Spring Boot动态秒杀系统接口安全性设计与实现

import java.util.UUID;

@RestController
public class SeckillController {

    private static final String SECKILL_KEY_PREFIX = "seckill:";
    private static final long SECKILL_VALIDITY_PERIOD = 60 * 5; // 5分钟有效期

    @Autowired
    private RedisTemplate<String, String> redisTemplate;

    @PostMapping("/generateSeckillUrl")
    public ResponseEntity<String> generateSeckillUrl(@RequestParam Long userId) {
        // 生成唯一的令牌
        String seckillToken = UUID.randomUUID().toString().replace("-", "");
        
        // 将令牌存储到Redis中，并设置有效期
        String key = SECKILL_KEY_PREFIX + seckillToken;
        redisTemplate.opsForValue().set(key, userId.toString(), SECKILL_VALIDITY_PERIOD, TimeUnit.SECONDS);
        
        // 构建带有令牌的秒杀地址
        String seckillUrl = "/seckill?token=" + seckillToken;

        return ResponseEntity.ok(seckillUrl);
    }

    // 其他秒杀接口...
}

/seckill?token=fd3b7a951bc14f3e80f45cc787f4e282