demo: 新增 SpringBoot4 整合 demo 示例

mvn clean.bat

@@ -24,6 +24,7 @@ cd sa-token-demo-solon & call mvn clean & cd ..
 cd sa-token-demo-solon-redisson & call mvn clean & cd ..
 cd sa-token-demo-springboot & call mvn clean & cd ..
 cd sa-token-demo-springboot3-redis & call mvn clean & cd ..
+cd sa-token-demo-springboot4-redis & call mvn clean & cd ..
 cd sa-token-demo-springboot-low-version & call mvn clean & cd ..
 cd sa-token-demo-springboot-redis & call mvn clean & cd ..
 cd sa-token-demo-springboot-redisson & call mvn clean & cd ..

sa-token-bom/pom.xml

@@ -81,6 +81,11 @@
                 <artifactId>sa-token-spring-boot3-starter</artifactId>
                 <version>${revision}</version>
             </dependency>
+            <dependency>
+                <groupId>cn.dev33</groupId>
+                <artifactId>sa-token-spring-boot4-starter</artifactId>
+                <version>${revision}</version>
+            </dependency>
             <!-- endregion-->
 
             <!-- region sa-token-plugin -->

sa-token-demo/pom.xml

@@ -35,6 +35,7 @@
 		<module>sa-token-demo-solon-redisson</module>
 		<module>sa-token-demo-springboot</module>
 		<module>sa-token-demo-springboot3-redis</module>
+		<module>sa-token-demo-springboot4-redis</module>
 		<module>sa-token-demo-springboot-low-version</module>
 		<module>sa-token-demo-springboot-redis</module>
 		<module>sa-token-demo-springboot-redisson</module>

sa-token-demo/sa-token-demo-springboot4-redis/pom.xml

@@ -0,0 +1,64 @@
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+	<modelVersion>4.0.0</modelVersion>
+	<groupId>cn.dev33</groupId>
+	<artifactId>sa-token-demo-springboot4-redis</artifactId>
+	<version>0.0.1-SNAPSHOT</version>
+	
+	<!-- SpringBoot 4 -->
+	<parent>
+		<groupId>org.springframework.boot</groupId>
+		<artifactId>spring-boot-starter-parent</artifactId>
+		<version>4.0.3</version>
+		<relativePath/>
+	</parent>
+	
+	<!-- 定义 Sa-Token 版本号 -->
+	<properties>
+		<sa-token.version>1.44.0</sa-token.version>
+	</properties>
+
+	<dependencies>
+
+		<!-- SpringBoot 4 依赖：webmvc 替代 deprecated 的 starter-web，aspectj 替代 starter-aop -->
+		<dependency>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-starter-webmvc</artifactId>
+		</dependency>
+		<dependency>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-starter-aspectj</artifactId>
+		</dependency>
+		
+		<!-- Sa-Token 权限认证, 在线文档：https://sa-token.cc/ -->
+		<dependency>
+            <groupId>cn.dev33</groupId>
+            <artifactId>sa-token-spring-boot4-starter</artifactId>
+            <version>${sa-token.version}</version>
+        </dependency>
+        
+		<!-- Sa-Token整合 Redis (使用jackson序列化方式) -->
+		<dependency>
+            <groupId>cn.dev33</groupId>
+            <artifactId>sa-token-redis-jackson</artifactId>
+            <version>${sa-token.version}</version>
+        </dependency>
+        
+		<!-- 提供Redis连接池 -->
+		<dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-pool2</artifactId>
+        </dependency>
+        
+		<!-- @ConfigurationProperties -->
+		<dependency>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-configuration-processor</artifactId>
+			<optional>true</optional>
+		</dependency>
+
+	</dependencies>
+	
+	
+</project>

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/SaTokenSpringBoot4Application.java

@@ -0,0 +1,20 @@
+package com.pj;
+
+import cn.dev33.satoken.SaManager;
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+/**
+ * Sa-Token 整合 SpringBoot4 示例，整合 redis  
+ * @author click33
+ *
+ */
+@SpringBootApplication
+public class SaTokenSpringBoot4Application {
+
+	public static void main(String[] args) {
+		SpringApplication.run(SaTokenSpringBoot4Application.class, args); 
+		System.out.println("\n🎉 启动成功：Sa-Token配置如下：" + SaManager.getConfig());
+	}
+
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/current/GlobalException.java

@@ -0,0 +1,56 @@
+package com.pj.current;
+
+import org.springframework.web.bind.annotation.ExceptionHandler;
+import org.springframework.web.bind.annotation.RestControllerAdvice;
+
+import com.pj.util.AjaxJson;
+
+import cn.dev33.satoken.exception.DisableServiceException;
+import cn.dev33.satoken.exception.NotLoginException;
+import cn.dev33.satoken.exception.NotPermissionException;
+import cn.dev33.satoken.exception.NotRoleException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+
+/**
+ * 全局异常处理 
+ */
+@RestControllerAdvice
+public class GlobalException {
+
+	// 全局异常拦截（拦截项目中的所有异常）
+	@ExceptionHandler
+	public AjaxJson handlerException(Exception e, HttpServletRequest request, HttpServletResponse response)
+			throws Exception {
+
+		// 打印堆栈，以供调试
+		System.out.println("全局异常---------------");
+		e.printStackTrace(); 
+
+		// 不同异常返回不同状态码 
+		AjaxJson aj = null;
+		if (e instanceof NotLoginException) {	// 如果是未登录异常
+			NotLoginException ee = (NotLoginException) e;
+			aj = AjaxJson.getNotLogin().setMsg(ee.getMessage());
+		} 
+		else if(e instanceof NotRoleException) {		// 如果是角色异常
+			NotRoleException ee = (NotRoleException) e;
+			aj = AjaxJson.getNotJur("无此角色：" + ee.getRole());
+		} 
+		else if(e instanceof NotPermissionException) {	// 如果是权限异常
+			NotPermissionException ee = (NotPermissionException) e;
+			aj = AjaxJson.getNotJur("无此权限：" + ee.getPermission());
+		} 
+		else if(e instanceof DisableServiceException) {	// 如果是被封禁异常
+			DisableServiceException ee = (DisableServiceException) e;
+			aj = AjaxJson.getNotJur("当前账号 " + ee.getService() + " 服务已被封禁 (level=" + ee.getLevel() + ")：" + ee.getDisableTime() + "秒后解封");
+		} 
+		else {	// 普通异常, 输出：500 + 异常信息 
+			aj = AjaxJson.getError(e.getMessage());
+		}
+		
+		// 返回给前端
+		return aj;
+	}
+	
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/current/NotFoundHandle.java

