OncePerRequestFilter的初次使用

最新推荐文章于 2025-02-27 13:51:36 发布

离俗

最新推荐文章于 2025-02-27 13:51:36 发布

阅读量1.4k

点赞数

分类专栏：个人总结文章标签： java servlet 开发语言

本文链接：https://blog.csdn.net/weixin_52526235/article/details/126332090

版权

个人总结专栏收录该内容

52 篇文章

订阅专栏

一、需求

springsecurity整合oauth2，且，禁止security的表单登录

二、逻辑分析

跳过UserDetailsService，即不使用数据库的数据作为判断依据，这样就要放弃security的各种拦截器，像UsernamePasswordAuthenticationFilter、BasicAuthenticationFilter这些拦截器，就可以考虑使用OncePerRequestFilter

三、代码实现

import com.applet.SecurityConfig.SecurityUser;
import com.applet.SecurityConfig.TokenManager;
import com.applet.SecurityConfig.StringUtils;
import lombok.extern.slf4j.Slf4j;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.security.web.authentication.WebAuthenticationDetailsSource;
import org.springframework.web.filter.OncePerRequestFilter;
import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
@Slf4j
public class TokenAuthFilter extends OncePerRequestFilter {
    private TokenManager tokenManager;

    public TokenAuthFilter(TokenManager tokenManager) {
        this.tokenManager = tokenManager;
    }

    @Override
    protected void doFilterInternal(HttpServletRequest req, HttpServletResponse resp, FilterChain chain) throws ServletException, IOException {
        String token = req.getHeader("Authorization");
        StringUtils stringUtils = new StringUtils();
        stringUtils.isNotEmpty(token);
        if(StringUtils.isEmpty(token)){
            chain.doFilter(req,resp);
            return;
        }
        SecurityUser userInfoFromReq = tokenManager.getUserInfoFromReq(req);
        if (StringUtils.isNotNull(userInfoFromReq) && StringUtils.isNull(SecurityContextHolder.getContext().getAuthentication())) {
            UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(userInfoFromReq, null, userInfoFromReq.getAuthorities());
            authenticationToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(req));
            log.info("authenticationToken:"+authenticationToken);
            SecurityContextHolder.getContext().setAuthentication(authenticationToken);
        }
        chain.doFilter(req, resp);
    }
}