springboot用HandlerInterceptor实现登录失效拦截等

朱雀 2020-10-18 12:02 1137阅读 1赞

首先写一个实现HandlerInterceptor 的类，代码如下：

public class SessionInterceptor implements HandlerInterceptor { 
    
        @Autowired
        RedisTemplate<String, String> redisTemplate;
    
        //private static String LOGIN_CODE = "/user/no_loginPage?Landingcode=" + UserResourcesHelper.LANDINGCODE_106;// 登录地址及code信息
    
        //private static String LOGIN_CODE = "https://open.weixin.qq.com/connect/oauth2/authorize?appid=wxd11f95277f85e24b&redirect_uri=&response_type=code&scope=snsapi_userinfo&state=1234#wechat_redirect";
    
        protected List<String> patterns = new ArrayList<String>(Arrays.asList(".*?/.*/no_.*?", "/", "/error"));
    
        public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
                throws Exception {
            // 一些不需要过滤的方法
            String url = request.getRequestURI();
            if (isInclude(url) == true)
                return true;
    
            // 权限校验
            Cookie cookie = getCookieByName(request, UserResourcesHelper.COOKIE_TOKEN_NAME);
            String user = null;
            if (cookie != null && !cookie.getValue().equals("")) {
                user = redisTemplate.opsForValue().get(RedisKeyConstant.USER_WEB_TOKEN + cookie.getValue());
            }
            if (cookie == null || user == null) {
       // 判断用户是否经过了授权
                // 判断是否是AJAX访问
                if (request.getHeader("x-requested-with") != null
                        && request.getHeader("x-requested-with").equalsIgnoreCase("XMLHttpRequest")) {
                    response.setHeader("sessionstatus", "timeout");
                    response.setStatus(403);
                    return false;
                } else {
                    response.sendRedirect(request.getContextPath()+"/home/no_index_toLoginSkip");
                    //response.sendRedirect(request.getContextPath() +UserResourcesHelper.LOGIN_URL); // 非AJAX访问，页面跳转
                    //response.sendRedirect(request.getContextPath() +"https://open.weixin.qq.com/connect/oauth2/authorize?appid=wxd11f95277f85e24b&redirect_uri="+URLEncoder.encode("http://m.hobay.cn/user/no_loginPage", "utf-8")+"&response_type=code&scope=snsapi_base&state=123#wechat_redirect"); // 非AJAX访问，页面跳转
                    return false;
                }
            }
            return true;
        }
    
    
        @Override
        public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler,
                ModelAndView modelAndView) throws Exception {
    
        }
    
        @Override
        public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex)
                throws Exception {
    
        }
    
        private boolean isInclude(String url) {
            for (String pattern : patterns) {
                if (Pattern.matches(pattern, url)) {
                    return true;
                }
            }
            return false;
        }
    
        /** * 根据名字获取cookie * * @param request * @param name * cookie名字 * @return */
        private static Cookie getCookieByName(HttpServletRequest request, String name) {
            Map<String, Cookie> cookieMap = ReadCookieMap(request);
            if (cookieMap.containsKey(name)) {
                Cookie cookie = (Cookie) cookieMap.get(name);
                return cookie;
            } else {
                return null;
            }
        }
    
        /** * 将cookie封装到Map里面 * * @param request * @return */
        private static Map<String, Cookie> ReadCookieMap(HttpServletRequest request) {
            Map<String, Cookie> cookieMap = new HashMap<String, Cookie>();
            Cookie[] cookies = request.getCookies();
            if (null != cookies) {
                for (Cookie cookie : cookies) {
                    cookieMap.put(cookie.getName(), cookie);
                }
            }
            return cookieMap;
        }

然后把这个拦截器注册到spring中，代码如下：

@EnableWebMvc
    @Configuration
    public class WebConfig extends WebMvcConfigurerAdapter{ 
    
    
         @Bean
         SessionInterceptor sessioninterceptor() {
             return new SessionInterceptor();
        }
    
    
        /** * 配置拦截器 * @author yuqingquan * @param registry */
        public void addInterceptors(InterceptorRegistry registry) {
            registry.addInterceptor(sessioninterceptor());
        }