@@ -0,0 +1,26 @@
+//package com.pj.current;
+//
+//import java.io.IOException;
+//
+//import org.springframework.boot.web.servlet.error.ErrorController;
+//import org.springframework.web.bind.annotation.RequestMapping;
+//import org.springframework.web.bind.annotation.RestController;
+//
+//import cn.dev33.satoken.util.SaResult;
+//import jakarta.servlet.http.HttpServletRequest;
+//import jakarta.servlet.http.HttpServletResponse;
+//
+///**
+// * 处理 404
+// * @author click33
+// */
+//@RestController
+//public class NotFoundHandle implements ErrorController {
+//
+//	@RequestMapping("/error")
+//    public Object error(HttpServletRequest request, HttpServletResponse response) throws IOException {
+//		response.setStatus(200);
+//        return SaResult.get(404, "not found", null);
+//    }
+//
+//}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/satoken/SaTokenConfigure.java

@@ -0,0 +1,71 @@
+package com.pj.satoken;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+import cn.dev33.satoken.context.SaHolder;
+import cn.dev33.satoken.filter.SaServletFilter;
+import cn.dev33.satoken.interceptor.SaInterceptor;
+import cn.dev33.satoken.util.SaResult;
+
+
+/**
+ * [Sa-Token 权限认证] 配置类 
+ * @author click33
+ *
+ */
+@Configuration
+public class SaTokenConfigure implements WebMvcConfigurer {
+	
+	/**
+	 * 注册 Sa-Token 拦截器打开注解鉴权功能  
+	 */
+	@Override
+	public void addInterceptors(InterceptorRegistry registry) {
+		// 注册 Sa-Token 拦截器打开注解鉴权功能 
+		registry.addInterceptor(new SaInterceptor()).addPathPatterns("/**");
+	}
+	
+	/**
+     * 注册 [Sa-Token 全局过滤器] 
+     */
+    @Bean
+    public SaServletFilter getSaServletFilter() {
+        return new SaServletFilter()
+        		
+        		// 指定 [拦截路由] 与 [放行路由]
+        		.addInclude("/**")// .addExclude("/favicon.ico")
+        		
+        		// 认证函数: 每次请求执行 
+        		.setAuth(obj -> {
+        			// System.out.println("---------- sa全局认证 " + SaHolder.getRequest().getRequestPath()); 
+        			
+        		})
+        		
+        		// 异常处理函数：每次认证函数发生异常时执行此函数 
+        		.setError(e -> {
+        			System.out.println("---------- sa全局异常 ");
+        			e.printStackTrace();
+        			return SaResult.error(e.getMessage());
+        		})
+        		
+        		// 前置函数：在每次认证函数之前执行（BeforeAuth 不受 includeList 与 excludeList 的限制，所有请求都会进入）
+        		.setBeforeAuth(r -> {
+        			// ---------- 设置一些安全响应头 ----------
+        			SaHolder.getResponse()
+        			// 服务器名称 
+        			.setServer("sa-server")
+        			// 是否可以在iframe显示视图： DENY=不可以 | SAMEORIGIN=同域下可以 | ALLOW-FROM uri=指定域名下可以 
+        			.setHeader("X-Frame-Options", "SAMEORIGIN")
+        			// 是否启用浏览器默认XSS防护： 0=禁用 | 1=启用 | 1; mode=block 启用, 并在检查到XSS攻击时，停止渲染页面
+        			.setHeader("X-XSS-Protection", "1; mode=block")
+        			// 禁用浏览器内容嗅探 
+        			.setHeader("X-Content-Type-Options", "nosniff")
+        			;
+        		})
+        		;
+    }
+    
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/satoken/StpInterfaceImpl.java

@@ -0,0 +1,44 @@
+package com.pj.satoken;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import org.springframework.stereotype.Component;
+
+import cn.dev33.satoken.stp.StpInterface;
+
+/**
+ * 自定义权限验证接口扩展 
+ */
+@Component	// 打开此注解，保证此类被springboot扫描，即可完成sa-token的自定义权限验证扩展 
+public class StpInterfaceImpl implements StpInterface {
+
+	/**
+	 * 返回一个账号所拥有的权限码集合 
+	 */
+	@Override
+	public List<String> getPermissionList(Object loginId, String loginType) {
+		// 本list仅做模拟，实际项目中要根据具体业务逻辑来查询权限
+		List<String> list = new ArrayList<String>();	
+		list.add("101");
+		list.add("user-add");
+		list.add("user-delete");
+		list.add("user-update");
+		list.add("user-get");
+		list.add("article-get");
+		return list;
+	}
+
+	/**
+	 * 返回一个账号所拥有的角色标识集合 
+	 */
+	@Override
+	public List<String> getRoleList(Object loginId, String loginType) {
+		// 本list仅做模拟，实际项目中要根据具体业务逻辑来查询角色
+		List<String> list = new ArrayList<String>();	
+		list.add("admin");
+		list.add("super-admin");
+		return list;
+	}
+
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/test/AtController.java

@@ -0,0 +1,80 @@
+package com.pj.test;
+
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import cn.dev33.satoken.annotation.SaCheckHttpBasic;
+import cn.dev33.satoken.annotation.SaCheckLogin;
+import cn.dev33.satoken.annotation.SaCheckPermission;
+import cn.dev33.satoken.annotation.SaCheckRole;
+import cn.dev33.satoken.annotation.SaCheckSafe;
+import cn.dev33.satoken.annotation.SaMode;
+import cn.dev33.satoken.stp.StpUtil;
+import cn.dev33.satoken.util.SaResult;
+
+/**
+ * 注解鉴权测试 
+ * @author click33
+ *
+ */
+@RestController
+@RequestMapping("/at/")
+public class AtController {
+
+	// 登录认证，登录之后才可以进入方法  ---- http://localhost:8082/at/checkLogin 
+	@SaCheckLogin
+	@RequestMapping("checkLogin")
+	public SaResult checkLogin() {
+		return SaResult.ok();
+	}
+	
+	// 权限认证，具备user-add权限才可以进入方法  ---- http://localhost:8082/at/checkPermission 
+	@SaCheckPermission("user-add")
+	@RequestMapping("checkPermission")
+	public SaResult checkPermission() {
+		return SaResult.ok();
+	}
+
+	// 权限认证，同时具备所有权限才可以进入  ---- http://localhost:8082/at/checkPermissionAnd 
+	@SaCheckPermission({"user-add", "user-delete", "user-update"})
+	@RequestMapping("checkPermissionAnd")
+	public SaResult checkPermissionAnd() {
+		return SaResult.ok();
+	}
+
+	// 权限认证，只要具备其中一个就可以进入  ---- http://localhost:8082/at/checkPermissionOr 
+	@SaCheckPermission(value = {"user-add", "user-delete", "user-update"}, mode = SaMode.OR)
+	@RequestMapping("checkPermissionOr")
+	public SaResult checkPermissionOr() {
+		return SaResult.ok();
+	}
+
+	// 角色认证，只有具备admin角色才可以进入  ---- http://localhost:8082/at/checkRole 
+	@SaCheckRole("admin")
+	@RequestMapping("checkRole")
+	public SaResult checkRole() {
+		return SaResult.ok();
+	}
+
+	// 完成二级认证  ---- http://localhost:8082/at/openSafe 
+	@RequestMapping("openSafe")
+	public SaResult openSafe() {
+		StpUtil.openSafe(200); // 打开二级认证，有效期为200秒
+		return SaResult.ok();
+	}
+	
+	// 通过二级认证后才可以进入  ---- http://localhost:8082/at/checkSafe 
+	@SaCheckSafe
+	@RequestMapping("checkSafe")
+	public SaResult checkSafe() {
+		return SaResult.ok();
+	}
+	
+	// 通过Basic认证后才可以进入  ---- http://localhost:8082/at/checkBasic 
+	@SaCheckHttpBasic(account = "sa:123456")
+	@RequestMapping("checkBasic")
+	public SaResult checkBasic() {
+		return SaResult.ok();
+	}
+	
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/test/LoginController.java

