package org.jeecg.modules.shiro.authc.interceptor;
|
|
import com.alibaba.fastjson.JSON;
|
import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
|
import lombok.extern.slf4j.Slf4j;
|
import org.jeecg.common.api.vo.Result;
|
import org.jeecg.common.aspect.annotation.OnlineAuth;
|
import org.jeecg.common.system.util.JwtUtil;
|
import org.jeecg.common.util.oConvertUtils;
|
import org.jeecg.modules.system.entity.SysPermission;
|
import org.jeecg.modules.system.service.ISysPermissionService;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.web.method.HandlerMethod;
|
import org.springframework.web.servlet.HandlerInterceptor;
|
|
import javax.servlet.http.HttpServletRequest;
|
import javax.servlet.http.HttpServletResponse;
|
import java.io.IOException;
|
import java.io.PrintWriter;
|
import java.util.ArrayList;
|
import java.util.List;
|
|
/**
|
* Online 自定义请求拦截器
|
*
|
* @author: taoyan
|
* @date: 2020年03月20日
|
*/
|
@Slf4j
|
public class OnlineInterceptor implements HandlerInterceptor {
|
|
@Autowired
|
private ISysPermissionService sysPermissionService;
|
|
/**
|
* online表单菜单地址
|
*/
|
private static final String ONLINE_FORM = "/online/cgform";
|
|
/**
|
* online功能测试地址 前缀
|
*/
|
private static final String[] ONLINE_TEST_PRE = {"/online/cgformErpList", "/online/cgformList", "/online/cgformTreeList"};
|
|
@Override
|
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
|
// 请求的方法是否有注解
|
boolean anno = handler.getClass().isAssignableFrom(HandlerMethod.class);
|
if (anno) {
|
OnlineAuth onlineAuth = ((HandlerMethod) handler).getMethodAnnotation(OnlineAuth.class);
|
if (onlineAuth != null) {
|
String requestPath = request.getRequestURI().substring(request.getContextPath().length());
|
requestPath = filterUrl(requestPath);
|
//1.通过前端请求地址得到code
|
String authKey = onlineAuth.value();
|
String code = requestPath.substring(requestPath.lastIndexOf(authKey) + authKey.length());
|
log.info("拦截请求(" + request.getMethod() + ")：" + requestPath + ",");
|
if ("form".equals(authKey) && "DELETE".equals(request.getMethod())) {
|
code = code.substring(0, code.lastIndexOf("/"));
|
}
|
List<String> possibleUrl = new ArrayList<>();
|
//获取可能的表单地址
|
for (String pre : ONLINE_TEST_PRE) {
|
possibleUrl.add(pre + code);
|
}
|
//查询菜单
|
LambdaQueryWrapper<SysPermission> query = new LambdaQueryWrapper<SysPermission>();
|
query.eq(SysPermission::getDelFlag, 0);
|
query.in(SysPermission::getUrl, possibleUrl);
|
List<SysPermission> permissionList = sysPermissionService.list(query);
|
|
String username = JwtUtil.getUserNameByToken(request);
|
if (permissionList == null || permissionList.size() == 0) {
|
//没有配置菜单 找online表单菜单地址
|
boolean hasPermission = sysPermissionService.hasPermission(username, ONLINE_FORM);
|
if (!hasPermission) {
|
backError(response, authKey);
|
return false;
|
}
|
} else {
|
//找到菜单了
|
boolean has = false;
|
for (SysPermission p : permissionList) {
|
has = has || sysPermissionService.hasPermission(username, p);
|
}
|
if (!has) {
|
backError(response, authKey);
|
return false;
|
}
|
}
|
}
|
}
|
return true;
|
}
|
|
/**
|
* 地址过滤
|
*
|
* @param requestPath
|
* @return
|
*/
|
private String filterUrl(String requestPath) {
|
String url = "";
|
if (oConvertUtils.isNotEmpty(requestPath)) {
|
url = requestPath.replace("\\", "/");
|
url = requestPath.replace("//", "/");
|
if (url.indexOf("//") >= 0) {
|
url = filterUrl(url);
|
}
|
}
|
return url;
|
}
|
|
/**
|
* 返回一个错误信息
|
*
|
* @param response
|
* @param authKey
|
*/
|
private void backError(HttpServletResponse response, String authKey) {
|
PrintWriter writer = null;
|
response.setCharacterEncoding("UTF-8");
|
response.setContentType("application/json; charset=utf-8");
|
response.setHeader("auth", "fail");
|
try {
|
writer = response.getWriter();
|
if ("exportXls".equals(authKey)) {
|
writer.print("");
|
} else {
|
Result<?> result = Result.error("无权限访问(操作)");
|
writer.print(JSON.toJSON(result));
|
}
|
} catch (IOException e) {
|
log.error(e.getMessage());
|
} finally {
|
if (writer != null) {
|
writer.close();
|
}
|
}
|
}
|
}
|
