NoAuth:
package com.zy.basy.upload.annotation;
import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;
@Target({ElementType.METHOD})// 可用在方法名上
@Retention(RetentionPolicy.RUNTIME)// 运行时有效
public @interface NoAuth {
}
AuthenticationInterceptor:
package com.zy.basy.upload.Interceptor;
import com.zy.basy.upload.annotation.NoAuth;
import com.zy.basy.upload.context.SysUserContextHolder;
import com.zy.basy.upload.entity.SysUser;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.lang.reflect.Method;
@Configuration
public class AuthenticationInterceptor implements HandlerInterceptor {
/**
* 在请求处理之前进行调用(Controller方法调用之前)
*
* @param request
* @param response
* @param handler
* @return
* @throws Exception
*/
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
// 如果不是映射到方法直接通过
if (!(handler instanceof HandlerMethod)) {
return true;
}
HandlerMethod handlerMethod = (HandlerMethod) handler;
Method method = handlerMethod.getMethod();
// 判断接口是否需要登录
NoAuth noAuth = method.getAnnotation(NoAuth.class);
//!=null表示该方法存在此注解,是我们需要放行的方法。
if(noAuth!=null){
SysUser sysUser = new SysUser();
sysUser.setId("7777777");
sysUser.setUserName("chenjian");
SysUserContextHolder.setUser(sysUser);
return true;
}
String token = request.getHeader("token");
if(!token.equals("1234567890")){
throw new RuntimeException("token无效");
}
SysUser sysUser = new SysUser();
sysUser.setId(token);
sysUser.setUserName("chenjian");
SysUserContextHolder.setUser(sysUser);
return true;
}
/**
* 请求处理之后进行调用,但是在视图被渲染之前(Controller方法调用之后)
*
* @param httpServletRequest
* @param httpServletResponse
* @param o
* @param modelAndView
* @throws Exception
*/
@Override
public void postHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o, ModelAndView modelAndView) throws Exception {
}
/**
* 在整个请求结束之后被调用,也就是在DispatcherServlet 渲染了对应的视图之后执行(主要是用于进行资源清理工作)
*
* @param httpServletRequest
* @param httpServletResponse
* @param o
* @param e
* @throws Exception
*/
@Override
public void afterCompletion(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o, Exception e) throws Exception {
}
}
WebMvcConfigurer:
package com.zy.basy.upload.config;
import com.zy.basy.upload.Interceptor.AuthenticationInterceptor;
import com.zy.basy.upload.Interceptor.PermissionStrInterceptor;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurationSupport;
@Configuration
public class WebMvcConfigurer extends WebMvcConfigurationSupport {
@Autowired
private AuthenticationInterceptor authenticationInterceptor;
@Autowired
private PermissionStrInterceptor permissionStrInterceptor;
@Override
public void addInterceptors(InterceptorRegistry registry) {
//注册自定义拦截器,添加拦截路径和排除拦截路径
registry.addInterceptor(authenticationInterceptor).addPathPatterns("/**");
}
}
test:
@NoAuth
@RequestMapping("/test")
public ServerResponse test() {
SysUser user = SysUserContextHolder.getUser();
return ServerResponse.createBySuccess("user.getId()=>"+user.getId()+",user.getUserName()"+user.getUserName());
}