Spring MVC Interceptor 拦截器 api接口简单token验证

最新推荐文章于 2024-08-29 16:57:17 发布

Ed_W

最新推荐文章于 2024-08-29 16:57:17 发布

阅读量1.6w

点赞数

本文链接：https://blog.csdn.net/edward9145/article/details/18701541

版权

本文介绍了如何在Spring MVC中使用Interceptor进行API接口的Token验证。服务器端会对比请求参数MD5值与传入的Token，不匹配则返回500状态码。客户端在请求时需先将除Token外的所有参数与token_key拼接并计算MD5值，作为Token参数发送。

摘要由CSDN通过智能技术生成

用Spring MVC做api接口，在请求中加入token做简单的验证

服务器：

拼接token之外所有参数，最后拼接token_key，做MD5，与token参数比对

如果token比对失败返回状态码 500

public class APIInterceptor extends HandlerInterceptorAdapter {

	@Override
	public boolean preHandle(HttpServletRequest request,
			HttpServletResponse response, Object handler) throws Exception {
		Log.info(request);
		
		String token = request.getParameter("token");
		
		// token is not needed when debug
		if(token == null) return true;  // !! remember to comment this when deploy on server !!
		
		Enumeration paraKeys = request.getParameterNames();
		String encodeStr = "";
		while (paraKeys.hasMoreElements()) {
			String paraKey = (String) paraKeys.nextElement();
			if(paraKey.equals("token")) 
				break;
			String paraValue = request.getParameter(paraKey);
			encodeStr += paraValue;
		}
		encodeStr += Default.TOKEN_KEY;
		Log.out(encodeStr);
		
		if ( ! token.equals(DigestUtils.md5Hex(encodeStr))) {
			response.setStatus(500);
			return false;
		}
		
		return true;
	}

	@Override
	public void postHandle(HttpServletRequest request,
			HttpServletResponse response, Object handler,
			ModelAndView modelAndView) throws Exception {
		Log.info(request);
	}

	@Override
	public void afterCompletion(HttpServletRequest request,
			HttpServletResponse response, Object handler, Exception ex)
			t