微服务接口内部调用注解

网关拦截器

将所有通过网关的接口进行加入请求头

@Component  
public class AuthFilter implements GlobalFilter, Ordered {  
    @Override  
    public Mono < Void > filter ( ServerWebExchange exchange, GatewayFilterChain chain ) {  
         return chain.filter(  
         exchange.mutate().request(  
         exchange.getRequest().mutate().header("id", "").header("from", "public").build())  
         .build()  
         )；  
    }  
  
    @Override  
    public int getOrder () {  
        return 0;  
    }  
 }  

注解

在方法上加注解

@Target({ElementType.METHOD})  
@Retention(RetentionPolicy.RUNTIME)  
@Documented  
public @interface OnlyIntranetAccess {  
}

aop

判断请求头中是否包含Public

@Aspect  
@Component  
@Slf4j  
public class OnlyIntranetAccessAspect {  
 @Pointcut ( "@within(org.openmmlab.platform.common.annotation.OnlyIntranetAccess)" )  
 public void onlyIntranetAccessOnClass () {}  
 @Pointcut ( "@annotation(org.openmmlab.platform.common.annotation.OnlyIntranetAccess)" )  
 public void onlyIntranetAccessOnMethed () {  
 }  
  
 @Before ( value = "onlyIntranetAccessOnMethed() || onlyIntranetAccessOnClass()" )  
 public void before () {  
     HttpServletRequest hsr = (( ServletRequestAttributes ) RequestContextHolder.getRequestAttributes()) .getRequest ();  
     String from = hsr.getHeader ( "from" );  
     if ( !StringUtils.isEmpty( from ) && "public".equals ( from )) {  
        log.error ( "This api is only allowed invoked by intranet source" );  
        throw new MMException ( ReturnEnum.C_NETWORK_INTERNET_ACCESS_NOT_ALLOWED_ERROR);  
            }  
     }  
 }  
  
@Target({ElementType.METHOD})  
@Retention(RetentionPolicy.RUNTIME)  
@Documented  
public @interface OnlyIntranetAccess {  
}  

使用

最后，在只能内网访问的接口上加上@OnlyIntranetAccess注解即可

@GetMapping ( "/role/add" )  
@OnlyIntranetAccess  
public String onlyIntranetAccess() {  
    return "该接口只允许内部服务调用";  
}

openFeign调用不走网关 所以请求头中的含有public的请求是来自于网关调用