用Spring AOP和springboot的全局异常捕捉器写简单的权限认证

AOP

//定义一个注解作为切入点，不同角色有不同权限，以此来判断是否用有该权限
@Retention(RetentionPolicy.RUNTIME)
@Target({ElementType.TYPE, ElementType.METHOD})
public @interface PermissionToCheck {

    UserTypeEnum type() default UserTypeEnum.ALL;

}

枚举类型

public enum UserTypeEnum {
    ADMIN(1L,"管理员"),
    USER(2L,"普通用户"),
    ALL(3L,"所有人");


    private Long id;
    private String name;

    UserTypeEnum(Long id, String name) {
        this.id = id;
        this.name = name;
    }

    public Long getId() {
        return id;
    }

    public String getName() {
        return name;
    }
}

@Aspect
@Component
public class PermissionToCheckAspectj {

    @Autowired
    private TokenUtils tokenUtils;
    //前置通知 ，在进入方法前就进行判断
    @Before("@annotation(com.example.bigzhangblogmaster.annotation.PermissionToCheck)")
    public void check(JoinPoint proceedingJoinPoint) throws Exception{
        //获取切入点的签名，就是参数
        MethodSignature signature = (MethodSignature)proceedingJoinPoint.getSignature();
        //拿到注解
        PermissionToCheck annotation1 = signature.getMethod().getAnnotation(PermissionToCheck.class);
        if ( annotation1!= null) {
            //RequestContextHolder 里面有HttpServletRequest可以获取参数
            //是在doService方法之前放到RequestContextHolder里面的
            ServletRequestAttributes requestAttributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
            //拿到token
            String token = requestAttributes.getRequest().getHeader("token");
            Long userId = tokenUtils.getUserId(token);
            UserTypeEnum type = annotation1.type();
            //判断是否有这个权限，没有就抛出异常
            Assert.isTrue((userId != type.getId() && userId != 3),PermissionException::new);
        }
    }

}

全局异常捕捉器

//用来捕获全局异常
@RestControllerAdvice
public class DemoController {
    //用来捕捉指定的异常
    @ExceptionHandler(value = PermissionException.class)
    public JsonResult permissionException(PermissionException P){
        String message = P.getMessage();
        //返回错误信息
        return ResultUtils.faileAndData(message,ResultCode.DATA_IS_WRONG);
    }
}

具体操作

    /**
     * 查询个人信息u
     * @return
     */
    @PermissionToCheck(type = UserTypeEnum.USER)
    @GetMapping
    public JsonResult getUserProfile(ServletRequest request){
        HttpServletRequest req = (HttpServletRequest) request;
        String token = req.getHeader(TokenUtils.TOKEN_NAME);
        Long userId = tokenUtils.getUserId(token);
        if (userId != null){
            Map<String,Object> map = new HashMap<>();
            SysUser user = userService.getById(userId);
            String userIdentity = userService.getUserIdentity(userId);
            map.put("user",user);
            map.put("roleGroup",userIdentity);
            return ResultUtils.success(map, ResultCode.SUCCESS);
        }else {
            return ResultUtils.faile(ResultCode.DATA_IS_WRONG);
        }
    }