springboot拦截器记录请求操作参数日志

本文介绍了如何使用Spring AOP(面向切面编程)创建拦截器,以捕获并记录带有`@OperLog`注解的方法的请求参数,包括业务类型、参数映射和JSON格式的参数。通过`MyRequestWrapper`和`ReplaceStreamFilter`,确保了对JSON请求参数的完整处理。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

可以使用springaop拦截器来记录请求参数日志:

1, pom添加依赖

<dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-aop</artifactId>
        </dependency>

2,新增一个注解

import java.lang.annotation.*;

@Target(ElementType.METHOD)
@Retention(RetentionPolicy.RUNTIME)
@Documented
public @interface OperLog {
    String bizType() default ""; // 业务类型
}

3,新增一个拦截器,拦截上面那个注解标注的方法

import com.alibaba.fastjson.JSON;
import com.baomidou.mybatisplus.core.toolkit.StringUtils;
import com.hdan.happy.annotation.OperLog;
import com.hdan.happy.util.MyRequestWrapper;
import lombok.extern.slf4j.Slf4j;
import org.aspectj.lang.JoinPoint;
import org.aspectj.lang.annotation.AfterReturning;
import org.aspectj.lang.annotation.Aspect;
import org.aspectj.lang.annotation.Pointcut;
import org.aspectj.lang.reflect.MethodSignature;
import org.springframework.http.MediaType;
import org.springframework.stereotype.Component;
import org.springframework.web.context.request.RequestAttributes;
import org.springframework.web.context.request.RequestContextHolder;

import javax.servlet.http.HttpServletRequest;
import java.lang.reflect.Method;
import java.util.HashMap;
import java.util.Map;

@Component
@Aspect
@Slf4j
public class OperInterceptor {


    // 有这个注解的方法都会被执行
    @Pointcut(value = "@annotation(com.hdan.happy.annotation.OperLog)")
    public void logPoincut(){

    }


    /**
     * 方法执行完成后,执行保存日志
     * @param joinPoint
     * @param returnObj  返回参数
     */
    @AfterReturning(value="logPoincut()", returning="returnObj")
    public void saveOperLog(JoinPoint joinPoint, Object returnObj){
        // 获取RequestAttributes
        RequestAttributes requestAttributes = RequestContextHolder.getRequestAttributes();
        // 从获取RequestAttributes中获取HttpServletRequest的信息
        HttpServletRequest request = (HttpServletRequest) requestAttributes
                .resolveReference(RequestAttributes.REFERENCE_REQUEST);
        try {
            // 从切面织入点处通过反射机制获取织入点处的方法
            MethodSignature signature = (MethodSignature) joinPoint.getSignature();
            // 获取切入点所在的方法
            Method method = signature.getMethod();
            String bizType = "";

            // 获取操作
            OperLog opLog = method.getAnnotation(OperLog.class);
            if (opLog != null) {
                bizType = opLog.bizType();
            }

            // 请求的参数
            Map<String, Object> paramMap = converMap(request.getParameterMap());
            if (isJson(request)) { // 如果是json请求,请求的requestbody参数是在流里面,取不出来。要用下面的方法包装一下,把流里面的参数解析出来
                String jsonParam = new MyRequestWrapper(request).getBodyString();
                if(StringUtils.isNotBlank(jsonParam)){
                    paramMap = JSON.parseObject(jsonParam, Map.class);
                }
            }

            // 获取记录操作日志信息
            String params = JSON.toJSONString(paramMap);

            log.info("请求方法:{}, " +
                    "请求业务类型:{}, " +
                    "请求参数:{}",
                    method, bizType, params);
        } catch (Exception e) {
            log.error("记录操作日志报错", e);
        }
    }


