忘了好复制🤣
创建一个注解,可以应用于类或者方法上的,进行表示身份认证。
@Target({ElementType.TYPE, ElementType.METHOD})
@Retention(RetentionPolicy.RUNTIME)
public @interface VerifyLogin {
}
定义一个没有登录的异常和全局异常处理器,如果没有登录就抛出没有登录异常,让全局异常处理器来处理,重定向到登录页面。
定义异常
public class NotLoginException extends RuntimeException{
public NotLoginException(String message) {
super(message);
}
}
全局异常处理器
@ControllerAdvice
public class GlobalExceptionHandler {
@ExceptionHandler(NotLoginException.class)
public ModelAndView handleUserNotLoggedInException(NotLoginException ex, HttpServletRequest request, HttpServletResponse response) throws Exception {
ModelAndView mav = new ModelAndView();
mav.addObject("exception", ex);
mav.addObject("url", request.getRequestURL());
mav.setViewName("redirect:/login.html");
return mav;
}
}
创建AOP
@Component
@Aspect
public class VerifyLoginAspect {
private final VerificationIdentity verificationIdentity;
@Autowired
public VerifyLoginAspect(VerificationIdentity verificationIdentity) {
this.verificationIdentity = verificationIdentity;
}
@Around(value = "@within(com.example.demo.annotation.VerifyLogin) || @annotation(com.example.demo.annotation.VerifyLogin)")
public Object verifyLogin(ProceedingJoinPoint joinPoint) throws Throwable {
ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
try {
assert attributes != null;
HttpServletRequest request = attributes.getRequest();
if (!verificationIdentity.VerificationIfLogin(request)) {
throw new NotLoginException("User is not logged in.");
}
} catch (NotLoginException e) {
throw e;
} catch (Exception e) {
throw new NotLoginException("Error occurred during login verification.");
}
return joinPoint.proceed();
}
}
controller里应用的示例
@RestController
@VerifyLogin
@RequestMapping("/announcement")
public class AddAnnoController {
@Autowired
AnnouncementDao announcementDao;
@GetMapping("/add")
public String handleFormUpload(@RequestParam("designation") String designation,
@RequestParam("content") String content,
@RequestParam("remark") String remark,
@RequestParam("file") MultipartFile file,
HttpServletRequest request,
HttpServletResponse response) {
...
return "hello world";
}
}