SpringBoot Aop进行身份验证

忘了好复制

创建一个注解，可以应用于类或者方法上的，进行表示身份认证。

@Target({ElementType.TYPE, ElementType.METHOD})
@Retention(RetentionPolicy.RUNTIME)
public @interface VerifyLogin {
}

定义一个没有登录的异常和全局异常处理器，如果没有登录就抛出没有登录异常，让全局异常处理器来处理，重定向到登录页面。

定义异常

public class NotLoginException extends RuntimeException{
    public NotLoginException(String message) {
        super(message);
    }
}

全局异常处理器

@ControllerAdvice
public class GlobalExceptionHandler {

    @ExceptionHandler(NotLoginException.class)
    public ModelAndView handleUserNotLoggedInException(NotLoginException ex, HttpServletRequest request, HttpServletResponse response) throws Exception {
        ModelAndView mav = new ModelAndView();
        mav.addObject("exception", ex);
        mav.addObject("url", request.getRequestURL());
        mav.setViewName("redirect:/login.html");
        return mav;
    }
}

创建AOP

@Component
@Aspect
public class VerifyLoginAspect {

    private final VerificationIdentity verificationIdentity;

    @Autowired
    public VerifyLoginAspect(VerificationIdentity verificationIdentity) {
        this.verificationIdentity = verificationIdentity;
    }

    @Around(value = "@within(com.example.demo.annotation.VerifyLogin) || @annotation(com.example.demo.annotation.VerifyLogin)")
    public Object verifyLogin(ProceedingJoinPoint joinPoint) throws Throwable {
        ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
        try {
            assert attributes != null;
            HttpServletRequest request = attributes.getRequest();
            if (!verificationIdentity.VerificationIfLogin(request)) {
                throw new NotLoginException("User is not logged in.");
            }
        } catch (NotLoginException e) {
            throw e;
        } catch (Exception e) {
            throw new NotLoginException("Error occurred during login verification.");
        }
        return joinPoint.proceed();
    }
}

controller里应用的示例

@RestController
@VerifyLogin
@RequestMapping("/announcement")
public class AddAnnoController {

    @Autowired
    AnnouncementDao announcementDao;

    @GetMapping("/add")
    public String handleFormUpload(@RequestParam("designation") String designation,
                                 @RequestParam("content") String content,
                                 @RequestParam("remark") String remark,
                                 @RequestParam("file") MultipartFile file,
                                 HttpServletRequest request,
                                 HttpServletResponse response) {
        ...
        return "hello world";
    }
}