拦截器
实现HandlerInterceptor接口
Interceptor和Filter
接口规范不同:Filter接口、HandlerInterceptor接口
拦截范围不同:Filter拦截所有资源,Interceptor只拦截Spring环境的资源
package com.webtest.tliaswebmanagement.interceptor;
import com.alibaba.fastjson.JSONObject;
import com.webtest.tliaswebmanagement.pojo.Result;
import com.webtest.tliaswebmanagement.utils.JwtUtils;
import lombok.extern.slf4j.Slf4j;
import org.springframework.stereotype.Component;
import org.springframework.util.StringUtils;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.util.Properties;
@Component
@Slf4j
public class LoginCheckInterceptor implements HandlerInterceptor {
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
String url = request.getRequestURL().toString();
log.info("请求的url:{}"+url);
// 2、判断请求是否包含login,如果包含,说明是登录操作,放行
if(url.contains("login")){
log.info("登录操作,放行");
return true;
}
// 3、获取请求中的token
String jwt = request.getHeader("token");
// 4、判断令牌是否存在,不存在返回错误
if(!StringUtils.hasLength(jwt)){
log.info("请求头token为空,返回未登录的信息");
Result error = Result.error("NOT_LOGIN");
//手动转化为json
String notLogin = JSONObject.toJSONString(error);
response.getWriter().write(notLogin);
return false;
}
// 5、解析token,解析失败返回错误
try {
JwtUtils.parseJWT(jwt);
} catch (Exception e) {
e.printStackTrace();
log.info("解析失败");
Result error = Result.error("NOT_LOGIN");
String notLogin = JSONObject.toJSONString(error);
response.getWriter().write(notLogin);
return false;
}
// 6、放行
log.info("令牌合法");
return true;
}
@Override
public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
HandlerInterceptor.super.postHandle(request, response, handler, modelAndView);
}
@Override
public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
HandlerInterceptor.super.afterCompletion(request, response, handler, ex);
}
}