WebMvcConfigurer 和 HandlerInterceptor 拦截器配置校验服务

逃离我推掉我的手 2023-07-12 06:26 5阅读 0赞

在工作中除了通过过滤器配置校验，拦截器配置校验规则也是很常见方式，这里通过WebMvcConfigurer 和 HandlerInterceptor 拦截器配置校验。

1、配置拦截器（这个里面添加了跨域支持，当集成swagger防止后台报错），如果没有必要删除其配置，这里做一下展示。

@Configuration
    public class AdminCommonConfig implements WebMvcConfigurer {
    
    
        
        /**
         * 跨域支持
         * @param registry
         */
        @Override
        public void addCorsMappings(CorsRegistry registry) {
            registry.addMapping("/**")
                    .allowedOrigins("*")
                    .allowCredentials(true)
                    .allowedMethods("GET", "POST", "DELETE", "PUT")
                    .maxAge(3600 * 24);
        }
    
        /**
         * 自定义拦截器地址
         * @return
         */
        @Bean
        public HandlerInterceptor authInterceptor(){
            return new AuthInterceptor();
        }
    
        /**
         * 添加拦截路径
         * @param registry
         */
        @Override
        public void addInterceptors(InterceptorRegistry registry) {
            String url = "/**";
            //添加排除排除URL校验路径
            registry.addInterceptor(authInterceptor()).addPathPatterns(url).excludePathPatterns(
                    "/test/exclude/*"
            );
        }
    
        /**
         * 当集成swagger防止后台报错
         * No mapping found for HTTP request with URI [/swagger-resources/configuration/ui] in DispatcherServlet with name 'dispatcherServlet'
         * @param registry
         */
        @Override
        public void addResourceHandlers(ResourceHandlerRegistry registry) {
            //过滤swagger
            registry.addResourceHandler("swagger-ui.html")
                    .addResourceLocations("classpath:/META-INF/resources/");
    
            registry.addResourceHandler("/webjars/**")
                    .addResourceLocations("classpath:/META-INF/resources/webjars/");
        }
    }

2、添加在WebMvcConfigurer 中配置HandlerInterceptor

public class AuthInterceptor implements HandlerInterceptor {
        /**
         * 通过配置是否认证，对开发环境免除校验，方便开发
         */
        @Value("${is.auth}")
        private boolean isAuth;
    
        @Override
        public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
            if(handler instanceof HandlerMethod){
                //可以从handler 获取中获得方法
               // Method method = ((HandlerMethod) handler).getMethod();
    
    
                if(isAuth){
                    ServletRequestAttributes requestAttributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
                    HttpServletRequest request1 = requestAttributes.getRequest();
    
                    String sign = request1.getHeader("sign");
                    System.out.println("从HttpServletRequest直接获取"+sign);
                    String sign1 = request1.getHeader("sign");
                    System.out.println("从RequestContextHolder中获取的"+sign1);
                    if ("123".equals(sign1)) {
                        System.out.println("校验通过");
                        return true;
                    }
                    System.out.println("校验不通过");
                    return false;
                }
            }
    
            return true;
        }
    
        @Override
        public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
    
        }
    
        @Override
        public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
    
        }
    }

这是通过拦截器添加的校验规则，也可以通过过滤器来实现：  
https://blog.csdn.net/fajing\_feiyue/article/details/102877873