package com.ruoyi.framework.interceptor;
|
|
import javax.servlet.http.HttpServletRequest;
|
import javax.servlet.http.HttpServletResponse;
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.stereotype.Component;
|
import org.springframework.web.method.HandlerMethod;
|
import org.springframework.web.servlet.HandlerInterceptor;
|
import org.springframework.util.StringUtils;
|
|
import com.ruoyi.common.annotation.Anonymous;
|
import com.ruoyi.common.exception.ServiceException;
|
import com.ruoyi.system.service.ISysClientAppService;
|
|
/**
|
* 匿名访问拦截器
|
*/
|
@Component
|
public class AnonymousInterceptor implements HandlerInterceptor {
|
|
@Autowired
|
private ISysClientAppService clientAppService;
|
|
@Override
|
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
|
// 如果不是映射到方法，直接通过
|
if (!(handler instanceof HandlerMethod)) {
|
return true;
|
}
|
|
// 获取方法上的注解
|
HandlerMethod handlerMethod = (HandlerMethod) handler;
|
Anonymous anonymous = handlerMethod.getMethodAnnotation(Anonymous.class);
|
|
// 如果方法上没有注解，则获取类上的注解
|
if (anonymous == null) {
|
anonymous = handlerMethod.getBeanType().getAnnotation(Anonymous.class);
|
}
|
|
// 如果没有注解，直接通过
|
if (anonymous == null) {
|
return true;
|
}
|
|
// 获取请求参数
|
String appId = request.getParameter("appId");
|
String sign = request.getParameter("sign");
|
String timestamp = request.getParameter("timestamp");
|
if(anonymous.needSign()){
|
if(appId == null || sign == null || timestamp == null){
|
throw new ServiceException("缺少必要参数");
|
|
}
|
}
|
// 验证必要参数
|
if (StringUtils.hasText(appId) && StringUtils.hasText(sign) && StringUtils.hasText(timestamp)) {
|
// 验证签名
|
if (clientAppService.validateSign(appId, sign, timestamp)) {
|
return true;
|
}
|
throw new ServiceException("签名验证失败");
|
}
|
|
// 如果没有验证参数，也允许通过（适用于不需要验证的匿名接口）
|
return true;
|
}
|
}
|
