SpringBoot通过ThreadLocal实现登录拦截详解流程

package com.liubujun.config;

import com.liubujun.moudle.UserToken;

import com.liubujun.util.SecurityContextUtil;

import lombok.extern.slf4j.Slf4j;

import org.springframework.http.HttpStatus;

import org.springframework.stereotype.Component;

import org.springframework.util.StringUtils;

import org.springframework.web.servlet.HandlerInterceptor;

import org.springframework.web.servlet.ModelAndView;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.xml.ws.handler.Handler;

import java.io.IOException;

/**

  * @Author: liubujun

  * @Date: 2022/5/21 16:12

  */

@Component

@Slf4j

public class HeadTokenInterceptor implements HandlerInterceptor {

     @Override

     public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

         String authorization = request.getHeader( "Authorization" );

         if (authorization == null ) {

             unauthorized(response);

             return false ;

         }

         //这里一般都会解析出userToken的值，这里为了方便就直接new了

         UserToken userToken  = new UserToken();

         SecurityContextUtil.addUser(userToken);

         return false ;

     }

     @Override

     public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {

     }

     @Override

     public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {

         SecurityContextUtil.removeUser();

     }

     private void unauthorized(HttpServletResponse response) {

         response.setStatus(HttpStatus.UNAUTHORIZED.value());

         try {

             response.getWriter().append(HttpStatus.UNAUTHORIZED.getReasonPhrase());

         } catch (IOException e) {

             log.error( "HttpServletResponse writer error.msg" ,HttpStatus.UNAUTHORIZED.getReasonPhrase());

             log.error(e.getMessage(),e);

         }

     }

}

package com.liubujun.config;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.context.annotation.Configuration;

import org.springframework.web.servlet.config.annotation.InterceptorRegistry;

import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;

import org.springframework.web.servlet.config.annotation.WebMvcConfigurationSupport;

import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

import java.util.ArrayList;

/**

  * @Author: liubujun

  * @Date: 2022/5/21 16:40

  */

@Configuration

public class MyWebMvcConfigurer extends WebMvcConfigurationSupport {

     @Autowired

     private HeadTokenInterceptor headTokenInterceptor;

     /**

      * 类似于白名单，在这边添加的请求不会走拦截器

      * @param registry

      */

     @Override

     public void addInterceptors(InterceptorRegistry registry) {

         ArrayList<String> pattres = new ArrayList<>();

         pattres.add( "/login/login" );

         registry.addInterceptor(headTokenInterceptor).excludePathPatterns(pattres).addPathPatterns( "/**" );

         super .addInterceptors(registry);

     }

     /**

      * 添加静态资源

      * @param registry

      */

     @Override

     public void addResourceHandlers(ResourceHandlerRegistry registry) {

         registry.addResourceHandler( "xxx.html" )

                 .addResourceLocations( "classpath:/META-INF/resources" );

         super .addResourceHandlers(registry);

     }

}

package com.liubujun.util;

import com.liubujun.moudle.UserToken;

import org.springframework.core.NamedThreadLocal;

/**

  * @Author: liubujun

  * @Date: 2022/5/23 9:41

  */

public class SecurityContextUtil {

     private static ThreadLocal<UserToken> threadLocal = new NamedThreadLocal<>( "user" );

     public static void addUser(UserToken user){

         threadLocal.set(user);

     }

     public static UserToken getUser(){

         return threadLocal.get();

     }

     public static void removeUser(){

         threadLocal.remove();

     }

     public static String getPhoneNumber(){

         return threadLocal.get().getPhoneNumber();

     }

     public static Integer getId(){

         return threadLocal.get().getId();

     }

     public static String getUserText(){

         return threadLocal.get().getUserText();

     }

}

@RestController

@RequestMapping (value = "/login" ,produces = { "application/json;charset=UTF-8" })

public class Login {

     @PostMapping ( "/login" )

     public String login(){

         return "登录请求不需要拦截" ;

     }

     @PostMapping ( "/other" )

     public String other(){

         return "其他的请求需要拦截" ;

     }

}