springboot过滤掉重复请求

springboot过滤掉重复请求

使用自定义过滤器过滤掉重复请求，防止重复提交

import org.springframework.stereotype.Component;
import org.springframework.util.DigestUtils;
import org.springframework.web.filter.OncePerRequestFilter;

import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.Arrays;
import java.util.Map;
import java.util.concurrent.ConcurrentHashMap;
import java.util.concurrent.TimeUnit;
import java.util.stream.Collectors;

@Component
public class DuplicateRequestFilter extends OncePerRequestFilter {

    // 用于存储请求的唯一标识符，及其过期时间
    private final ConcurrentHashMap<String, Long> requestMap = new ConcurrentHashMap<>();

    // 设置请求的过期时间
    private static final long EXPIRATION_TIME = TimeUnit.SECONDS.toMillis(3); // 3秒

    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
            throws ServletException, IOException {
        // 生成请求的唯一标识符
        String requestIdentifier = generateRequestIdentifier(request);

        long currentTime = System.currentTimeMillis();
        Long lastRequestTime = requestMap.get(requestIdentifier);

        if (lastRequestTime != null && (currentTime - lastRequestTime) < EXPIRATION_TIME) {
            // 如果发现重复请求，则返回429状态码
            response.setStatus(429);
            response.setContentType("application/json;charset=UTF-8");
            //返回内容可以写成自己系统的json格式
            response.getWriter().write("请勿重复请求");
            return;
        }

        // 将请求标识符和当前时间存储到Map中
        requestMap.put(requestIdentifier, currentTime);

        // 继续执行请求
        filterChain.doFilter(request, response);
        // 请求处理完清理过期的请求记录
        requestMap.entrySet().removeIf(entry -> currentTime - entry.getValue() > EXPIRATION_TIME);
    }

    private String generateRequestIdentifier(HttpServletRequest request) {
        String method = request.getMethod(); //请求方式
        String uri = request.getRequestURI();//请求地址
        String queryString = request.getQueryString();//请求参数
        // 拼接请求数据字符串，最好加上会话凭证
        String requestData = method + uri + queryString;
        return DigestUtils.md5DigestAsHex(requestData.getBytes());
    }
}

总结

编写自定义过滤器继承OncePerRequestFilter，定义存储请求标识的map对象，使用ConcurrentHashMap保证线程安全，定义时间范围内的请求算重复请求，根据请求数据生成一个唯一标识去判断是否为重复请求。