@@ -0,0 +1,48 @@
+package com.pj.test;
+
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import cn.dev33.satoken.stp.StpUtil;
+import cn.dev33.satoken.util.SaResult;
+
+/**
+ * 登录测试 
+ * @author click33
+ *
+ */
+@RestController
+@RequestMapping("/acc/")
+public class LoginController {
+
+	// 测试登录  ---- http://localhost:8082/acc/doLogin?name=zhang&pwd=123456
+	@RequestMapping("doLogin")
+	public SaResult doLogin(String name, String pwd) {
+		// 此处仅作模拟示例，真实项目需要从数据库中查询数据进行比对 
+		if("zhang".equals(name) && "123456".equals(pwd)) {
+			StpUtil.login(10001);
+			return SaResult.ok("登录成功");
+		}
+		return SaResult.error("登录失败");
+	}
+
+	// 查询登录状态  ---- http://localhost:8082/acc/isLogin
+	@RequestMapping("isLogin")
+	public SaResult isLogin() {
+		return SaResult.ok("是否登录：" + StpUtil.isLogin());
+	}
+
+	// 查询 Token 信息  ---- http://localhost:8082/acc/tokenInfo
+	@RequestMapping("tokenInfo")
+	public SaResult tokenInfo() {
+		return SaResult.data(StpUtil.getTokenInfo());
+	}
+	
+	// 测试注销  ---- http://localhost:8082/acc/logout
+	@RequestMapping("logout")
+	public SaResult logout() {
+		StpUtil.logout();
+		return SaResult.ok();
+	}
+	
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/test/StressTestController.java

@@ -0,0 +1,61 @@
+package com.pj.test;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import com.pj.util.Ttime;
+
+import cn.dev33.satoken.stp.StpUtil;
+import cn.dev33.satoken.util.SaResult;
+
+/**
+ * 压力测试 
+ * @author click33
+ *
+ */
+@RestController
+@RequestMapping("/s-test/")
+public class StressTestController {
+
+	// 测试   浏览器访问： http://localhost:8082/s-test/login 
+	// 测试前，请先将 is-read-cookie 配置为 false
+	@RequestMapping("login")
+	public SaResult login() {
+//			StpUtil.getTokenSession().logout();
+//			StpUtil.logoutByLoginId(10001);
+
+		int count = 10;	// 循环多少轮 
+		int loginCount = 10000;	// 每轮循环多少次  
+		
+		// 循环10次 取平均时间 
+		List<Double> list = new ArrayList<>();
+		for (int i = 1; i <= count; i++) {
+			System.out.println("\n---------------------第" + i + "轮---------------------");
+			Ttime t = new Ttime().start();
+			// 每次登录的次数
+			for (int j = 1; j <= loginCount; j++) {
+				StpUtil.login("1000" + j, "PC-" + j);
+				if(j % 1000 == 0) {
+					System.out.println("已登录：" + j);
+				}
+			}
+			t.end();
+			list.add((t.returnMs() + 0.0) / 1000);
+			System.out.println("第" + i + "轮" + "用时：" + t.toString());
+		}
+//			System.out.println(((SaTokenDaoDefaultImpl)SaTokenManager.getSaTokenDao()).dataMap.size());
+		
+		System.out.println("\n---------------------测试结果---------------------");
+		System.out.println(list.size() + "次测试: " + list);
+		double ss = 0;
+		for (int i = 0; i < list.size(); i++) {
+			ss += list.get(i);
+		}
+		System.out.println("平均用时: " + ss / list.size());
+		return SaResult.ok();
+	}
+	
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/test/TestController.java

@@ -0,0 +1,43 @@
+package com.pj.test;
+
+import cn.dev33.satoken.context.SaHolder;
+import cn.dev33.satoken.servlet.util.SaTokenContextJakartaServletUtil;
+import cn.dev33.satoken.spring.SpringMVCUtil;
+import cn.dev33.satoken.util.SaResult;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+/**
+ * 测试专用Controller 
+ * @author click33
+ *
+ */
+@RestController
+@RequestMapping("/test/")
+public class TestController {
+
+	// 测试   浏览器访问： http://localhost:8082/test/test
+	@RequestMapping("test")
+	public SaResult test() {
+		System.out.println("------------进来了");
+		System.out.println(SpringMVCUtil.getRequest());
+		System.out.println(SaTokenContextJakartaServletUtil.getRequest());
+		return SaResult.ok();
+	}
+	
+	// 测试   浏览器访问： http://localhost:8082/test/test2
+	@RequestMapping("test2")
+	public SaResult test2() {
+		return SaResult.ok();
+	}
+
+	// 测试   浏览器访问： http://localhost:8082/test/getRequestPath
+	@RequestMapping("getRequestPath")
+	public SaResult getRequestPath() {
+		System.out.println("-------------- 测试请求 path 获取");
+		System.out.println("request.getRequestURI() " + SpringMVCUtil.getRequest().getRequestURI());
+		System.out.println("saRequest.getRequestPath() " + SaHolder.getRequest().getRequestPath());
+		return SaResult.ok();
+	}
+
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/util/AjaxJson.java

