AntPathMatcher的使用

AntPathMatcher对于一些路径的匹配支持比较好，有了它，我们不用在分割字符串那么low的做法了

public class AuthProvider {

   public static String AUTH_KEY = TokenConstant.HEADER;
   private static final List<String> DEFAULT_SKIP_URL = new ArrayList<>();

   static {
      DEFAULT_SKIP_URL.add("/example");
      DEFAULT_SKIP_URL.add("/token/**");
      DEFAULT_SKIP_URL.add("/captcha/**");
      DEFAULT_SKIP_URL.add("/log/**");
   }

   /**
    * 默认无需鉴权的API
    */
   public static List<String> getDefaultSkipUrl() {
      return DEFAULT_SKIP_URL;
   }

}

public class AuthFilter implements GlobalFilter, Ordered {
	private final AuthProperties authProperties;
	private final ObjectMapper objectMapper;
	private final AntPathMatcher antPathMatcher = new AntPathMatcher();

	@Override
	public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) {
		String path = exchange.getRequest().getURI().getPath();
		if (isSkip(path)) {
			return chain.filter(exchange);
		}
		ServerHttpResponse resp = exchange.getResponse();
		//用户中心的 临时的
		String tokenTag = exchange.getRequest().getHeaders().getFirst("token");
		if (StringUtils.isNotBlank(tokenTag)) {
			return chain.filter(exchange);
		}
		String headerToken = exchange.getRequest().getHeaders().getFirst(AuthProvider.AUTH_KEY);
		String paramToken = exchange.getRequest().getQueryParams().getFirst(AuthProvider.AUTH_KEY);
		if (StringUtils.isAllBlank(headerToken, paramToken)) {
			return unAuth(resp, "缺失令牌,鉴权失败");
		}
		String auth = StringUtils.isBlank(headerToken) ? paramToken : headerToken;
		String token = JwtUtil.getToken(auth);
		Claims claims = JwtUtil.parseJWT(token);
		if (claims == null) {
			return unAuth(resp, "请求未授权");
		}
		return chain.filter(exchange);
	}

	private boolean isSkip(String path) {
		return AuthProvider.getDefaultSkipUrl().stream().anyMatch(pattern -> antPathMatcher.match(pattern, path))
				|| authProperties.getSkipUrl().stream().anyMatch(pattern -> antPathMatcher.match(pattern, path));
	}
}

ant匹配规则

Spring源码解析 - AntPathMatcher - 出门向左 - 博客园