SpringBoot登錄用戶權限攔截器
1. 創(chuàng)建自定義攔截器類并實現(xiàn) HandlerInterceptor 接口
package com.xgf.online_mall.interceptor;
import com.xgf.online_mall.system.domain.User;
import lombok.extern.slf4j.Slf4j;
import org.springframework.stereotype.Component;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.BufferedWriter;
import java.io.FileWriter;
import java.nio.file.Files;
import java.nio.file.Path;
import java.nio.file.Paths;
import java.text.SimpleDateFormat;
import java.util.Date;
import java.util.logging.SimpleFormatter;
@Slf4j
@Component
public class UserLoginAuthInterceptor implements HandlerInterceptor {
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
log.info(" ======== UserAuthInterceptor preHandle 登錄權限攔截器攔截");
User user = (User) request.getSession().getAttribute("loginUser");
//未登錄才判斷,登錄了直接放行
if(user == null){
//獲取訪問路徑
String address = request.getRequestURI();
log.info("======== 攔截,訪問路徑 address : {}", address);
response.sendRedirect(request.getContextPath() + "/login.html");
return false;
/*String address = request.getRequestURI();
log.info("======== 攔截,訪問路徑 address : {}", address);
//不是登錄或者注冊頁面,就直接跳轉登錄界面
if(!address.contains("login") && !address.contains("register")){
//強制到登錄頁面
response.sendRedirect(request.getContextPath() + "/login.html");
//設置為false,不訪問controller
return false;
}*/
}
//其它模塊或者已經登錄,就直接放行
// log.info("======== 已登錄 user = {}", user);
return true;
}
@Override
public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
log.info(" ===== UserAuthInterceptor postHandle");
}
@Override
public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
log.info("==== UserAuthInterceptor afterCompletion");
//記錄日志 向文件里面寫日志
//獲取服務器記錄日志log文件所存放的目錄位置 -- tomcat下的真實路徑+log目錄
String logdir = request.getServletContext().getRealPath("log");
//路徑不存在就創(chuàng)建
Path logdirPath = Paths.get(logdir);
if(Files.notExists(logdirPath)){
Files.createDirectories(logdirPath);
}
//目錄存在就將數(shù)據[字符]寫入 //存放日志的路徑+文件名
Path logfile = Paths.get(logdir,"userlog.log");
//logfile.toFile() paths轉換為File類型 true以追加的方式寫入
BufferedWriter writer = new BufferedWriter(new FileWriter(logfile.toFile(),true));
//獲取登錄用戶信息
User user = (User)request.getSession().getAttribute("loginUser");
//記錄user信息,存入日志
writer.write(new SimpleDateFormat("yyyy-MM-dd HH:mm:ss").format(new Date()) + " >> " + user +"\r\n");
writer.flush();
writer.close();
}
}
2. 創(chuàng)建WebMvcConfigurer接口實現(xiàn)類,注冊并生效自定義的攔截器
import com.xgf.online_mall.constant.PathConstantParam;
import com.xgf.online_mall.interceptor.UserLoginAuthInterceptor;
import lombok.extern.slf4j.Slf4j;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
import java.util.ArrayList;
import java.util.List;
@Configuration
@Slf4j
public class LoginConfig implements WebMvcConfigurer {
@Autowired
private UserLoginAuthInterceptor userLoginAuthInterceptor;
/**
* addInterceptors方法設置攔截路徑
* addPathPatterns:需要攔截的訪問路徑
* excludePathPatterns:不需要攔截的路徑,
* String數(shù)組類型可以寫多個用","分割
* @param registry
*/
@Override
public void addInterceptors(InterceptorRegistry registry){
log.info(" ======== LoginConfig.addInterceptors");
//添加對用戶未登錄的攔截器,并添加排除項
//error路徑,excludePathPatterns排除訪問的路徑在項目中不存在的時候,
//springboot會將路徑變成 /error, 導致無法進行排除。
registry.addInterceptor(userLoginAuthInterceptor)
.addPathPatterns("/**")
.excludePathPatterns("/js/**", "/css/**", "/img/**", "/plugins/**")
.excludePathPatterns("/login.html", "/register.html", "/system/user/login", "/system/user/login", "/index")
.excludePathPatterns("/error");
}
}
到此這篇關于SpringBoot登錄用戶權限攔截器的文章就介紹到這了,更多相關SpringBoot 用戶權限攔截器內容請搜索腳本之家以前的文章或繼續(xù)瀏覽下面的相關文章希望大家以后多多支持腳本之家!
相關文章
Java中的HashMap和Hashtable區(qū)別解析
這篇文章主要介紹了Java中的HashMap和Hashtable區(qū)別解析,HashMap和Hashtable都實現(xiàn)了Map接口,但決定用哪一個之前先要弄清楚它們之間的區(qū)別,主要的區(qū)別有線程安全性、同步和速度,需要的朋友可以參考下2023-11-11
MyBatis查詢數(shù)據,賦值給List集合時,數(shù)據缺少的問題及解決
這篇文章主要介紹了MyBatis查詢數(shù)據,賦值給List集合時,數(shù)據缺少的問題及解決方案,具有很好的參考價值,希望對大家有所幫助。如有錯誤或未考慮完全的地方,望不吝賜教2022-01-01
java線程池prestartCoreThread prestartAllCoreThreads的預熱源碼解讀
這篇文章主要介紹了java線程池prestartCoreThread prestartAllCoreThreads的預熱源碼解讀,有需要的朋友可以借鑒參考下,希望能夠有所幫助,祝大家多多進步,早日升職加薪2023-10-10
Spring MVC+mybatis實現(xiàn)注冊登錄功能
這篇文章主要為大家詳細介紹了Spring MVC+mybatis實現(xiàn)注冊登錄功能,具有一定的參考價值,感興趣的小伙伴們可以參考一下2017-07-07
jcl與jul?log4j1?log4j2?logback日志系統(tǒng)機制及集成原理
這篇文章主要介紹了jcl與jul?log4j1?log4j2?logback的集成原理,Apache?Commons-logging?通用日志框架與日志系統(tǒng)的機制,有需要的朋友可以借鑒參考下2022-03-03

