spring AOP 对请求接口做登录校验拦截

 AOP配置类：

package com.xty.conf;

import com.xty.model.service.UserService;
import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.annotation.*;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import org.springframework.web.context.request.RequestContextHolder;
import org.springframework.web.context.request.ServletRequestAttributes;

import javax.servlet.http.HttpSession;
import java.util.ArrayList;


/**
 * Created by xuyling on 2019/9/10.
 */
@Aspect
@Component
public class AopConfig {

    @Autowired
    private UserService userService;

    @Pointcut("execution(* com.xty.model.service.StudentService.*(..))")//切入面在StudentService类下的所有方法
    public void match(){}

    @Around("match()")
    public Object before(ProceedingJoinPoint pjp) throws Throwable {

        Object result = null;
        System.out.println("前置通知");
        ServletRequestAttributes attr = (ServletRequestAttributes) RequestContextHolder.currentRequestAttributes();//获取当前请求
        HttpSession session=attr.getRequest().getSession(true);
        boolean isLogin = userService.isLogin(session);
        
        if(!isLogin){
            //未登录
            ArrayList list = new ArrayList();
            list.add("用户未登录");
            return list;
        }else{
           result = pjp.proceed(pjp.getArgs());//执行后面的业务代码
            System.out.println("后置通知");
           return result;
        }

    }

   /* @After("match()")
    public void after(){
        System.out.println("后置通知");
    }*/

}

登录类编写，这里只是做测试，写的很粗糙

package com.xty.model.service;

import com.xty.model.entity.UserEntity;
import com.xty.model.mapper.UserMapper;
import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

/**
 * Created by xuyling on 2019/8/5.
 */
@Service
public class UserService {

        @Autowired
        UserMapper userMapper;

        public UserEntity Sel(int id){
            return userMapper.Sel(id);
        }
    

        //判断用户是否登录
        public boolean isLogin(HttpSession session){

            UserEntity currentUser = (UserEntity) session.getAttribute("current_user");
            if(currentUser!=null){
               return true;
            }
            return false;
        }

        //登录
        public UserEntity login(UserEntity userEntity,HttpSession session){
            if(StringUtils.isNotBlank(userEntity.getUserName())&&StringUtils.isNotBlank(userEntity.getPassWord())){
                UserEntity user = userMapper.getUserByUsernameAndPassword(userEntity.getUserName(), userEntity.getPassWord());
                if(user!=null){
                    session.setAttribute("current_user",user);
                    return user;
                }
            }

            return null;

        }
        //退出
        public boolean outLogin(HttpSession session){
            session.removeAttribute("current_user");
            return true;

        }


}