Java 拦截器 + AOP

最新推荐文章于 2025-03-24 10:19:38 发布

Chow_jay

最新推荐文章于 2025-03-24 10:19:38 发布

阅读量299

点赞数

CC 4.0 BY-SA版权

分类专栏： Study 文章标签： java 开发语言 spring

本文链接：https://blog.youkuaiyun.com/weixin_42927262/article/details/124611089

Study 专栏收录该内容

4 篇文章

订阅专栏

这两篇文章详细介绍了如何在Spring环境中使用Filter进行请求头的TOKEN校验，以及通过AspectJ实现AOP切面，对Controller层的方法调用进行拦截并执行TOKEN验证，确保请求的安全性。同时，展示了如何使用DigestUtils进行MD5哈希计算，提高代码的可读性和复用性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

附带两篇对应文章
https://blog.youkuaiyun.com/qq_41974570/article/details/115936788
https://www.jianshu.com/p/1538b1872c6a

import org.apache.commons.codec.digest.DigestUtils;
import org.apache.commons.lang3.StringUtils;
import org.springframework.stereotype.Component;
import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

@Component
public class FilterUtil implements Filter {
private final static Integer ERROR_CODE = 500;
@Override
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
HttpServletResponse response = (HttpServletResponse) servletResponse;
HttpServletRequest request = (HttpServletRequest) servletRequest;
String TOKEN = request.getHeader(“TOKEN”);
if (StringUtils.isBlank(TOKEN)){
response.sendError(ERROR_CODE);
return;
}
long start = System.currentTimeMillis();
String token = DigestUtils.md5Hex(String.valueOf(start).substring(0,8) + “TOKEN”);
if (!TOKEN.equalsIgnoreCase(token)){
response.sendError(ERROR_CODE);
return;
}
filterChain.doFilter(servletRequest, servletResponse);
}
}

import org.apache.commons.codec.digest.DigestUtils;
import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.annotation.Around;
import org.aspectj.lang.annotation.Aspect;
import org.aspectj.lang.annotation.Pointcut;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.core.annotation.Order;
import org.springframework.stereotype.Component;
import org.springframework.web.context.request.RequestContextHolder;
import org.springframework.web.context.request.ServletRequestAttributes;

import javax.servlet.http.HttpServletRequest;

@Component
@Order(1)
class AspectService {
private static Logger logger = LoggerFactory.getLogger(AspectService.class);

// @Pointcut(“@annotation(org.springframework.web.bind.annotation.GetMapping)”)
@Pointcut(“execution(* com.aliyun.pcc.controller….(…)))”)
public void aop(){
}

@Around("aop()")
public Object around(ProceedingJoinPoint pjp) throws Throwable {
    String name = pjp.getSignature().getName();
    ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
    HttpServletRequest request = attributes.getRequest();
    String uStamp = request.getHeader("TOKEN");
    long start = System.currentTimeMillis();
    String token = DigestUtils.md5Hex(String.valueOf(start).substring(0,8) + "TOKEN");

    if (! uStamp.equals(token)) {
        return CallResult.error(StatusCode.FAIL, "sssss",null);
    }
    Object result = pjp.proceed();
    long end = System.currentTimeMillis();
    logger.info(name + "方法执行时间为：" + (end - start) + " ms");
    return result;
}

}