
}

View File

@ -0,0 +1,16 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE mapper
PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
"http://mybatis.org/dtd/mybatis-3-mapper.dtd">
<mapper namespace="com.guwan.backend.mapper.UserCourseRegistrationMapper">
<resultMap id="BaseResultMap" type="com.guwan.backend.pojo.entity.UserCourseRegistration">
<id property="id" column="id" jdbcType="INTEGER"/>
<result property="userId" column="user_id" jdbcType="INTEGER"/>
<result property="courseId" column="course_id" jdbcType="INTEGER"/>
</resultMap>
<sql id="Base_Column_List">
id,user_id,course_id
</sql>
</mapper>