前言
这是一个老生常谈的话题,关于如何实现接口幂等性,网上也给了好几个解决方案:
- 数据库建立唯一性索引,可以保证最终插入数据库的只有一条数据
- token 机制,每次接口请求前先获取一个 token,然后再下次请求的时候在请求的 header 体中加上这个 token,后台进行验证,如果验证通过删除 token,下次请求再次判断 token
- 悲观锁或者乐观锁,悲观锁可以保证每次 for update 的时候其他 sql 无法 update 数据 (在数据库引擎是 innodb 的时候, select 的条件必须是唯一索引, 防止锁全表)
当然还有其他解决方案,我记得我之前看到的好像有七八种,但是重合性比较高,大致方向就是要么基于代码要么就是基于数据库的内部机制。
创建工程
创建一个springboot工程,导入依赖
<dependencies>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-data-redis</artifactId>
</dependency>
<dependency>
<groupId>commons-lang</groupId>
<artifactId>commons-lang</artifactId>
<version>2.6</version>
<scope>compile</scope>
</dependency>
</dependencies>
配置文件
# Redis服务器地址
spring.redis.host=127.0.0.1
# Redis服务器连接端口
spring.redis.port=6379
代码
RedisConfig.java
package com.example.demo.config;
import com.fasterxml.jackson.annotation.JsonAutoDetect;
import com.fasterxml.jackson.annotation.PropertyAccessor;
import com.fasterxml.jackson.databind.ObjectMapper;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.data.redis.connection.RedisConnectionFactory;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.data.redis.serializer.Jackson2JsonRedisSerializer;
import org.springframework.data.redis.serializer.StringRedisSerializer;
/**
* @author 朝花不迟暮
* @version 1.0
* @date 2021/1/30 20:38
*/
@Configuration
public class RedisConfig
{
@Bean
@SuppressWarnings("all")
public RedisTemplate<String, Object> redisTemplate(RedisConnectionFactory factory)
{
RedisTemplate<String, Object> template = new RedisTemplate<String, Object>();
template.setConnectionFactory(factory);
Jackson2JsonRedisSerializer jackson2JsonRedisSerializer = new Jackson2JsonRedisSerializer(Object.class);
ObjectMapper om = new ObjectMapper();
om.setVisibility(PropertyAccessor.ALL, JsonAutoDetect.Visibility.ANY);
om.enableDefaultTyping(ObjectMapper.DefaultTyping.NON_FINAL);
jackson2JsonRedisSerializer.setObjectMapper(om);
StringRedisSerializer stringRedisSerializer = new StringRedisSerializer();
// key采用String的序列化方式
template.setKeySerializer(stringRedisSerializer);
// hash的key也采用String的序列化方式
template.setHashKeySerializer(stringRedisSerializer);
// value序列化方式采用jackson
template.setValueSerializer(jackson2JsonRedisSerializer);
// hash的value序列化方式采用jackson
template.setHashValueSerializer(jackson2JsonRedisSerializer);
template.afterPropertiesSet();
return template;
}
}
RedisService.java
package com.example.demo.utils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.data.redis.core.ValueOperations;
import org.springframework.stereotype.Component;
import java.io.Serializable;
import java.util.concurrent.TimeUnit;
/**
* @author 朝花不迟暮
* @version 1.0
* @date 2021/1/30 19:51
*/
@Component
public class RedisService
{
@Autowired
private RedisTemplate redisTemplate;
/**
* 写入缓存
* @param key
* @param value
* @return
*/
public boolean set(final String key, Object value) {
boolean result = false;
try {
ValueOperations<Serializable, Object> operations = redisTemplate.opsForValue();
operations.set(key, value);
result = true;
} catch (Exception e) {
e.printStackTrace();
}
return result;
}
/**
* 写入缓存设置时效时间
* @param key
* @param value
* @return
*/
public boolean setEx(final String key, Object value, Long expireTime) {
boolean result = false;
try {
ValueOperations<Serializable, Object> operations = redisTemplate.opsForValue();
operations.set(key, value);
redisTemplate.expire(key, expireTime, TimeUnit.SECONDS);
result = true;
} catch (Exception e) {
e.printStackTrace();
}
return result;
}
/**
* 判断缓存中是否有对应的value
* @param key
* @return
*/
public boolean exists(final String key) {
return redisTemplate.hasKey(key);
}
/**
* 读取缓存
* @param key
* @return
*/
public Object get(final String key) {
Object result = null;
ValueOperations<Serializable, Object> operations = redisTemplate.opsForValue();
result = operations.get(key);
return result;
}
/**
* 删除对应的value
* @param key
*/
public boolean remove(final String key) {
if (exists(key)) {
Boolean delete = redisTemplate.delete(key);
return delete;
}
return false;
}
}
自定义注解
package com.example.demo.annotation;
import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;
@Target({ElementType.METHOD})
@Retention(RetentionPolicy.RUNTIME)
public @interface AutoIdempotent
{
}
token校验服务
TokenService
package com.example.demo.service;
import javax.servlet.http.HttpServletRequest;
public interface TokenService
{
/**
* 创建token
*
* @return
*/
String createToken();
/**
* 检验token
*
* @param request
* @return
*/
boolean checkToken(HttpServletRequest request) throws Exception;
}
实现类
package com.example.demo.service.impl;
