spring mvc 自定义拦截器

springmvc-servlet.xml

 <mvc:interceptors>
        <mvc:interceptor>
            <mvc:mapping path="/my/*"/>
            <bean  class="com.xxx.web.interceptor.AuthInterceptor"></bean>
        </mvc:interceptor>
        <mvc:interceptor>
            <mvc:mapping path="/op/*"/>
            <bean  class="com.xxx.web.interceptor.OpenApiInterceptor"></bean>
        </mvc:interceptor>
        <mvc:interceptor>
            <mvc:mapping path="/news/*/newsDetail.htm"/>
            <bean  class="com.xxx.web.interceptor.MobileInterceptor"></bean>
        </mvc:interceptor>
    </mvc:interceptors>


public class OpenApiInterceptor extends HandlerInterceptorAdapter {

    private static Logger log = LoggerFactory.getLogger(OpenApiInterceptor.class);

    @Value("${permissionIp}")
    private String permissionIp;

    /**
     * 最后执行,可用于释放资源
     */
    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex)
            throws Exception {
        super.afterCompletion(request, response, handler, ex);
    }

    /**
     * 显示视图前执行
     */
    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler,
            ModelAndView modelAndView) throws Exception {
        super.postHandle(request, response, handler, modelAndView);
    }

    /**
     * Controller之前执行
     */
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

        // 请求的路径
        // String contextPath = request.getContextPath();
        String remoteUrl = request.getRequestURI().toString();
        if (remoteUrl.endsWith("getStock.htm")) {
            return true;
        }
        String queryString = request.getQueryString();
        String remoteCid = request.getParameter("cid");
        // HttpSession session = request.getSession();
        String remoteIP = getRemoteIP(request);
        List<String> filterIPs = getPermissionIp();
        if (StringUtils.isEmpty(remoteCid)) {
            log.error("remote cid is empty. remoteIP:[{}]", remoteIP);
            writeResponse(response, "01", "remote cid is empty");
            return false;
        }
        log.error("request openAPI,remoteCid:[" + remoteCid + "],remoteIP:[{}],remoteUrl:[{}],queryString:["
                + queryString + "]", remoteIP, remoteUrl);
        if (filterIPs.isEmpty() || contains(filterIPs, remoteIP)) {
            return true;
        } else {
            log.error("Invalid remote IP. remoteIP:[{}]", remoteIP);
            writeResponse(response, "02", "Invalid remote IP");
        }
        return false;
    }

    private void writeResponse(HttpServletResponse resp, String retCode, String result) throws IOException {
        resp.getOutputStream().write(
                ("{\"retCode\":" + "\"" + retCode + "\"" + ",\"retMsg\":" + "\"" + result + "\"" + "}")
                        .getBytes("UTF-8"));
        resp.flushBuffer();
    }

    private List<String> getPermissionIp() {
        List<String> result = new ArrayList<String>();
        if (!StringUtils.isEmpty(permissionIp)) {
            if (permissionIp.indexOf(",") != -1) {
                String[] ip = permissionIp.split(",");
                for (int i = 0, len = ip.length; i < len; i++) {
                    if (!StringUtils.isEmpty(ip[i])) {
                        result.add(ip[i]);
                    }
                }
            }

        }
        return result;
    }

    private boolean contains(List<String> list, String remoteIP) {
        for (String ip : list) {
            if (ip.indexOf("*") > 0) {
                int end = ip.indexOf("*");
                if (remoteIP.startsWith(ip.substring(0, end))) {
                    return true;
                }
            } else if (ip.equals(remoteIP)) {
                return true;
            }
        }
        return false;
    }

    private String getRemoteIP(HttpServletRequest req) {
        String ip = req.getHeader("x-forwarded-for");
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = req.getHeader("Proxy-Client-IP");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = req.getHeader("WL-Proxy-Client-IP");
        }
        if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
            ip = req.getRemoteAddr();
            // 这里主要是获取本机的ip,可有可无
            if (ip.equals("127.0.0.1") || ip.endsWith("0:0:0:0:0:0:1")) {
                // 根据网卡取本机配置的IP
                InetAddress inet = null;
                try {
                    inet = InetAddress.getLocalHost();
                } catch (UnknownHostException e) {
                    log.error("获取IP异常", e);
                }
                ip = inet.getHostAddress();
            }

        }
        // 对于通过多个代理的情况,第一个IP为客户端真实IP,多个IP按照','分割
        if (ip != null && ip.length() > 15) { // "***.***.***.***".length()
                                              // = 15
            if (ip.indexOf(",") > 0) {
                ip = ip.substring(0, ip.indexOf(","));
            }
        }
        return ip;
    }

}


  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
Spring MVC拦截器是一种强大的功能,它允许你在请求到达控制器方法之前或之后执行自定义逻辑。通过使用注解,你可以方便地配置拦截器行为。Spring提供了`@ControllerAdvice`和`@ModelAttribute`等注解来实现拦截器功能。 **@ControllerAdvice** 注解: - 当你需要对整个控制器层进行通用的错误处理或日志记录时,可以将该注解应用到一个类上。所有被@Controller修饰的类的方法(如`@ExceptionHandler`处理异常)会被拦截器捕获。 **@ModelAttribute** 注解: - 这个注解通常与`@InitBinder`一起使用,可以在模型绑定前进行数据校验或预处理。例如,检查参数是否符合特定格式,然后填充到视图模型。 **创建自定义拦截器注解**: - 你可以定义一个自定义注解,如`@PreAuthorize`,然后编写一个对应的拦截器类,实现`HandlerInterceptor`接口,方法执行你的逻辑。 例如: ```java @Retention(RetentionPolicy.RUNTIME) @Target(ElementType.METHOD) public @interface PreAuthorize { // 定义拦截器规则 } ``` 实现拦截器: ```java @Component public class MyAuthorizationInterceptor implements HandlerInterceptor { @Override public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { // 在这里检查权限,如果满足条件则返回true继续执行,否则可以抛出异常或设置响应码 if (myAuthorizationRule(request)) { return true; } // 阻止请求并返回错误信息 return false; } // 其他HandlerInterceptor方法... } ```
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值