@@ -0,0 +1,162 @@
+package com.pj.util;
+
+import java.io.Serializable;
+import java.util.List;
+
+
+/**
+ * ajax请求返回Json格式数据的封装 
+ */
+public class AjaxJson implements Serializable{
+
+	private static final long serialVersionUID = 1L;	// 序列化版本号
+	
+	public static final int CODE_SUCCESS = 200;			// 成功状态码
+	public static final int CODE_ERROR = 500;			// 错误状态码
+	public static final int CODE_WARNING = 501;			// 警告状态码
+	public static final int CODE_NOT_JUR = 403;			// 无权限状态码
+	public static final int CODE_NOT_LOGIN = 401;		// 未登录状态码
+	public static final int CODE_INVALID_REQUEST = 400;	// 无效请求状态码
+
+	public int code; 	// 状态码
+	public String msg; 	// 描述信息 
+	public Object data; // 携带对象
+	public Long dataCount;	// 数据总数，用于分页 
+	
+	/**
+	 * 返回code  
+	 * @return
+	 */
+	public int getCode() {
+		return this.code;
+	}
+
+	/**
+	 * 给msg赋值，连缀风格
+	 */
+	public AjaxJson setMsg(String msg) {
+		this.msg = msg;
+		return this;
+	}
+	public String getMsg() {
+		return this.msg;
+	}
+
+	/**
+	 * 给data赋值，连缀风格
+	 */
+	public AjaxJson setData(Object data) {
+		this.data = data;
+		return this;
+	}
+
+	/**
+	 * 将data还原为指定类型并返回
+	 */
+	@SuppressWarnings("unchecked")
+	public <T> T getData(Class<T> cs) {
+		return (T) data;
+	}
+	
+	// ============================  构建  ================================== 
+	
+	public AjaxJson(int code, String msg, Object data, Long dataCount) {
+		this.code = code;
+		this.msg = msg;
+		this.data = data;
+		this.dataCount = dataCount;
+	}
+	
+	// 返回成功
+	public static AjaxJson getSuccess() {
+		return new AjaxJson(CODE_SUCCESS, "ok", null, null);
+	}
+	public static AjaxJson getSuccess(String msg) {
+		return new AjaxJson(CODE_SUCCESS, msg, null, null);
+	}
+	public static AjaxJson getSuccess(String msg, Object data) {
+		return new AjaxJson(CODE_SUCCESS, msg, data, null);
+	}
+	public static AjaxJson getSuccessData(Object data) {
+		return new AjaxJson(CODE_SUCCESS, "ok", data, null);
+	}
+	public static AjaxJson getSuccessArray(Object... data) {
+		return new AjaxJson(CODE_SUCCESS, "ok", data, null);
+	}
+	
+	// 返回失败
+	public static AjaxJson getError() {
+		return new AjaxJson(CODE_ERROR, "error", null, null);
+	}
+	public static AjaxJson getError(String msg) {
+		return new AjaxJson(CODE_ERROR, msg, null, null);
+	}
+	
+	// 返回警告 
+	public static AjaxJson getWarning() {
+		return new AjaxJson(CODE_ERROR, "warning", null, null);
+	}
+	public static AjaxJson getWarning(String msg) {
+		return new AjaxJson(CODE_WARNING, msg, null, null);
+	}
+	
+	// 返回未登录
+	public static AjaxJson getNotLogin() {
+		return new AjaxJson(CODE_NOT_LOGIN, "未登录，请登录后再次访问", null, null);
+	}
+	
+	// 返回没有权限的 
+	public static AjaxJson getNotJur(String msg) {
+		return new AjaxJson(CODE_NOT_JUR, msg, null, null);
+	}
+	
+	// 返回一个自定义状态码的
+	public static AjaxJson get(int code, String msg){
+		return new AjaxJson(code, msg, null, null);
+	}
+	
+	// 返回分页和数据的
+	public static AjaxJson getPageData(Long dataCount, Object data){
+		return new AjaxJson(CODE_SUCCESS, "ok", data, dataCount);
+	}
+	
+	// 返回，根据受影响行数的(大于0=ok，小于0=error)
+	public static AjaxJson getByLine(int line){
+		if(line > 0){
+			return getSuccess("ok", line);
+		}
+		return getError("error").setData(line); 
+	}
+
+	// 返回，根据布尔值来确定最终结果的  (true=ok，false=error)
+	public static AjaxJson getByBoolean(boolean b){
+		return b ? getSuccess("ok") : getError("error"); 
+	}
+	
+	/* (non-Javadoc)
+	 * @see java.lang.Object#toString()
+	 */
+	@SuppressWarnings("rawtypes")
+	@Override
+	public String toString() {
+		String data_string = null;
+		if(data == null){
+			
+		} else if(data instanceof List){
+			data_string = "List(length=" + ((List)data).size() + ")";
+		} else {
+			data_string = data.toString();
+		}
+		return "{"
+				+ "\"code\": " + this.getCode()
+				+ ", \"msg\": \"" + this.getMsg() + "\""
+				+ ", \"data\": " + data_string
+				+ ", \"dataCount\": " + dataCount
+				+ "}";
+	}
+	
+	
+	
+	
+	
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/java/com/pj/util/Ttime.java

@@ -0,0 +1,63 @@
+package com.pj.util;
+
+
+/**
+ * 用于测试用时
+ * @author click33
+ *
+ */
+public class Ttime {
+
+	private long start=0;	//开始时间
+	private long end=0;		//结束时间
+	
+	public static Ttime t = new Ttime();	//static快捷使用
+	
+	/**
+	 * 开始计时
+	 * @return
+	 */
+	public Ttime start() {
+		start=System.currentTimeMillis();
+		return this;
+	}
+	
+	
+	/**
+	 * 结束计时
+	 */
+	public Ttime end() {
+		end=System.currentTimeMillis();
+		return this;
+	}
+
+	
+	/**
+	 * 返回所用毫秒数
+	 */
+	public long returnMs() {
+		return end-start;
+	}
+	
+	/**
+	 * 格式化输出结果
+	 */
+	public void outTime() {
+		System.out.println(this.toString());
+	}
+	
+	/**
+	 * 结束并格式化输出结果
+	 */
+	public void endOutTime() {
+		this.end().outTime();
+	}
+	
+	@Override
+	public String toString() {
+		return (returnMs() + 0.0) / 1000 + "s";		// 格式化为：0.01s
+	}
+	
+	
+	
+}

