spring boot session 拦截

最新推荐文章于 2023-01-09 22:02:02 发布

weixin_33965305

最新推荐文章于 2023-01-09 22:02:02 发布

阅读量176

点赞数

CC 4.0 BY-SA版权

文章标签： java python

原文链接：https://my.oschina.net/u/1011854/blog/1787901

本文介绍如何使用 Spring MVC 的注解配置拦截器，实现登录验证功能。通过自定义 SecurityInterceptor 类并继承 HandlerInterceptorAdapter，可以在特定路径上进行 session 检查。若未登录则返回提示信息。

2019独角兽企业重金招聘Python工程师标准>>>

使用注解配置拦截器，在user/login登录方法中加入session就ok了

package com.zhangda.core.web;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;

@Configuration
public class WebSecurityConfig extends WebMvcConfigurerAdapter {

    /**
     * 登录session key
     */
    public final static String SESSION_KEY = "user";

    @Bean
    public SecurityInterceptor getSecurityInterceptor() {
        return new SecurityInterceptor();
    }

    public void addInterceptors(InterceptorRegistry registry) {
        InterceptorRegistration addInterceptor = registry.addInterceptor(getSecurityInterceptor());

        // 排除配置
        addInterceptor.excludePathPatterns("/error");
        addInterceptor.excludePathPatterns("/user/login**");

        // 拦截配置
        addInterceptor.addPathPatterns("/**");
    }

    private class SecurityInterceptor extends HandlerInterceptorAdapter {

        @Override
        public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
                throws Exception {
            HttpSession session = request.getSession();
            if (session.getAttribute(SESSION_KEY) != null){
            	return true;
            }

            // 跳转登录
            String errMsg = "{\"success\": false, \"errMsg\": \"请先登录！\"}";
//            String url = "/login";
//            response.sendRedirect(url);x`
            response.setHeader("Content-type", "text/html;charset=UTF-8");  
            response.getWriter().print(errMsg);
            return false;
        }
    }
}

转载于:https://my.oschina.net/u/1011854/blog/1787901