SpringBoot自定义拦截器

短命女 2022-04-16 01:52 247阅读 0赞

现有页面

![20181115143003315.png][]

export function updateReport(report, emails, views) {
      const id = report.id
      const reportName = report.reportName
      const safeLevel = report.safeLevel
      const reportUrl = report.reportUrl
      const remark = report.remark
      const reportType = report.reportType
      return request({
    
        url: '/report/updateReport',
        method: 'post',
        data: {
          id,
          reportName,
          reportUrl,
          safeLevel,
          remark,
          reportType,
          emails,
          views
        }
      })
    
    
    export function deleteReport(reportId) {
      return request({
        url: '/report/deleteReport',
        method: 'post',
        data: {
          reportId
        }
      })
    }

列表有查看、编辑、删除功能，前端判断该条数据的creator与当前登录用户是不是同一个人，如果是则展示编辑和删除按钮。为防止恶意攻击，可以在后端再加个拦截器，双重控制。

先自定义拦截器：

@Component
    public class ReportHandler implements HandlerInterceptor{
    	
    	@Autowired
    	private ReportService reportService;
    
    	@Override
    	public void afterCompletion(HttpServletRequest arg0,
    			HttpServletResponse arg1, Object arg2, Exception arg3)
    			throws Exception {
    		// TODO Auto-generated method stub
    		
    	}
    
    	@Override
    	public void postHandle(HttpServletRequest arg0, HttpServletResponse arg1,
    			Object arg2, ModelAndView arg3) throws Exception {
    		// TODO Auto-generated method stub
    		
    	}
    
    	@Override
    	public boolean preHandle(HttpServletRequest req, HttpServletResponse arg1,
    			Object arg2) throws Exception {
    		
    		try{
    			String requestURI = req.getRequestURI();
                //是删除或者编辑请求
    			if(requestURI.indexOf("updateReport")!=-1 || requestURI.indexOf("deleteReport")!=-1){
    				String reportId = null;
                  //删除的参数为reportId
    				if(req.getParameter("reportId") != null){
    					reportId = req.getParameter("reportId");
    				}
                 //编辑的参数为id
    				if(req.getParameter("id") != null){
    					reportId = req.getParameter("id");
    				}
    				Report report = reportService.getById(reportId);
    				User user = new SessionUtil().getCurrentUser();
    				if(!report.getCreator().equals(user.getId())){
    					return false;
    				}
    			}
    			return true;
    		}catch (Exception e) {
    			return true;
    		}
    		
    	}
    
    }

再把拦截器添加到SpringBoot配置中：

@SpringBootConfiguration
    public class MySpringMVCConfig extends WebMvcConfigurerAdapter{
    
    	@Autowired
    	private ReportHandler reportHandler;
    
    	@Override
    	public void addInterceptors(InterceptorRegistry registry) {
    		registry.addInterceptor(reportHandler).addPathPatterns("/**");
    	}
    	
    	
    }

即可。

[20181115143003315.png]: /images/20220416/935b0cef79cd43c7b3d1ddc72513134f.png