Spring AOP验证用户权限

1.新建一个Java普通工程，并需导入spring-aop.jar包；
2.建UserInfo类：
package aop.secure;

public class UserInfo {

private String userName;
private String password;

public UserInfo(String userName, String password){
this.userName = userName;
this.password = password;
}

public String getPassword() {
return password;
}

public String getUserName() {
return userName;
}
}

3.建安全信息提示类SecureBean：
package aop.secure;

public class SecureBean {

public void writeSecureMessage(){
System.out.println("Every time I learn something new and it pushes some old stuff out of my brain.");
}
}

4.建切面类SecurityAdvice实现org.springframework.aop.MethodBeforeAdvice：
package aop.secure;

import java.lang.reflect.Method;

import org.springframework.aop.MethodBeforeAdvice;

public class SecurityAdvice implements MethodBeforeAdvice {

private SecurityManager securityManager;

public SecurityAdvice(){
this.securityManager = new SecurityManager();
}

public void before(Method method, Object[] args, Object target) throws Throwable {
UserInfo user = securityManager.getLoggedOnUser();
if(user == null){
System.out.println("No user authenticated.");
throw new SecurityException("Method name: " + method.getName());
}else if("chigo".equals(user.getUserName()) && "chigo".equals(user.getPassword())){
System.out.println("OKAY!");
}else{
System.out.println("Logged in user is: " + user.getUserName());
throw new SecurityException("User " + user.getUserName() + " is not allowed access to method " + method.getName());
}
}

}

5.建登陆与注销管理类SecurityManager：
package aop.secure;

public class SecurityManager {

private static ThreadLocal local = new ThreadLocal();

public void login(String userName, String password){
local.set(new UserInfo(userName,password));
}

public void logout(){
local.set(null);
}

public UserInfo getLoggedOnUser(){
return (UserInfo)local.get();
}
}

6.最后建测试类SecurityExample：
package aop.secure;

import org.springframework.aop.framework.ProxyFactory;

public class SecurityExample {

private static SecureBean getSecureBean(){
SecureBean sbean = new SecureBean();
SecurityAdvice sadvice = new SecurityAdvice();
ProxyFactory pf = new ProxyFactory();
pf.setTarget(sbean);
pf.addAdvice(sadvice);
SecureBean factory = (SecureBean)pf.getProxy();
return factory;
}

public static void main(String[] args) {
SecurityManager mgr = new SecurityManager();
SecureBean sbean = getSecureBean();

mgr.login("chigo","chigo");
sbean.writeSecureMessage();
mgr.logout();

try{
mgr.login("kkk","");
sbean.writeSecureMessage();
}catch(SecurityException ex){
System.out.println("Exception caught: " + ex.getMessage());
}finally{
mgr.logout();
}

try{
sbean.writeSecureMessage();
}catch(SecurityException ex){
System.out.println("Exception caught: " + ex.getMessage());
}
}

}