话不多说,直接上核心代码
1、先创建一个Filter类
package com.qbb.reggie.filter;
import com.alibaba.fastjson.JSON;
import com.qbb.reggie.common.R;
import com.qbb.reggie.properties.AuthProperties;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.util.AntPathMatcher;
import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.List;
/**
* @author QIUQIU&LL (个人博客:https://www.cnblogs.com/qbbit)
* @version 1.0
* @date 2022-08-07 22:26
* @Description:
*/
@WebFilter(filterName = "loginCheckFilter", urlPatterns = "/*")
public class LoginCheckFilter implements Filter {
@Autowired
private AuthProperties authProperties;
/**
* 路径检验
*/
public static final AntPathMatcher ANT_PATH_MATCHER = new AntPathMatcher();
@Override
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
HttpServletRequest request = (HttpServletRequest) servletRequest;
HttpServletResponse response = (HttpServletResponse) servletResponse;
// 获取请求的URI
String requestURI = request.getRequestURI();
// 判断请求是否需要登录
List<String> authurls = authProperties.getAnyoneurls();
// 校验请求路径
boolean check = check(authurls, requestURI);
if (check) {
// 非受保护资源
filterChain.doFilter(request, response);
return;
}
Object employee = request.getSession().getAttribute("employee");
if (employee != null) {
// 已登录放行
filterChain.doFilter(request, response);
return;
}
// 未登录
response.getWriter().write(JSON.toJSONString(R.error("NOTLOGIN")));
return;
}
/**
* 路径匹配,检查下次请求是否需要
*
* @param urls
* @param requestURI
* @return
*/
private boolean check(List<String> urls, String requestURI) {
for (String url : urls) {
boolean match = ANT_PATH_MATCHER.match(url, requestURI);
if (match) {
return true;
}
}
return false;
}
}
2、配置文件信息
app:
auth:
anyoneurls:
# 需要登录才能访问的资源
- /employee/login
- /employee/logout
- /backend/**
- /front/**
3、主启动类上加注解
@ServletComponentScan // 开启servlet注解扫描