    /**
     * 转换request 请求参数
     *
     * @param paramMap request获取的参数数组
     */
    public Map<String, Object> converMap(Map<String, String[]> paramMap) {
        Map<String, Object> rtnMap = new HashMap<>();
        for (String key : paramMap.keySet()) {
            String[] values = paramMap.get(key);
            if(values != null && values.length == 1){
                rtnMap.put(key, values[0]);
            }else{
                rtnMap.put(key, values);
            }
        }
        return rtnMap;
    }

    private boolean isJson(HttpServletRequest request) {
        if (request.getContentType() != null) {
            return request.getContentType().equals(MediaType.APPLICATION_JSON_VALUE) ||
                    request.getContentType().equals(MediaType.APPLICATION_JSON_UTF8_VALUE);
        }
        return false;
    }

}

上面代码中,json请求类型的参数,还需要下面这个包装类和过滤器,如果没有json请求的情况,下面的代码可以不要

import javax.servlet.ReadListener;
import javax.servlet.ServletInputStream;
import javax.servlet.ServletRequest;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletRequestWrapper;
import java.io.*;
import java.nio.charset.Charset;

/**
 * 将request请求里面的inputStream复制一份出来放到固定参数里面
 * huangdan
 */
public class MyRequestWrapper extends HttpServletRequestWrapper {
    private final byte[] body;

    public MyRequestWrapper(HttpServletRequest request) {
        super(request);
        String bodyStr = getBodyString(request);
        body = bodyStr.getBytes(Charset.defaultCharset());
    }

    public String getBodyString(final ServletRequest request) {
        try{
            return inputStream2String(request.getInputStream());
        }catch (IOException e){
            throw new RuntimeException(e);
        }
    }

    public String getBodyString() {
        final InputStream inputStream = new ByteArrayInputStream(body);

        return inputStream2String(inputStream);
    }

    /**
     * 将inputStream里的数据读取出来并转换成字符串
     *
     * @param inputStream inputStream
     * @return String
     */
    private String inputStream2String(InputStream inputStream) {
        StringBuilder sb = new StringBuilder();
        BufferedReader reader = null;

        try {
            reader = new BufferedReader(new InputStreamReader(inputStream, Charset.defaultCharset()));
            String line;
            while ((line = reader.readLine()) != null) {
                sb.append(line);
            }
        } catch (IOException e) {
            throw new RuntimeException(e);
        } finally {
            if (reader != null) {
                try {
                    reader.close();
                } catch (IOException e) {
                    throw new RuntimeException(e);
                }
            }
        }

        return sb.toString();
    }

    @Override
    public BufferedReader getReader() throws IOException {
        return new BufferedReader(new InputStreamReader(getInputStream()));
    }

    @Override
    public ServletInputStream getInputStream() throws IOException {

        final ByteArrayInputStream inputStream = new ByteArrayInputStream(body);

        return new ServletInputStream() {
            @Override
            public int read() throws IOException {
                return inputStream.read();
            }

            @Override
            public boolean isFinished() {
                return false;
            }

            @Override
            public boolean isReady() {
                return false;
            }

            @Override
            public void setReadListener(ReadListener readListener) {
            }
        };
    }
}

过滤器:

import com.hdan.happy.util.MyRequestWrapper;
import org.apache.tomcat.util.http.fileupload.servlet.ServletFileUpload;
import org.springframework.stereotype.Component;

import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;

/**
 * 过滤器,为了将json请求的requestbody参数复制出来一份方便记录操作日志时取参数
 *
 */
@Component
@WebFilter(
        urlPatterns = {"/*"},
        filterName = "replaceStreamFilter"
)
public class ReplaceStreamFilter implements Filter {
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    @Override
    public void doFilter(ServletRequest request, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        if(request instanceof HttpServletRequest && !ServletFileUpload.isMultipartContent((HttpServletRequest) request)){
            ServletRequest requestWrapper = new MyRequestWrapper((HttpServletRequest) request);
            filterChain.doFilter(requestWrapper, servletResponse);
        }else{
            filterChain.doFilter(request, servletResponse);
        }

    }

    @Override
    public void destroy() {

    }
}

测试代码:

@RestController
@RequestMapping("test")
@Slf4j
public class TestController {


    @PostMapping("saveArticle")
    @OperLog(bizType="保存文章")
    public Object saveArticle(String title, String content){


        return true;
    }


    @PostMapping("saveArticle2")
    @OperLog(bizType="保存文章2")
    public Object saveArticle2(@RequestBody Map<String, Object> params){

        return true;
    }
}

请求这两个方法后,会分别输出:

 

 

### Spring Boot 拦截器处理请求参数和返回值 在 Spring Boot 中,可以通过实现 `HandlerInterceptor` 接口并将其注册到拦截器链中来处理请求参数和响应返回值。以下是具体实现方式: #### 实现 HandlerInterceptor 接口 创建一个类实现 `HandlerInterceptor` 接口,并重写其三个主要方法:`preHandle`、`postHandle` 和 `afterCompletion`。 ```java import org.springframework.stereotype.Component; import org.springframework.web.servlet.HandlerInterceptor; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; @Component public class CustomInterceptor implements HandlerInterceptor { @Override public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { // 在这里可以获取请求参数并对它们进行解密或其他操作 System.out.println("Request URL: " + request.getRequestURL()); String param = request.getParameter("exampleParam"); if (param != null && !param.isEmpty()) { System.out.println("Decrypted Parameter: " + decrypt(param)); } return true; // 如果返回 false,则不会继续调用后续的处理器 } private String decrypt(String encryptedData) { // 解密逻辑示例 return new StringBuilder(encryptedData).reverse().toString(); // 假设简单的反转作为解密算法 } @Override public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception { // 可以在这里修改模型数据或者视图名称 if (modelAndView != null) { modelAndView.addObject("interceptorMessage", "This message is added by interceptor."); } } @Override public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception { // 这里可以记录日志或者其他清理工作 System.out.println("Request and Response are completed."); } } ``` 上述代码展示了如何在 `preHandle` 方法中访问请求参数以及对其进行简单解密[^1]。同时,在 `postHandle` 方法中还可以向模型对象添加额外的信息[^5]。 #### 注册拦截器 为了使拦截器生效,需要将其注册到 Web 配置文件中。 ```java import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Configuration; import org.springframework.web.servlet.config.annotation.InterceptorRegistry; import org.springframework.web.servlet.config.annotation.WebMvcConfigurer; @Configuration public class WebConfig implements WebMvcConfigurer { @Autowired private CustomInterceptor customInterceptor; @Override public void addInterceptors(InterceptorRegistry registry) { registry.addInterceptor(customInterceptor) .addPathPatterns("/api/**") // 对指定路径下的请求应用此拦截器 .excludePathPatterns("/api/public"); // 排除某些不需要拦截的路径 } } ``` 这段代码说明了如何将自定义拦截器绑定到特定的 API 路径上[^2]。 #### 控制器返回值加密 如果希望对控制器返回的结果进行加密,可以在 `postHandle` 或者全局过滤器中完成这一过程。下面是一个基于 JSON 的返回值加密例子: ```java @Override public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception { super.postHandle(request, response, handler, modelAndView); if (response instanceof ContentCachingResponseWrapper) { ContentCachingResponseWrapper wrapper = (ContentCachingResponseWrapper) response; byte[] content = wrapper.getContentAsByteArray(); String responseBody = new String(content); try { String encryptedBody = encrypt(responseBody); // 加密业务逻辑 wrapper.resetBuffer(); PrintWriter writer = response.getWriter(); writer.write(encryptedBody); writer.flush(); } catch (Exception e) { throw new RuntimeException(e.getMessage(), e); } } } private String encrypt(String data) { // 加密逻辑示例 return new StringBuilder(data).reverse().toString(); // 同样假设简单的字符串反转作为加密算法 } ``` 以上代码片段演示了如何捕获 HTTP 响应的内容并对其实施加密后再发送给客户端[^4]。 --- ###
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值