sa-token-demo/sa-token-demo-springboot4-redis/src/main/resources/application.yml

@@ -0,0 +1,50 @@
+# 端口
+server:
+    port: 8082
+
+# sa-token 配置
+sa-token: 
+    # token 名称 (同时也是 cookie 名称)
+    token-name: satoken
+    # token 有效期（单位：秒） 默认30天，-1 代表永久有效
+    timeout: 2592000
+    # token 最低活跃频率（单位：秒），如果 token 超过此时间没有访问系统就会被冻结，默认-1 代表不限制，永不冻结
+    active-timeout: -1
+    # 是否允许同一账号多地同时登录 （为 true 时允许一起登录, 为 false 时新登录挤掉旧登录）
+    is-concurrent: true
+    # 在多人登录同一账号时，是否共用一个 token （为 true 时所有登录共用一个 token, 为 false 时每次登录新建一个 token）
+    is-share: false
+    # token 风格（默认可取值：uuid、simple-uuid、random-32、random-64、random-128、tik）
+    token-style: uuid
+    # 是否输出操作日志 
+    is-log: true
+
+spring:
+    data: 
+        # redis配置 
+        redis:
+            # Redis数据库索引（默认为0）
+            database: 1
+            # Redis服务器地址
+            host: 127.0.0.1
+            # Redis服务器连接端口
+            port: 6379
+            # Redis服务器连接密码（默认为空）
+            password: 
+            # 连接超时时间
+            timeout: 10s
+            lettuce:
+                pool:
+                    # 连接池最大连接数
+                    max-active: 200
+                    # 连接池最大阻塞等待时间（使用负值表示没有限制）
+                    max-wait: -1ms
+                    # 连接池中的最大空闲连接
+                    max-idle: 10
+                    # 连接池中的最小空闲连接
+                    min-idle: 0
+            
+        
+        
+        
+        

sa-token-dependencies/pom.xml

@@ -17,11 +17,12 @@
 		<!-- 统一定义依赖版本号 -->
 		<springboot.version>2.7.18</springboot.version>
 		<springboot3.version>3.4.3</springboot3.version>
+		<springboot4.version>4.0.3</springboot4.version>
 		<spring-web.low.version>5.3.39</spring-web.low.version>
 		<reactor-core.version>3.7.4</reactor-core.version>
 		<jackson-databind.version>2.13.4.1</jackson-databind.version>	
 		<jackson-datatype-jsr310.version>2.11.2</jackson-datatype-jsr310.version>
-		<jackson3-databind.version>3.0.0</jackson3-databind.version>
+		<jackson3-databind.version>3.1.0</jackson3-databind.version>
 		<servlet-api.version>3.1.0</servlet-api.version>
 		<jakarta-servlet-api.version>6.0.0</jakarta-servlet-api.version>
 		<thymeleaf.version>3.0.9.RELEASE</thymeleaf.version>
@@ -70,6 +71,13 @@
 				<artifactId>spring-boot-starter-web</artifactId>
 				<version>${springboot.version}</version>
 			</dependency>
+
+			<!-- spring-boot-starter-webmvc (Spring Boot 4) -->
+			<dependency>
+				<groupId>org.springframework.boot</groupId>
+				<artifactId>spring-boot-starter-webmvc</artifactId>
+				<version>${springboot4.version}</version>
+			</dependency>
 		
 			<!-- spring-boot-starter -->
 	        <dependency>

sa-token-starter/pom.xml

@@ -23,6 +23,7 @@
         <module>sa-token-spring-boot-autoconfig</module>
         <module>sa-token-spring-boot-starter</module>
         <module>sa-token-spring-boot3-starter</module>
+        <module>sa-token-spring-boot4-starter</module>
         <module>sa-token-reactor-spring-boot-starter</module>
         <module>sa-token-reactor-spring-boot3-starter</module>
         <module>sa-token-solon-plugin</module>

sa-token-starter/sa-token-spring-boot4-starter/pom.xml

@@ -0,0 +1,101 @@
+<?xml version='1.0' encoding='utf-8'?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+	<modelVersion>4.0.0</modelVersion>
+	
+	<parent>
+        <groupId>cn.dev33</groupId>
+        <artifactId>sa-token-starter</artifactId>
+        <version>${revision}</version>
+        <relativePath>../pom.xml</relativePath>
+    </parent>
+    <packaging>jar</packaging>
+
+	<name>sa-token-spring-boot4-starter</name>
+    <artifactId>sa-token-spring-boot4-starter</artifactId>
+	<description>springboot4 integrate sa-token</description>
+
+    <properties>
+		<springboot4.version>4.0.3</springboot4.version>
+    </properties>
+    
+	<dependencies>
+		<!-- spring-boot-starter-webmvc (Spring Boot 4 recommended, replaces deprecated starter-web) -->
+		<dependency>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-starter-webmvc</artifactId>
+		</dependency>
+		
+		<!-- config (optional) -->
+		<dependency>
+			<groupId>org.springframework.boot</groupId>
+			<artifactId>spring-boot-configuration-processor</artifactId>
+			<optional>true</optional>
+		</dependency>
+		
+		<!-- sa-token-jakarta-servlet -->
+		<dependency>
+			<groupId>cn.dev33</groupId>
+			<artifactId>sa-token-jakarta-servlet</artifactId>
+		</dependency>
+		
+		<!-- sa-token-spring-boot-autoconfig (exclude sa-token-jackson, use sa-token-jackson3 for Spring Boot 4) -->
+		<dependency>
+			<groupId>cn.dev33</groupId>
+			<artifactId>sa-token-spring-boot-autoconfig</artifactId>
+			<exclusions>
+				<exclusion>
+					<groupId>cn.dev33</groupId>
+					<artifactId>sa-token-jackson</artifactId>
+				</exclusion>
+			</exclusions>
+		</dependency>
+		
+		<!-- sa-token-jackson3: JSON serialization for Spring Boot 4 (Jackson 3) -->
+		<dependency>
+			<groupId>cn.dev33</groupId>
+			<artifactId>sa-token-jackson3</artifactId>
+		</dependency>
+		
+	</dependencies>
+
+    <dependencyManagement>
+        <dependencies>
+			
+			<!-- spring-boot-starter -->
+	        <dependency>
+	            <groupId>org.springframework.boot</groupId>
+	            <artifactId>spring-boot-starter</artifactId>
+				<version>${springboot4.version}</version>
+	        </dependency>
+			<!-- spring-boot-starter-webmvc -->
+			<dependency>
+				<groupId>org.springframework.boot</groupId>
+				<artifactId>spring-boot-starter-webmvc</artifactId>
+				<version>${springboot4.version}</version>
+			</dependency>
+			<!-- config (optional) -->
+			<dependency>
+				<groupId>org.springframework.boot</groupId>
+				<artifactId>spring-boot-configuration-processor</artifactId>
+				<version>${springboot4.version}</version>
+			</dependency>
+			
+        </dependencies>
+    </dependencyManagement>
+
+	<build>
+		<plugins>
+			<plugin>
+				<groupId>org.apache.maven.plugins</groupId>
+				<artifactId>maven-compiler-plugin</artifactId>
+				<configuration>
+					<source>17</source>
+					<target>17</target>
+				</configuration>
+			</plugin>
+		</plugins>
+	</build>
+
+</project>

sa-token-starter/sa-token-spring-boot4-starter/src/main/java/cn/dev33/satoken/filter/SaFirewallCheckFilterForJakartaServlet.java