import com.example.demo.constant.RedisConstant;
import com.example.demo.service.TokenService;
import com.example.demo.utils.RedisService;
import org.apache.commons.lang.StringUtils;
import org.apache.commons.lang.text.StrBuilder;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
import javax.servlet.http.HttpServletRequest;
import java.util.UUID;
/**
* @author 朝花不迟暮
* @version 1.0
* @date 2021/1/30 19:54
*/
@Service
public class TokenServiceImpl implements TokenService
{
private final Logger log = LoggerFactory.getLogger(this.getClass());
@Autowired
private RedisService redisService;
@Override
public String createToken()
{
String str = UUID.randomUUID().toString().replace("-", "");
StrBuilder token = new StrBuilder();
try
{
token.append(RedisConstant.TOKEN_PREFIX).append(str);
redisService.setEx(token.toString(), token.toString(), 10000L);
boolean notEmpty = StringUtils.isNotEmpty(token.toString());
if (notEmpty)
{
return token.toString();
}
} catch (Exception e)
{
e.printStackTrace();
}
return null;
}
@Override
public boolean checkToken(HttpServletRequest request) throws Exception
{
String token = request.getHeader(RedisConstant.TOKEN_NAME);
if (StringUtils.isBlank(token))
{
// header中不存在token
token = request.getParameter(RedisConstant.TOKEN_NAME);
if (StringUtils.isBlank(token))
{
// parameter中也不存在token
log.error("token为空!");
return false;
}
}
if (!redisService.exists(token))
{
log.error("token不存在!");
return false;
}
boolean remove = redisService.remove(token);
if (!remove)
{
log.error("移除失败!");
return false;
}
return true;
}
}
开始写拦截器
package com.example.demo.config;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurationSupport;
import javax.annotation.Resource;
/**
* @author 朝花不迟暮
* @version 1.0
* @date 2021/1/30 20:16
*/
@Configuration
public class WebConfiguration extends WebMvcConfigurationSupport
{
@Resource
private AutoIdempotentInterceptor autoIdempotentInterceptor;
@Override
public void addInterceptors(InterceptorRegistry registry)
{
registry.addInterceptor(autoIdempotentInterceptor);
super.addInterceptors(registry);
}
}
package com.example.demo.config;
import com.example.demo.annotation.AutoIdempotent;
import com.example.demo.service.TokenService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.PrintWriter;
import java.lang.reflect.Method;
/**
* @author 朝花不迟暮
* @version 1.0
* @date 2021/1/30 20:17
*/
@Component
public class AutoIdempotentInterceptor implements HandlerInterceptor
{
@Autowired
private TokenService tokenService;
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception
{
if (!(handler instanceof HandlerMethod))
{
return true;
}
HandlerMethod handlerMethod = (HandlerMethod) handler;
Method method = handlerMethod.getMethod();
AutoIdempotent autoIdempotent = method.getAnnotation(AutoIdempotent.class);
if (autoIdempotent != null)
{
try
{
return tokenService.checkToken(request);// 幂等性校验, 校验通过则放行, 校验失败则抛出异常, 并通过统一异常处理返回友好提示
} catch (Exception ex)
{
throw ex;
}
}
return true;
}
@Override
public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception
{
}
@Override
public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception
{
}
}
定义常量
package com.example.demo.constant;
/**
* @author 朝花不迟暮
* @version 1.0
* @date 2021/1/30 20:02
*/
public class RedisConstant
{
public static final String TOKEN_PREFIX="tk";
public static final String TOKEN_NAME ="token";
}
控制器
package com.example.demo.controller;
import com.example.demo.annotation.AutoIdempotent;
import com.example.demo.service.TokenService;
import org.apache.commons.lang.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RestController;
import javax.servlet.http.HttpServletRequest;
/**
* @author 朝花不迟暮
* @version 1.0
* @date 2021/1/30 20:24
*/
@RestController
public class BusinessController
{
@Autowired
private TokenService tokenService;
@PostMapping("/get/token")
public String getToken()
{
String token = tokenService.createToken();
if (StringUtils.isNotEmpty(token))
{
return token;
}
return StringUtils.EMPTY;
}
@AutoIdempotent
@GetMapping("/test/Idempotence")
public String testIdempotence(HttpServletRequest req)
{
return "aaa!";
}
}
测试效果
启动项目,打开postman,请求 http://127.0.0.1:8080/get/token 获取token
请求 http://127.0.0.1:8080/test/Idempotence
请求,返回结果说明通过,一旦成功,存到redis里的token就会被删掉,这样一个token对应一个请求,下一个请求要想进来就得重新申请一个token,这就是接口的保护机制!
总结
在一些传递重要数据的接口上,实现接口幂等性是十分重要的,要保证一个请求只能影响一次数据以防止脏乱数据的产生,并且可以防止一定的并发量,所以这样做是有必要的。而且通过自定义接口,提高了功能伸缩性,更值得提倡,学会(废)了吗?
源码地址:https://gitee.com/thirtyleo/java_training_ground/tree/master/MiDeng
球球给个star吧!