动态为Spring Boot项目中所有自定义的Controller添加过滤器的两种方法

1、定义过滤器

package cn.study.filter;

import java.io.IOException;
import java.util.Optional;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class MyFilter implements Filter {
	@Override
	public void doFilter(ServletRequest request, ServletResponse response, 
            FilterChain chain) throws IOException, ServletException {
		HttpServletRequest httpReq = (HttpServletRequest) request;
		HttpServletResponse httpResp = (HttpServletResponse) response;
            // 判断条件
            boolean condition = ... ;
            if (!condition) {
        	httpResp.sendError(401);
            } else {
        	chain.doFilter(request, response);
            }
	}
}

2、添加过滤器

package cn.study.config;

import cn.study.filter.MyFilter;

import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

import java.util.HashSet;
import java.util.Set;

@Configuration
public class WebMvcConfig implements WebMvcConfigurer {
	@Bean
	public FilterRegistrationBean<MyFilter> registration() {
		Set<String> pathSet = new HashSet<>();
		FilterRegistrationBean<MyFilter> filterRegistrationBean = new FilterRegistrationBean<>();
		filterRegistrationBean.setFilter(new MyFilter());
		pathSet.forEach(path -> filterRegistrationBean.addUrlPatterns(path));
		filterRegistrationBean.setName("MyFilter");
		filterRegistrationBean.setOrder(1);
		return filterRegistrationBean;
	}
}

3、只用将上述代码中的pathSet替换成需要过滤的路径集合,功能就实现了,下面介绍两种获取方式,可以直接在WebMvcConfig中添加

package cn.study.config;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.context.WebApplicationContext;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
import org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping;

import java.io.File;
import java.io.IOException;
import java.net.URL;
import java.net.URLDecoder;
import java.util.Arrays;
import java.util.HashSet;
import java.util.Set;

@Configuration
public class WebMvcConfig implements WebMvcConfigurer {

	@Autowired
	WebApplicationContext applicationContext;

	/**
	 * 
	 */
	public Set<String> getControllerPathSet1() {
		Set<String> pathSet = new HashSet<String>();
		RequestMappingHandlerMapping handlerMapping = applicationContext.getBean(RequestMappingHandlerMapping.class);
		handlerMapping.getHandlerMethods().values().forEach(handlerMethod -> {
			Class<?> clazz = handlerMethod.getMethod().getDeclaringClass();
			if (clazz.getName().startsWith("cn.study")) {
				RequestMapping annotation = clazz.getAnnotation(RequestMapping.class);
				if (annotation != null) {
					Arrays.asList(annotation.value()).forEach(value -> pathSet.add(value + "/*"));
				}
			}
		});
		return pathSet;
	}

	/**
	 * 
	 */
	public Set<String> getControllerPathSet2() {
                String packageName = "cn.study";
		Set<String> pathSet = new HashSet<>();
		String packageDirName = packageName.replace('.', '/');
		try {
			URL url = Thread.currentThread().getContextClassLoader().getResource(packageDirName);
			String protocol = url.getProtocol();
			if ("file".equals(protocol)) {
				String filePath = URLDecoder.decode(url.getFile(), "UTF-8");
				getControllerPath(packageName, filePath, pathSet);
			}
		} catch (IOException e) {
			e.printStackTrace();
		}
		return pathSet;
	}

	private void getControllerPath(String packageName, String packagePath, Set<String> pathSet) {
		File dir = new File(packagePath);
		if (!dir.exists() || !dir.isDirectory()) {
			return;
		}
		File[] dirfiles = dir.listFiles(file -> (file.isDirectory()) || (file.getName().endsWith("Controller.class")));
		for (File file : dirfiles) {
			if (file.isDirectory()) {
				getControllerPath(packageName + "." + file.getName(), file.getAbsolutePath(), pathSet);
			} else {
				String className = file.getName().substring(0, file.getName().length() - 6);
				try {
					Class<?> clazz = Class.forName(packageName + '.' + className);
					RequestMapping annotation = clazz.getAnnotation(RequestMapping.class);
					if (annotation != null) {
						Arrays.asList(annotation.value()).forEach(value -> pathSet.add(value + "/*"));
					}
				} catch (ClassNotFoundException e) {
					e.printStackTrace();
				}
			}
		}
	}
}