@@ -0,0 +1,73 @@
+/*
+ * Copyright 2020-2099 sa-token.cc
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package cn.dev33.satoken.filter;
+
+import cn.dev33.satoken.exception.BackResultException;
+import cn.dev33.satoken.exception.FirewallCheckException;
+import cn.dev33.satoken.exception.StopMatchException;
+import cn.dev33.satoken.servlet.model.SaRequestForServlet;
+import cn.dev33.satoken.servlet.model.SaResponseForServlet;
+import cn.dev33.satoken.servlet.util.SaJakartaServletOperateUtil;
+import cn.dev33.satoken.strategy.SaFirewallStrategy;
+import cn.dev33.satoken.util.SaTokenConsts;
+import jakarta.servlet.*;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.core.annotation.Order;
+
+import java.io.IOException;
+
+/**
+ * 防火墙校验过滤器 (基于 Jakarta-Servlet)
+ *
+ * @author click33
+ * @since 1.37.0
+ */
+@Order(SaTokenConsts.FIREWALL_CHECK_FILTER_ORDER)
+public class SaFirewallCheckFilterForJakartaServlet implements Filter {
+
+	@Override
+	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
+
+		HttpServletRequest req = (HttpServletRequest) request;
+		HttpServletResponse res = (HttpServletResponse) response;
+		SaRequestForServlet saRequest = new SaRequestForServlet(req);
+		SaResponseForServlet saResponse = new SaResponseForServlet(res);
+
+		try {
+			SaFirewallStrategy.instance.check.execute(saRequest, saResponse, null);
+		}
+		catch (StopMatchException ignored) {}
+		catch (BackResultException e) {
+			SaJakartaServletOperateUtil.writeResult(response, e.getMessage());
+			return;
+		}
+		catch (FirewallCheckException e) {
+			if(SaFirewallStrategy.instance.checkFailHandle == null) {
+				SaJakartaServletOperateUtil.writeResult(response, e.getMessage());
+			} else {
+				SaFirewallStrategy.instance.checkFailHandle.run(e, saRequest, saResponse, null);
+			}
+			return;
+		}
+		// 更多异常则不处理，交由 Web 框架处理
+
+		// 向内执行
+		chain.doFilter(request, response);
+	}
+
+	
+}

sa-token-starter/sa-token-spring-boot4-starter/src/main/java/cn/dev33/satoken/filter/SaServletFilter.java

@@ -0,0 +1,146 @@
+/*
+ * Copyright 2020-2099 sa-token.cc
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package cn.dev33.satoken.filter;
+
+import cn.dev33.satoken.exception.BackResultException;
+import cn.dev33.satoken.exception.SaTokenException;
+import cn.dev33.satoken.exception.StopMatchException;
+import cn.dev33.satoken.router.SaRouter;
+import cn.dev33.satoken.servlet.util.SaJakartaServletOperateUtil;
+import cn.dev33.satoken.util.SaTokenConsts;
+import jakarta.servlet.*;
+import org.springframework.core.annotation.Order;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.List;
+
+/**
+ * 全局鉴权过滤器 (基于 Jakarta-Servlet)
+ * <p>
+ *     默认优先级为 -100，尽量保证在其它过滤器之前执行
+ * </p>
+ *
+ * @author click33
+ * @since 1.34.0
+ */
+@Order(SaTokenConsts.ASSEMBLY_ORDER)
+public class SaServletFilter implements SaFilter, Filter {
+
+	// ------------------------ 设置此过滤器 拦截 & 放行 的路由 
+
+	/**
+	 * 拦截路由 
+	 */
+	public List<String> includeList = new ArrayList<>();
+
+	/**
+	 * 放行路由 
+	 */
+	public List<String> excludeList = new ArrayList<>();
+
+	@Override
+	public SaServletFilter addInclude(String... paths) {
+		includeList.addAll(Arrays.asList(paths));
+		return this;
+	}
+
+	@Override
+	public SaServletFilter addExclude(String... paths) {
+		excludeList.addAll(Arrays.asList(paths));
+		return this;
+	}
+
+	@Override
+	public SaServletFilter setIncludeList(List<String> pathList) {
+		includeList = pathList;
+		return this;
+	}
+
+	@Override
+	public SaServletFilter setExcludeList(List<String> pathList) {
+		excludeList = pathList;
+		return this;
+	}
+
+
+	// ------------------------ 钩子函数
+	
+	/**
+	 * 认证函数：每次请求执行 
+	 */
+	public SaFilterAuthStrategy auth = r -> {};
+
+	/**
+	 * 异常处理函数：每次[认证函数]发生异常时执行此函数
+	 */
+	public SaFilterErrorStrategy error = e -> {
+		throw new SaTokenException(e);
+	};
+
+	/**
+	 * 前置函数：在每次[认证函数]之前执行
+	 *      <b>注意点：前置认证函数将不受 includeList 与 excludeList 的限制，所有路由的请求都会进入 beforeAuth</b>
+	 */
+	public SaFilterAuthStrategy beforeAuth = r -> {};
+
+	@Override
+	public SaServletFilter setAuth(SaFilterAuthStrategy auth) {
+		this.auth = auth;
+		return this;
+	}
+
+	@Override
+	public SaServletFilter setError(SaFilterErrorStrategy error) {
+		this.error = error;
+		return this;
+	}
+
+	@Override
+	public SaServletFilter setBeforeAuth(SaFilterAuthStrategy beforeAuth) {
+		this.beforeAuth = beforeAuth;
+		return this;
+	}
+
+	
+	// ------------------------ doFilter
+
+	@Override
+	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
+		
+		try {
+			// 执行全局过滤器
+			beforeAuth.run(null);
+			SaRouter.match(includeList).notMatch(excludeList).check(r -> {
+				auth.run(null);
+			});
+		}
+		catch (StopMatchException ignored) {}
+		catch (BackResultException e) {
+			SaJakartaServletOperateUtil.writeResult(response, e.getMessage());
+			return;
+		}
+		catch (Throwable e) {
+			SaJakartaServletOperateUtil.writeResult(response, String.valueOf(error.run(e)));
+			return;
+		}
+		
+		// 执行 
+		chain.doFilter(request, response);
+	}
+	
+}

sa-token-starter/sa-token-spring-boot4-starter/src/main/java/cn/dev33/satoken/filter/SaTokenContextFilterForJakartaServlet.java

