摘要
- 实现简略的权限管制
- 实现简略的日志
权限管制
pom
<dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-aop</artifactId></dependency>annotation
@Target(ElementType.METHOD)@Retention(RetentionPolicy.RUNTIME)@Documentedpublic @interface PermissionAnnotation{}aspect
@Aspect@Component@Order(1)public class PermissionFirstAdvice { @Pointcut("@annotation(xx.xx.xx.PermissionAnnotation)") private void permissionCheck() { } @Around("permissionCheck()") public Object permissionCheckFirst(ProceedingJoinPoint joinPoint) throws Throwable { System.out.println(System.currentTimeMillis()); //获取申请参数 Object[] objects = joinPoint.getArgs(); String userName = (String) objects[0]; if (!userName.equals("admin")) { return "失败"; } return joinPoint.proceed(); }}controller
@RestController@RequestMapping(value = "/permission")public class TestController { @RequestMapping(value = "/check", method = RequestMethod.POST) @PermissionsAnnotation() public String getGroupList(@RequestParam String userName) { return "Hello "+userName; }}日志
pom
<parent> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-parent</artifactId> <version>2.3.5.RELEASE</version> <relativePath/> </parent> <dependencies> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-aop</artifactId> </dependency> <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-web</artifactId> </dependency> <dependency> <groupId>cn.hutool</groupId> <artifactId>hutool-all</artifactId> <version>5.5.6</version> </dependency> <dependency> <groupId>org.projectlombok</groupId> <artifactId>lombok</artifactId> </dependency> <dependency> <groupId>com.alibaba</groupId> <artifactId>fastjson</artifactId> <version>1.2.70</version> </dependency> </dependencies>aspect
@Aspect@Componentpublic class OperLogAspect { //操作切入点 @Pointcut("@annotation(com.bothsavage.annotation.OperLog)") public void operLogPoinCut() {} //失常返回告诉 @AfterReturning(value = "operLogPoinCut()", returning = "keys") public void saveOperLog(JoinPoint joinPoint, Object keys) { RequestAttributes requestAttributes = RequestContextHolder.getRequestAttributes(); HttpServletRequest request = (HttpServletRequest) requestAttributes.resolveReference(RequestAttributes.REFERENCE_REQUEST); OperationLog operlog = new OperationLog(); try { MethodSignature signature = (MethodSignature) joinPoint.getSignature(); Method method = signature.getMethod(); String className = joinPoint.getTarget().getClass().getName(); String methodName = method.getName(); OperLog opLog = method.getAnnotation(OperLog.class); methodName = className + "." + methodName; Map<String, String> rtnMap = converMap(request.getParameterMap()); String params = JSON.toJSONString(rtnMap); operlog.setOperId(IdUtil.randomUUID()); operlog.setOperModul(opLog.operModul()); operlog.setOperType(opLog.operType()); operlog.setOperDesc(opLog.operDesc()); operlog.setOperMethod(methodName); // 申请办法 operlog.setOperRequParam(params); // 申请参数 operlog.setOperRespParam(JSON.toJSONString(keys)); // 返回后果 operlog.setOperUri(request.getRequestURI()); // 申请URI operlog.setOperCreateTime(new Date()); // 创立工夫 //打印日志 System.out.println(JSON.toJSONString(operlog)); } catch (Exception e) { e.printStackTrace(); } } //转换request 申请参数 public Map<String, String> converMap(Map<String, String[]> paramMap) { Map<String, String> rtnMap = new HashMap<String, String>(); for (String key : paramMap.keySet()) { rtnMap.put(key, paramMap.get(key)[0]); } return rtnMap; } //转换异样信息为字符串 public String stackTraceToString(String exceptionName, String exceptionMessage, StackTraceElement[] elements) { StringBuffer strbuff = new StringBuffer(); for (StackTraceElement stet : elements) { strbuff.append(stet + "\n"); } String message = exceptionName + ":" + exceptionMessage + "\n\t" + strbuff.toString(); return message; }}实体类
package com.bothsavage.entity;import lombok.Data;import java.util.Date;@Datapublic class OperationLog { private String operId; private String operModul; private String operType; private String operDesc; private String OperMethod; private String OperRequParam; private String OperRespParam; private String OperUserId; private String OperUserName; private String OperIp; private String OperUri; private Date OperCreateTime; private String OperVer;}annotation
@Target(ElementType.METHOD) //注解搁置的指标地位,METHOD是可注解在办法级别上@Retention(RetentionPolicy.RUNTIME) //注解在哪个阶段执行@Documentedpublic @interface OperLog { String operModul() default ""; // 操作模块 String operType() default ""; // 操作类型 String operDesc() default ""; // 操作阐明}controller
@RestControllerpublic class TestController { @GetMapping("/test/{testName}") @OperLog(operModul = "测试模块",operType = "test",operDesc = "这个是用来测试的") public String test(@PathVariable String testName){ return "hello"+testName; }}参考
[1].把本人牛逼到了，在SpringBoot用AOP切面实现一个权限校验...
[2].Spring AOP 实现性能权限校验性能
[3].SpringAop实现权限校验与日志打印
[4].基于Spring AOP实现的权限管制
[5].应用SpringBoot AOP 记录操作日志、异样日志
本文作者: Both Savage本文链接: https://bothsavage.github.io/...
版权申明: 本博客所有文章除特地申明外，均采纳 BY-NC-SA 许可协定。转载请注明出处！