spring cloud--Zuul实现登录拦截过滤

1.pom依赖

    
        org.springframework.cloud
        spring-cloud-starter-zuul
    

    
    
        org.springframework.cloud
        spring-cloud-config-client
    

    
        io.jsonwebtoken
        jjwt
    

    
        org.projectlombok
        lombok
    

    
        junit
        junit
        test
    
    
    
        org.springframework.boot
        spring-boot-devtools
    

    
        javax.servlet
        javax.servlet-api
    
    
    
        org.springframework.boot
        spring-boot-starter-actuator
    


    
    
        org.springframework.boot
        spring-boot-configuration-processor
        true
    
	
    
        com.xu.common
        com-xu-common
        0.0.1
    
    

2.application.yml配置

    spring:
        profiles:
            active: ${config_profile:dev}
        application:
            name: com-xu-gate
        http:
             multipart:
               maxFileSize: -1
               maxRequestSize: -1
    server:
      port: 6060 #启动端口
    //  undertow:
    //    worker-threads: 16 # 阻塞任务线程池, 当执行类似servlet请求阻塞操作, undertow会从这个线程池中取得线程,它的值设置取决于系统的负载
        
    #
    zuul:
      sensitiveHeaders:  
      add-host-header: true   #可以重定向
      host:
        socket-timeout-millis: 10000
        connect-timeout-millis: 5000
    //    max-per-route-connections: 100 #每个route可用的最大连接数，默认值是20
    //    max-total-connections: 1000 #每个服务的http客户端连接池最大连接，默认是200
    // semaphore:
    //   max-semaphores: 500 #The maximum number of total semaphores for Hystrix.默认100
    
    gate:
      ignore:
        startWith: /static
        contain: .
      oauth:
        prefix: /api
      login:
        control: off    #登录开关，on：表示需要登录才能下单。off：表示支持免登陆下单
    
      jwt:
        secret: Xe*g@1jda
        expiration: 7200
        header: access-token

zuul:
  routes:
    middle:
      path: /admin/**
      //serviceId: com-xu-admin
      url: http://127.0.0.1:6071/
product:
  path: /product/**
  //serviceId: com-cloud-product
  url: http://127.0.0.1:6073/

order:
  path: /order/**
  //serviceId: com-cloud-order
  url: http://127.0.0.1:6074/

satisitcs:
  path: /statistics/**
  #serviceId: com-cloud-satisitcs
  url: http://127.0.0.1:6075/

3.启动类配置
@SpringBootApplication
@EnableZuulProxy
@ComponentScan(basePackages = “com.xu”)
public class GateBootstrap {

public static void main(String[] args) {
    SpringApplication.run(GateBootstrap.class, args);
}

@Bean
public CorsFilter corsFilter() {
    final UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
    final CorsConfiguration config = new CorsConfiguration();
    config.setAllowCredentials(true); // 允许cookies跨域
    config.addAllowedOrigin("*");// 允许向该服务器提交请求的URI，*表示全部允许。。这里尽量限制来源域，比如http://xxxx:8080
    config.addAllowedHeader("*");// 允许访问的头信息,*表示全部
    config.setMaxAge(18000L);// 预检请求的缓存时间（秒），即在这个时间段里，对于相同的跨域请求不会再预检了
    config.addAllowedMethod("*");// 允许提交请求的方法，*表示全部允许，也可以单独设置GET、PUT等
    source.registerCorsConfiguration("/**", config);
    return new CorsFilter(source);
}

}
4.过滤器代码
@Slf4j
@Component
public class LoginFilter extends ZuulFilter {

@Autowired
private RedisHelper redisHelper;

//非拦截地址
private List paths;
public LoginFilter() {
	super();
	paths = new ArrayList<>();
	paths.add("/login/logining");
	paths.add("/login/checkCode");
	paths.add("/ui/**");
	paths.add("/**/swagger**/**");
	paths.add("/**/v2/api-docs");
	paths.add("/**/*.css");
	paths.add("/**/*.jpg");
	paths.add("/**/*.png");
	paths.add("/**/*.gif");
	paths.add("/**/*.js");
	paths.add("/**/*.svg");
}


@Override
public String filterType() {
	return "pre";
}

@Override
public int filterOrder() {
	return 2;
}

@Override
public boolean shouldFilter() {
	RequestContext requestContext = RequestContext.getCurrentContext();
	HttpServletRequest request = requestContext.getRequest();
	String uri=request.getRequestURI();
	log.info("uri:{}", uri);
	PathMatcher matcher = new AntPathMatcher();
	Optional optional =paths.stream().filter(t->matcher.match(t,uri)).findFirst();
	return !optional.isPresent();
}

@Override
public Object run() {
	RequestContext ctx = RequestContext.getCurrentContext();
	HttpServletRequest request = ctx.getRequest();
	log.info("send  {} request to {} ",request.getMethod(),request.getRequestURL().toString());
	String accessToken=request.getHeader("access-token");
	if(StrUtil.isEmpty(accessToken)){
		accessToken = request.getParameter("token");
	}
	if(StringUtils.isEmpty(accessToken)) {
		log.warn("access token is empty");
		ctx.setSendZuulResponse(false);
		ctx.setResponseStatusCode(401);
		ctx.setResponseBody("access token is empty");
		return  null;
	}

	UserInfoDto userInfoDto = redisHelper.getCache(accessToken, UserInfoDto.class);
	//验证token正确性
	if(userInfoDto==null||!userInfoDto.getToken().equals(accessToken)) {
		log.warn("access token is invalid");
		ctx.setSendZuulResponse(false);
		ctx.setResponseStatusCode(401);
		ctx.setResponseBody("access token time out");
		return  null;
	}
	//放到request对象中,方便后续方法取值
	request.setAttribute(SysParamEnum.USERINFO.getKey(),userInfo);
	//刷新token
	redisHelper.putCacheWithExpireTime(accessToken,userInfo,3600);
	log.info("access token ok");
	return null;

}

}

欢迎评论点赞