@@ -0,0 +1,46 @@
+/*
+ * Copyright 2020-2099 sa-token.cc
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package cn.dev33.satoken.filter;
+
+import cn.dev33.satoken.servlet.util.SaTokenContextJakartaServletUtil;
+import cn.dev33.satoken.util.SaTokenConsts;
+import jakarta.servlet.*;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.core.annotation.Order;
+
+import java.io.IOException;
+
+/**
+ * SaTokenContext 上下文初始化过滤器 (基于 Jakarta-Servlet)
+ *
+ * @author click33
+ * @since 1.42.0
+ */
+@Order(SaTokenConsts.SA_TOKEN_CONTEXT_FILTER_ORDER)
+public class SaTokenContextFilterForJakartaServlet implements Filter {
+
+	@Override
+	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
+		try {
+			SaTokenContextJakartaServletUtil.setContext((HttpServletRequest) request, (HttpServletResponse) response);
+			chain.doFilter(request, response);
+		} finally {
+			SaTokenContextJakartaServletUtil.clearContext();
+		}
+	}
+
+}

sa-token-starter/sa-token-spring-boot4-starter/src/main/java/cn/dev33/satoken/filter/SaTokenCorsFilterForJakartaServlet.java

@@ -0,0 +1,55 @@
+/*
+ * Copyright 2020-2099 sa-token.cc
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package cn.dev33.satoken.filter;
+
+import cn.dev33.satoken.context.SaHolder;
+import cn.dev33.satoken.context.model.SaTokenContextModelBox;
+import cn.dev33.satoken.exception.BackResultException;
+import cn.dev33.satoken.exception.StopMatchException;
+import cn.dev33.satoken.servlet.util.SaJakartaServletOperateUtil;
+import cn.dev33.satoken.strategy.SaStrategy;
+import cn.dev33.satoken.util.SaTokenConsts;
+import jakarta.servlet.*;
+import org.springframework.core.annotation.Order;
+
+import java.io.IOException;
+
+/**
+ * CORS 跨域策略过滤器 (基于 Jakarta-Servlet)
+ *
+ * @author click33
+ * @since 1.42.0
+ */
+@Order(SaTokenConsts.CORS_FILTER_ORDER)
+public class SaTokenCorsFilterForJakartaServlet implements Filter {
+
+	@Override
+	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
+		
+		try {
+			SaTokenContextModelBox box = SaHolder.getContext().getModelBox();
+			SaStrategy.instance.corsHandle.execute(box.getRequest(), box.getResponse(), box.getStorage());
+		}
+		catch (StopMatchException ignored) {}
+		catch (BackResultException e) {
+			SaJakartaServletOperateUtil.writeResult(response, e.getMessage());
+			return;
+		}
+
+		chain.doFilter(request, response);
+	}
+
+}

sa-token-starter/sa-token-spring-boot4-starter/src/main/java/cn/dev33/satoken/interceptor/SaInterceptor.java

@@ -0,0 +1,122 @@
+/*
+ * Copyright 2020-2099 sa-token.cc
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package cn.dev33.satoken.interceptor;
+
+import cn.dev33.satoken.exception.BackResultException;
+import cn.dev33.satoken.exception.StopMatchException;
+import cn.dev33.satoken.fun.SaParamFunction;
+import cn.dev33.satoken.strategy.SaAnnotationStrategy;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.web.method.HandlerMethod;
+import org.springframework.web.servlet.HandlerInterceptor;
+
+import java.lang.reflect.Method;
+
+/**
+ * Sa-Token 综合拦截器，提供注解鉴权和路由拦截鉴权能力 
+ * 
+ * @author click33
+ * @since 1.34.0
+ */
+public class SaInterceptor implements HandlerInterceptor {
+
+	/**
+	 * 是否打开注解鉴权 
+	 */
+	public boolean isAnnotation = true;
+	
+	/**
+	 * 认证函数：每次请求执行 
+	 * <p> 参数：路由处理函数指针 
+	 */
+	public SaParamFunction<Object> auth = handler -> {};
+
+	/**
+	 * 创建一个 Sa-Token 综合拦截器，默认带有注解鉴权能力 
+	 */
+	public SaInterceptor() {
+	}
+
+	/**
+	 * 创建一个 Sa-Token 综合拦截器，默认带有注解鉴权能力 
+	 * @param auth 认证函数，每次请求执行 
+	 */
+	public SaInterceptor(SaParamFunction<Object> auth) {
+		this.auth = auth;
+	}
+
+	/**
+	 * 设置是否打开注解鉴权 
+	 * @param isAnnotation /
+	 * @return 对象自身 
+	 */
+	public SaInterceptor isAnnotation(boolean isAnnotation) {
+		this.isAnnotation = isAnnotation;
+		return this;
+	}
+	
+	/**
+	 * 写入[认证函数]: 每次请求执行 
+	 * @param auth / 
+	 * @return 对象自身 
+	 */
+	public SaInterceptor setAuth(SaParamFunction<Object> auth) {
+		this.auth = auth;
+		return this;
+	}
+	
+	
+	// ----------------- 验证方法 ----------------- 
+
+	/**
+	 * 每次请求之前触发的方法 
+	 */
+	@Override
+	@SuppressWarnings("all")
+	public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
+			throws Exception {
+		
+		try {
+
+			// 这里必须确保 handler 是 HandlerMethod 类型时，才能进行注解鉴权
+			if(isAnnotation && handler instanceof HandlerMethod) {
+				Method method = ((HandlerMethod) handler).getMethod();
+				SaAnnotationStrategy.instance.checkMethodAnnotation.accept(method);
+			}
+			
+			// Auth 校验  
+			auth.run(handler);
+			
+		} catch (StopMatchException e) {
+			// StopMatchException 异常代表：停止匹配，进入Controller
+
+		} catch (BackResultException e) {
+			// BackResultException 异常代表：停止匹配，向前端输出结果
+			// 		请注意此处默认 Content-Type 为 text/plain，如果需要返回 JSON 信息，需要在 back 前自行设置 Content-Type 为 application/json
+			// 		例如：SaHolder.getResponse().setHeader("Content-Type", "application/json;charset=UTF-8");
+			if(response.getContentType() == null) {
+				response.setContentType("text/plain; charset=utf-8"); 
+			}
+			response.getWriter().print(e.getMessage());
+			return false;
+		}
+		
+		// 通过验证 
+		return true;
+	}
+
+}

sa-token-starter/sa-token-spring-boot4-starter/src/main/java/cn/dev33/satoken/package-info.java

