springBoot 定义未登录拦截

登录验证

	@ApiOperation(value="用户登录验证",notes = "用户登录验证")
	@RequestMapping("loginUser")
	public String getUsers(String username,String password,HttpServletRequest request) {
		Enumeration<String> header = request.getHeaderNames();
//		while(header.hasMoreElements()) {
//			System.out.println(header.nextElement());
//		}
//    	这里验证登录，用户名、密码正确存session，不正确转发到登录页
		String flag = "";
		try {
			if(StringUtils.isEmpty(username) || StringUtils.isEmpty(password)) {
				flag = "用户名或者密码为空";
				return "redirect:"+"login";
			}
			User user = userService.findByUsername(username, password);
			if(user != null){
				HttpSession session = request.getSession();
				session.setAttribute("user", user);
				return "index";
			}else{
				flag = "用户名或者密码错误";
				request.setAttribute("flag",flag);
				return "login";
			}
		} catch (Exception e) {
			e.printStackTrace();
		}
		return flag;
	}

定义拦截器

/** 
 * 登录验证拦截 
 * 
 */  
@Controller  
@Component  
public class LoginInterceptor extends HandlerInterceptorAdapter {  
      
    Logger log = Logger.getLogger(LoginInterceptor.class);  
  
    @Override  
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)  
            throws Exception {  
        String basePath = request.getContextPath();  
        String path = request.getRequestURI();  
          
        if(!doLoginInterceptor(path, basePath) ){//是否进行登陆拦截  
            return true;  
        }  
          
          
        //如果登录了，会把用户信息存进session  
        HttpSession session = request.getSession();  
        User users =  (User) session.getAttribute("user");
        if(users==null){  
            String requestType = request.getHeader("X-Requested-With");  
            if(requestType!=null && requestType.equals("XMLHttpRequest")){  
                response.setHeader("sessionstatus","timeout");  
                response.getWriter().print("LoginTimeout");  
                response.sendRedirect(request.getContextPath() + "login");
                return false;  
            } else {  
                log.info("尚未登录，跳转到登录界面");  
            }
            return false;  
        }  
        return true;  
    }  
      
    /** 
     * 是否进行登陆过滤 
     * @param path 
     * @param basePath 
     * @return 
     */  
    private boolean doLoginInterceptor(String path,String basePath){  
        path = path.substring(basePath.length());  
        Set<String> notLoginPaths = new HashSet<>();  
        //设置不进行登录拦截的路径：登录注册和验证码  
        //notLoginPaths.add("/");  
        notLoginPaths.add("/loginUser");  
//        notLoginPaths.add("/");
        notLoginPaths.add("/login");  
//        notLoginPaths.add("/register");  
//        notLoginPaths.add("/kaptcha.jpg");  
//        notLoginPaths.add("/kaptcha");  
        //notLoginPaths.add("/sys/logout");  
        //notLoginPaths.add("/loginTimeout");  
          
        if(notLoginPaths.contains(path)) return false;  
        return true;  
    }  
}

自定义拦截规则

/**
 * @Description: WebMvcConfigurer 替代 WebMvcConfiguirerAdapter,对springMVC
 *                的自动配置和我们自己对springMVC的扩展都会有效，
 *                WebMvcConfigurationSupport 自动配置会失效
 * @Author: dongwei_qi
 * @Date: 2019/12/11
 */
@Configuration
public class WebConfig implements WebMvcConfigurer {

    @Autowired
    LoginInterceptor loginInterceptor;

    /**
     * 不需要登录拦截的url:登录注册和验证码
     */
    final String[] notLoginInterceptPaths = {"/login","loginUser","/pages/**","/**/*.css", "/**/*.js", "/**/*.png", "/**/*.jpg", "/**/*.jpeg", "/*.html", "/**/*.html","/swagger-resources/**"};//"/", "/login/**", "/person/**", "/register/**", "/validcode", "/captchaCheck", "/file/**", "/contract/htmltopdf", "/questions/**", "/payLog/**", "/error/**" };

    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        // 日志拦截器
        //registry.addInterceptor(logInterceptor).addPathPatterns("/**");
        // 登录拦截器
        registry.addInterceptor(loginInterceptor).addPathPatterns("/**").excludePathPatterns(notLoginInterceptPaths);
    }

    @Override
    public void configureDefaultServletHandling(DefaultServletHandlerConfigurer configurer) {
        configurer.enable();
    }


    /**
     * 设置默认登录页面
     */
    @Override
    public void addViewControllers(ViewControllerRegistry registry) {
//    	registry.addViewController("*/").setViewName("login");
//    	registry.setOrder(Ordered.HIGHEST_PRECEDENCE);
//    	super.addViewControllers(registry);
    }

}