<dependencies>
    <!-- Spring Boot Starter Web -->
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>
    <!-- Sa-Token核心依賴 -->
    <dependency>
        <groupId>cn.dev33</groupId>
        <artifactId>sa-token-spring-boot-starter</artifactId>
        <version>1.34.0</version>
    </dependency>
</dependencies>

# Sa-Token配置，可根據(jù)需要進(jìn)行調(diào)整
sa-token:
  # token有效期，單位秒，默認(rèn)30天
  timeout: 2592000
  # 是否打開二級(jí)登錄校驗(yàn)
  open-safe: false

import cn.dev33.satoken.interceptor.SaAnnotationInterceptor;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.*;
@Configuration
public class SaTokenConfigure implements WebMvcConfigurer {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        // 注冊(cè)Sa-Token的注解攔截器，攔截所有路徑
        registry.addInterceptor(new SaAnnotationInterceptor()).addPathPatterns("/**");
    }
}

import cn.dev33.satoken.stp.StpUtil;
import org.springframework.web.bind.annotation.*;
@RestController
public class LoginController {
    @PostMapping("/login")
    public String login(@RequestParam String username, @RequestParam String password) {
        // 1. 校驗(yàn)用戶名和密碼（這里模擬一個(gè)簡(jiǎn)單的校驗(yàn)）
        if("admin".equals(username) && "123456".equals(password)) {
            // 2. 登錄，保存用戶ID為10001
            StpUtil.login(10001);
            return "登錄成功，Token：" + StpUtil.getTokenValue();
        }
        return "用戶名或密碼錯(cuò)誤";
    }
}

import cn.dev33.satoken.annotation.SaCheckPermission;
import cn.dev33.satoken.stp.StpUtil;
import org.springframework.web.bind.annotation.*;
@RestController
@RequestMapping("/user")
public class UserController {
    // 查詢用戶信息，需登錄
    @GetMapping("/info")
    public String getUserInfo() {
        // 校驗(yàn)是否登錄
        StpUtil.checkLogin();
        // 獲取用戶ID
        int userId = StpUtil.getLoginIdAsInt();
        return "當(dāng)前用戶信息，ID：" + userId;
    }
    // 修改用戶信息，需有權(quán)限"user:update"
    @SaCheckPermission("user:update")
    @PostMapping("/update")
    public String updateUser() {
        return "用戶信息更新成功";
    }
}

import cn.dev33.satoken.annotation.SaCheckRole;
import org.springframework.web.bind.annotation.*;
@RestController
@RequestMapping("/admin")
public class AdminController {
    // 僅管理員角色可訪問
    @SaCheckRole("admin")
    @GetMapping("/dashboard")
    public String adminDashboard() {
        return "歡迎進(jìn)入管理員控制臺(tái)";
    }
}

import cn.dev33.satoken.stp.StpInterface;
import org.springframework.stereotype.Component;
import java.util.*;
@Component
public class StpInterfaceImpl implements StpInterface {
    // 返回一個(gè)用戶所擁有的權(quán)限碼集合
    @Override
    public List<String> getPermissionList(Object loginId, String loginKey) {
        // 模擬從數(shù)據(jù)庫(kù)獲取權(quán)限
        List<String> permissionList = new ArrayList<>();
        if("10001".equals(loginId.toString())) {
            permissionList.add("user:update");
            permissionList.add("user:delete");
        }
        return permissionList;
    }
    // 返回一個(gè)用戶所擁有的角色標(biāo)識(shí)集合 (權(quán)限與角色可分開校驗(yàn))
    @Override
    public List<String> getRoleList(Object loginId, String loginKey) {
        // 模擬從數(shù)據(jù)庫(kù)獲取角色
        List<String> roleList = new ArrayList<>();
        if("10001".equals(loginId.toString())) {
            roleList.add("admin");
        }
        return roleList;
    }
}

import cn.dev33.satoken.session.SaSession;
import cn.dev33.satoken.stp.StpUtil;
public void sessionDemo() {
    // 獲取當(dāng)前會(huì)話的Session
    SaSession session = StpUtil.getSession();
    // 存儲(chǔ)數(shù)據(jù)
    session.set("name", "張三");
    session.set("email", "zhangsan@example.com");
    // 獲取數(shù)據(jù)
    String name = session.getString("name");
    String email = session.getString("email");
    // 輸出
    System.out.println("姓名：" + name);
    System.out.println("郵箱：" + email);
}

// 將用戶ID為10001的用戶踢下線
StpUtil.logoutByLoginId(10001);
// 檢查用戶是否已被踢下線
boolean isLogout = StpUtil.isLogin();
System.out.println("用戶是否登錄：" + isLogout);

// 注銷登錄
StpUtil.logout();
// 檢查登錄狀態(tài)
boolean isLogin = StpUtil.isLogin();
System.out.println("用戶是否登錄：" + isLogin);

<dependency>
    <groupId>cn.dev33</groupId>
    <artifactId>sa-token-dao-redis</artifactId>
    <version>1.34.0</version>
</dependency>

import cn.dev33.satoken.dao.SaTokenDao;
import cn.dev33.satoken.dao.SaTokenDaoRedis;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
@Configuration
public class SaTokenDaoConfig {
    @Bean
    public SaTokenDao saTokenDao() {
        // 返回Redis實(shí)現(xiàn)
        return new SaTokenDaoRedis();
    }
}

# 配置Redis連接信息
spring:
  redis:
    host: localhost
    port: 6379
    password:

<dependency>
    <groupId>cn.dev33</groupId>
    <artifactId>sa-token-sso</artifactId>
    <version>1.34.0</version>
</dependency>

# SSO單點(diǎn)登錄配置
sa-token:
  sso:
    mode: client
    server-url: http://sso-server.com
    client-url: http://client1.com

**實(shí)現(xiàn)SSO登錄邏輯：**
在客戶端應(yīng)用中，配置SSO的攔截器，自動(dòng)處理單點(diǎn)登錄。
**SaTokenConfigure.java**
```java
import cn.dev33.satoken.sso.SaSsoHandle;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.*;
@Configuration
public class SaTokenConfigure implements WebMvcConfigurer {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        // 注冊(cè)SSO攔截器
        registry.addInterceptor(new SaSsoHandle()).addPathPatterns("/**");
    }
}

<dependency>
    <groupId>cn.dev33</groupId>
    <artifactId>sa-token-oauth2</artifactId>
    <version>1.34.0</version>
</dependency>

// 管理員登錄，loginKey為"admin"
StpUtil.login(10001, "admin");

// 檢查當(dāng)前賬號(hào)體系下是否登錄
boolean isLogin = StpUtil.isLogin("admin");

// 在指定賬號(hào)體系下進(jìn)行權(quán)限驗(yàn)證
StpUtil.checkPermission("user:update", "admin");