@@ -0,0 +1,19 @@
+/*
+ * Copyright 2020-2099 sa-token.cc
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Sa-Token 集成 SpringBoot4 的各个组件 
+ */
+package cn.dev33.satoken;

sa-token-starter/sa-token-spring-boot4-starter/src/main/java/cn/dev33/satoken/spring/SaTokenContextForSpringInJakartaServlet.java

@@ -0,0 +1,68 @@
+/*
+ * Copyright 2020-2099 sa-token.cc
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package cn.dev33.satoken.spring;
+
+import cn.dev33.satoken.context.SaTokenContextForReadOnly;
+import cn.dev33.satoken.context.model.SaRequest;
+import cn.dev33.satoken.context.model.SaResponse;
+import cn.dev33.satoken.context.model.SaStorage;
+import cn.dev33.satoken.servlet.model.SaRequestForServlet;
+import cn.dev33.satoken.servlet.model.SaResponseForServlet;
+import cn.dev33.satoken.servlet.model.SaStorageForServlet;
+
+/**
+ * <h2> 此为低版本(<1.42.0) 的上下文处理方案，基于 Spring 内部工具类 RequestContextHolder 读写上下文，仅做留档，如无必要请勿使用 </h2>
+ *
+ * Sa-Token 上下文处理器 [ SpringBoot4 Jakarta Servlet 版 ]，在 SpringBoot4 中使用 Sa-Token 时，必须注入此实现类，否则会出现上下文无效异常
+ * 
+ * @author click33
+ * @since 1.34.0
+ */
+public class SaTokenContextForSpringInJakartaServlet implements SaTokenContextForReadOnly {
+
+	/**
+	 * 获取当前请求的 Request 包装对象
+	 */
+	@Override
+	public SaRequest getRequest() {
+		return new SaRequestForServlet(SpringMVCUtil.getRequest());
+	}
+
+	/**
+	 * 获取当前请求的 Response 包装对象
+	 */
+	@Override
+	public SaResponse getResponse() {
+		return new SaResponseForServlet(SpringMVCUtil.getResponse());
+	}
+
+	/**
+	 * 获取当前请求的 Storage 包装对象
+	 */
+	@Override
+	public SaStorage getStorage() {
+		return new SaStorageForServlet(SpringMVCUtil.getRequest());
+	}
+
+	/**
+	 * 判断：在本次请求中，此上下文是否可用。
+	 */
+	@Override
+	public boolean isValid() {
+		return SpringMVCUtil.isWeb();
+	}
+
+}

sa-token-starter/sa-token-spring-boot4-starter/src/main/java/cn/dev33/satoken/spring/SaTokenContextRegister.java

@@ -0,0 +1,70 @@
+/*
+ * Copyright 2020-2099 sa-token.cc
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package cn.dev33.satoken.spring;
+
+import cn.dev33.satoken.filter.SaFirewallCheckFilterForJakartaServlet;
+import cn.dev33.satoken.filter.SaTokenContextFilterForJakartaServlet;
+import cn.dev33.satoken.filter.SaTokenCorsFilterForJakartaServlet;
+import cn.dev33.satoken.spring.pathmatch.SaPathPatternParserUtil;
+import cn.dev33.satoken.strategy.SaStrategy;
+import org.springframework.context.annotation.Bean;
+
+/**
+ * 注册 Sa-Token 框架所需要的 Bean
+ * 
+ * @author click33
+ * @since 1.34.0
+ */
+public class SaTokenContextRegister {
+
+	public SaTokenContextRegister() {
+		// 重写路由匹配算法
+		SaStrategy.instance.routeMatcher = (pattern, path) -> {
+			return SaPathPatternParserUtil.match(pattern, path);
+		};
+	}
+
+	/**
+	 * 上下文过滤器
+	 *
+	 * @return /
+	 */
+	@Bean
+	public SaTokenContextFilterForJakartaServlet saTokenContextFilterForServlet() {
+		return new SaTokenContextFilterForJakartaServlet();
+	}
+
+	/**
+	 * CORS 跨域策略过滤器
+	 *
+	 * @return /
+	 */
+	@Bean
+	public SaTokenCorsFilterForJakartaServlet saTokenCorsFilterForJakartaServlet() {
+		return new SaTokenCorsFilterForJakartaServlet();
+	}
+
+	/**
+	 * 防火墙过滤器
+	 *
+	 * @return /
+	 */
+	@Bean
+	public SaFirewallCheckFilterForJakartaServlet saFirewallCheckFilterForJakartaServlet() {
+		return new SaFirewallCheckFilterForJakartaServlet();
+	}
+
+}

sa-token-starter/sa-token-spring-boot4-starter/src/main/java/cn/dev33/satoken/spring/SpringMVCUtil.java

@@ -0,0 +1,67 @@
+/*
+ * Copyright 2020-2099 sa-token.cc
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package cn.dev33.satoken.spring;
+
+import cn.dev33.satoken.exception.NotWebContextException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.springframework.web.context.request.RequestContextHolder;
+import org.springframework.web.context.request.ServletRequestAttributes;
+
+/**
+ * SpringMVC 相关操作工具类，快速获取当前会话的 HttpServletRequest、HttpServletResponse 对象
+ *
+ * @author click33
+ * @since 1.34.0
+ */
+public class SpringMVCUtil {
+	
+	private SpringMVCUtil() {
+	}
+	
+	/**
+	 * 获取当前会话的 request 
+	 * @return request
+	 */
+	public static HttpServletRequest getRequest() {
+		ServletRequestAttributes servletRequestAttributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
+		if(servletRequestAttributes == null) {
+			throw new NotWebContextException("非 web 上下文无法获取 HttpServletRequest");
+		}
+		return servletRequestAttributes.getRequest();
+	}
+	
+	/**
+	 * 获取当前会话的 response
+	 * @return response
+	 */
+	public static HttpServletResponse getResponse() {
+		ServletRequestAttributes servletRequestAttributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
+		if(servletRequestAttributes == null) {
+			throw new NotWebContextException("非 web 上下文无法获取 HttpServletRequest");
+		}
+		return servletRequestAttributes.getResponse();
+	}
+
+	/**
+	 * 判断当前是否处于 Web 上下文中  
+	 * @return request
+	 */
+	public static boolean isWeb() {
+		return RequestContextHolder.getRequestAttributes() != null;
+	}
+	
+}

sa-token-starter/sa-token-spring-boot4-starter/src/main/resources/META-INF/spring/org.springframework.boot.autoconfigure.AutoConfiguration.imports

@@ -0,0 +1 @@
+cn.dev33.satoken.spring.SaTokenContextRegister