package d1.dxsaas.common.filter;
import java.io.ByteArrayInputStream;
import java.io.IOException;
import java.util.HashMap;
import java.util.Iterator;
import java.util.Map;
import java.util.Set;
import javax.servlet.ReadListener;
import javax.servlet.ServletInputStream;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletRequestWrapper;
import cn.hutool.json.JSONUtil;
import d1.dxsaas.common.utils.json.StringJsonUtils;
import org.apache.commons.io.IOUtils;
import org.apache.commons.lang3.StringUtils;
import org.springframework.http.HttpHeaders;
import org.springframework.http.MediaType;
public class ParameterRequestWrapper extends HttpServletRequestWrapper {
private Map<String, String[]> params = new HashMap<>();
public ParameterRequestWrapper(HttpServletRequest request) {
// 将request交给父类,以便于调用对应方法的时候,将其输出,其实父亲类的实现方式和第一种new的方式类似
super(request);
//将参数 赋予给当前的Map以便于持有request中的参数
Map<String, String[]> requestMap = request.getParameterMap();
this.params.putAll(requestMap);
this.modifyParameterValues();
}
/**
* 将parameter的值去除空格后重写回去
*/
public void modifyParameterValues() {
Set<String> set = params.keySet();
Iterator<String> it = set.iterator();
while (it.hasNext()) {
String key = it.next();
String[] values = params.get(key);
values[0] = values[0].trim();
params.put(key, values);
}
}
/**
* 重写getInputStream方法 post类型的请求参数必须通过流才能获取到值
*/
@Override
public ServletInputStream getInputStream() throws IOException {
//非json类型,直接返回
if (null == super.getHeader(HttpHeaders.CONTENT_TYPE) || !super.getHeader(HttpHeaders.CONTENT_TYPE).equalsIgnoreCase(MediaType.APPLICATION_JSON_VALUE)) {
return super.getInputStream();
}
//为空,直接返回
String json = IOUtils.toString(super.getInputStream(), "utf-8");
if (StringUtils.isEmpty(json)) {
return super.getInputStream();
}
//System.out.println("去除POST请求数据空格前参数:"+json);
Object map = StringJsonUtils.jsonStringToMap(json);
//System.out.println("去除POST请求数据空格后参数:"+JSONUtil.toJsonStr(map));
ByteArrayInputStream bis = new ByteArrayInputStream(JSONUtil.toJsonStr(map).getBytes("utf-8"));
return new MyServletInputStream(bis);
}
@Override
public String getParameter(String name) {
String[] values = params.get(name);
if (values == null || values.length == 0) {
return null;
}
return values[0];
}
/**
* 重写getParameterValues
*/
@Override
public String[] getParameterValues(String name) {
//同上
return params.get(name);
}
class MyServletInputStream extends ServletInputStream {
private ByteArrayInputStream bis;
public MyServletInputStream(ByteArrayInputStream bis) {
this.bis = bis;
}
@Override
public boolean isFinished() {
return true;
}
@Override
public boolean isReady() {
return true;
}
@Override
public void setReadListener(ReadListener listener) {
}
@Override
public int read() {
return bis.read();
}
}
}
package d1.dxsaas.common.filter;
import org.apache.commons.lang3.StringUtils;
import org.springframework.stereotype.Component;
import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;
/**
* 参数前后端空格过滤器
* @author Lihaichang
*/
@Component
@WebFilter(urlPatterns = "/**", filterName = "ParamsFilter", dispatcherTypes = DispatcherType.REQUEST)
public class ParamsFilter implements Filter {
private String[] prefixIignores ;
private String ignoresParam;
@Override
public void init(FilterConfig filterConfig) throws ServletException {
ignoresParam = filterConfig.getInitParameter("exclusions");
if (StringUtils.isNotEmpty(ignoresParam)) {
prefixIignores = ignoresParam.split(",");
}
return;
}
@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
if (canIgnore((HttpServletRequest) request)) {
chain.doFilter(request, response);
return;
}
ParameterRequestWrapper parmsRequest = new ParameterRequestWrapper((HttpServletRequest) request);
chain.doFilter(parmsRequest, response);
}
@Override
public void destroy() {
}
private boolean canIgnore(HttpServletRequest request) {
boolean isExcludedPage = false;
//排除
// 判断是否包含要 过滤的 url
for (String page : prefixIignores) {
if (request.getRequestURI().indexOf(page) != -1) {
isExcludedPage = true;
break;
}
}
return isExcludedPage;
}
}