使用拦截器,过滤器,AOP完成鉴权

枫～楠

已于 2024-08-04 11:14:18 修改

阅读量142

点赞数 1

文章标签： java 开发语言

于 2023-11-02 17:32:36 首次发布

本文链接：https://blog.youkuaiyun.com/m0_73290584/article/details/134187262

版权

本文介绍如何使用拦截器、过滤器及AOP技术实现Web应用中的权限验证。通过具体代码实例展示了拦截器和过滤器的应用场景，以及如何配置它们来确保只有合法用户才能访问特定资源。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

一:拦截器

1.定义拦截器

@Component
public class MyIntercepter implements HandlerInterceptor {
    @Override
    //原始方法调用前执行的内容,返回值为true表示放行,返回值为false表示不放行
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        String token = request.getHeader("token");
        if("".equals("token")||token ==null){
            Result result = new Result("您没有传token", 403, null);
            response.getWriter().write(result.toString());
            return  false;
        }
        if(!token.equals(Constants.TOKEN)){
            Result result = new Result("您传的参数有误", 401, null);
            response.getWriter().write(result.toString());
            return  false;
        }
        return true;
    }
}

2.配置拦截器

@Configuration
public class MyConfig implements WebMvcConfigurer {
    /**
     * 配置拦截规则与注入拦截器
     * @param registry
     */
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        // addPathPattern 添加拦截规则 /** 拦截所有包括静态资源
        // excludePathPattern 排除拦截规则 所以我们需要放开静态资源的拦截
        registry.addInterceptor(new MyIntercepter())
                .addPathPatterns("/members/**","/managers/**")
                .excludePathPatterns("/css/**", "/fonts/**", "/images/**", "/js/**");
    }
}

二:过滤器

1.定义过滤器

@WebFilter(filterName = "MyFilter", urlPatterns = {"/members/*","/managers/*"})
public class MyFilter implements Filter {

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;
        String token = request.getHeader("token");

        if ("".equals(token) || token == null) {
            Result result = new Result("您没有传token", 403, null);
            response.getWriter().write(result.toString());
            return;
        }

        if (!token.equals(Constants.TOKEN)) {
            Result result = new Result("您传的token有误", 401, null);
            response.getWriter().write(result.toString());
            return;
        }
        //放行
        filterChain.doFilter(request, response);
    }
}

2.配置过滤器

@SpringBootApplication
@ServletComponentScan
public class MpdemoApplication {
    public static void main(String[] args) {
        SpringApplication.run(MpdemoApplication.class, args);
    }
}