SpringBoot拦截器和处理跨域请求

SpringBoot拦截器和处理跨域请求

1、Handler

import com.alibaba.fastjson.JSON;
import org.springframework.stereotype.Component;
import org.springframework.util.StringUtils;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * 创建拦截器需要实现"HandlerInterceptor"接口
 * 实现方法有三个，一般只需要在preHandle中写相关拦截配置
 *      此处演示使用JWT登录验证
 */
@Component
public class LoginHandler implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

        if (handler instanceof HandlerMethod){
            //说明访问static中的静态资源，对这些请求不进行拦截
            //因为有可能访问静态资源中的登陆页面
            return true;
       }
        //token一般存放在请求头中，key为Authorization
        String token = request.getHeader("Authorization");
        if (StringUtils.isEmpty(token)){
            //这块返回给前端一些信息，比如未登录、登陆过期等等
            //返回格式
            response.setContentType("application/json;charset=utf-8");
            //返回给前端json格式数据信息
            response.getWriter().print(JSON.toJSONString("未登录"));
            return false;
        }
        //执行到这说明有token，需要判断token是否过期，和redis中的token是否一致
        //如果是将token放入了redis缓存中，那就在redis中查找并比对

        //如果只使用JWT，那么进行解密和比对

        //如果能够执行到这，说明登陆验证没问题
        return true;
    }

    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {

    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {

    }
}

2、Config

import com.example.testHandler.LoginHandler;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Primary;
import org.springframework.web.servlet.config.annotation.CorsRegistry;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

@Configuration
public class LoginConfig implements WebMvcConfigurer {

    @Autowired
    private LoginHandler loginHandler;

    //进行拦截器的配置
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        //添加拦截器
        registry.addInterceptor(loginHandler)
                /*添加拦截的页面,比如：拦截page下所有的页面
                    addPathPatterns("/page/**")
                 */
                .addPathPatterns("/url")
                /*
                    添加不拦截的页面，比如一些登录和注册页面
                    excludePathPatterns("/page/login.html","/page/register.html")
                 */
                .excludePathPatterns("/url");
    }

    //处理跨域请求
    @Override
    public void addCorsMappings(CorsRegistry registry) {

        //"*"表示所有的ip都可以访问
        registry.addMapping("/**")
                //请求头可以是这些
                .allowedHeaders("Content-Type","X-Requested-With","accept,Origin","Access-Control-Request-Method","Access-Control-Request-Headers","token")
                .allowedMethods("*")
                .allowedOrigins("*")
                .allowCredentials(true);
    }
}