4、第一种方法使用Spring自带的方法更通用一些,第二种要求所有controller必须以Controller作为结尾

参考文章1:https://www.cnblogs.com/Leechg/p/10058763.html

参考文章2:https://blog.csdn.net/tt____tt/article/details/82012999

  • 1
    点赞
  • 3
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
Spring Boot使用Shiro进行自定义过滤器的配置,可以按照以下步骤进行操作: 1. 在pom.xml文件添加Shiro的依赖: ``` <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-spring-boot-starter</artifactId> <version>1.7.1</version> </dependency> ``` 2. 创建自定义过滤器UserAuthenticatingFilter和UserAuthenticatingOrJwtTokenFilter,继承自Shiro提供的AuthenticatingFilter。 UserAuthenticatingFilter用于实现基于表单认证的过滤器,该过滤器可以在用户访问需要身份认证的资源时进行身份认证,并将用户的登录信息保存到Shiro的Subject对象。 UserAuthenticatingOrJwtTokenFilter用于实现基于JWT令牌认证的过滤器,该过滤器可以在用户访问需要身份认证的资源时进行身份认证,如果请求头携带了有效的JWT令牌,则使用JWT令牌进行身份认证,否则使用基于表单的身份认证方式。 3. 在Shiro配置进行过滤器的配置: ``` @Configuration public class ShiroConfig { // ... @Bean public UserAuthenticatingFilter userAuthenticatingFilter() { return new UserAuthenticatingFilter(); } @Bean public UserAuthenticatingOrJwtTokenFilter userAuthenticatingOrJwtTokenFilter() { return new UserAuthenticatingOrJwtTokenFilter(); } @Bean public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager, UserAuthenticatingFilter userAuthenticatingFilter, UserAuthenticatingOrJwtTokenFilter userAuthenticatingOrJwtTokenFilter) { // 创建ShiroFilterFactoryBean对象 ShiroFilterFactoryBean factoryBean = new ShiroFilterFactoryBean(); // 设置SecurityManager factoryBean.setSecurityManager(securityManager); // 设置自定义过滤器 Map<String, Filter> filters = new HashMap<>(); filters.put("userAuthenticatingFilter", userAuthenticatingFilter); filters.put("userAuthenticatingOrJwtTokenFilter", userAuthenticatingOrJwtTokenFilter); factoryBean.setFilters(filters); // 设置过滤器链 Map<String, String> filterChainDefinitionMap = new LinkedHashMap<>(); filterChainDefinitionMap.put("/login", "anon"); filterChainDefinitionMap.put("/logout", "logout"); filterChainDefinitionMap.put("/**", "userAuthenticatingOrJwtTokenFilter"); factoryBean.setFilterChainDefinitionMap(filterChainDefinitionMap); return factoryBean; } // ... } ``` 在上述代码,我们通过@Bean注解创建了两个自定义过滤器实例:UserAuthenticatingFilter和UserAuthenticatingOrJwtTokenFilter,然后将这两个过滤器添加到ShiroFilterFactoryBean对象,并设置过滤器链。 4. 在Controller使用Shiro进行身份认证: ``` @RestController public class UserController { @RequestMapping(value = "/login", method = RequestMethod.POST) public String login(String username, String password) { Subject subject = SecurityUtils.getSubject(); UsernamePasswordToken token = new UsernamePasswordToken(username, password); try { subject.login(token); return "login success"; } catch (AuthenticationException e) { return "login failed"; } } @RequestMapping(value = "/logout") public String logout() { Subject subject = SecurityUtils.getSubject(); subject.logout(); return "logout success"; } @RequestMapping(value = "/test") public String test() { return "test success"; } } ``` 在上述代码,我们通过调用SecurityUtils.getSubject()获取当前Subject对象,然后使用UsernamePasswordToken进行身份认证。如果身份认证成功,则返回"login success"字符串;否则返回"login failed"字符串。 5. 在Postman或浏览器访问API: - 访问/login接口进行身份认证,例如: ``` POST http://localhost:8080/login?username=admin&password=admin ``` - 访问/test接口进行访问控制,例如: ``` GET http://localhost:8080/test ``` 如果用户已经登录,则返回"test success"字符串;否则返回"401 Unauthorized"错误。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值