拦截器springmvc防止表单重复提交【3】自己实际项目

1：【定义注解】

package com.jspxcms.ext.interceptor;
import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;

@Target(ElementType.METHOD)
@Retention(RetentionPolicy.RUNTIME)
public @interface Token  {
    
     boolean save() default false;

     boolean remove() default false;

}

2：定义拦截器

package com.jspxcms.ext.interceptor;

import java.lang.reflect.Method;
import java.util.UUID;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.log4j.Logger;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;

import com.jspxcms.core.support.CmsException;

public class TokenInterceptor extends HandlerInterceptorAdapter {
    private static final Logger LOG = Logger.getLogger(TokenInterceptor.class);
    
    
    
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        if (handler instanceof HandlerMethod) {
            HandlerMethod handlerMethod = (HandlerMethod) handler;
            Method method = handlerMethod.getMethod();
            Token  annotation = method.getAnnotation(Token.class);
            if (annotation != null) {
                boolean needSaveSession = annotation.save();
                if (needSaveSession) {
                    request.getSession(true).setAttribute("token", UUID.randomUUID().toString());
                }
                boolean needRemoveSession = annotation.remove();
                if (needRemoveSession) {
                    if (isRepeatSubmit(request)) {
                         LOG.warn("please don't repeat submit,url:"+ request.getServletPath());
                         throw new CmsException("不能重复提交申请页面！");
                       // return false;
                    }
                    request.getSession(true).removeAttribute("token");
                }
            }
            return true;
        } else {
            return super.preHandle(request, response, handler);
        }
    }

    private boolean isRepeatSubmit(HttpServletRequest request) {
        String serverToken = (String) request.getSession(true).getAttribute("token");
        if (serverToken == null) {
            return true;
        }
        String clinetToken = request.getParameter("token");
        if (clinetToken == null) {
            return true;
        }
        if (!serverToken.equals(clinetToken)) {
            return true;
        }
        return false;
    }
}

3：spring配置

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:context="http://www.springframework.org/schema/context"
    xmlns:mvc="http://www.springframework.org/schema/mvc"
    xsi:schemaLocation="
        http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
        http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.2.xsd
        http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc-3.2.xsd"
    default-lazy-init="true">

    <context:annotation-config/>
    <bean class="org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter">
        <property name="webBindingInitializer">
            <bean class="com.jspxcms.common.web.BindingInitializer"/>
        </property>
        <property name="customArgumentResolvers">
            <list>
                <bean class="com.jspxcms.common.web.PageableArgumentResolver" />
            </list>
        </property>
    </bean>
  
  <bean id="multipartResolver" class="org.springframework.web.multipart.commons.CommonsMultipartResolver">
  </bean>
 
    <mvc:annotation-driven />
    <mvc:interceptors>
        <bean class="com.jspxcms.core.support.ForeInterceptor"/>
        <mvc:interceptor>
             <mvc:mapping path="/**"/>
            <bean class="com.jspxcms.ext.interceptor.TokenInterceptor"></bean>
        </mvc:interceptor>
    </mvc:interceptors>    

    <bean id="viewResolver" class="com.jspxcms.common.freemarker.FreeMarkerViewResolver">
        <property name="contentType" value="text/html; charset=UTF-8"/>
        <property name="cacheUnresolved" value="false"/>
    <property name="redirectHttp10Compatible" value="false"/>
    </bean>
</beans>

4：方法使用

    @Token(save=true)
    @RequestMapping( value = "/expertJoinForm.jspx" )
    public String expertJoinForm(HttpServletRequest request,
            HttpServletResponse response, org.springframework.ui.Model modelMap ) {
        User user = Context.getCurrentUser( request );
        if( user == null ) {
            String id = request.getParameter( "id" );
            Response resp = new Response( request, response, modelMap );
            Site site = Context.getCurrentSite( request );
            GlobalRegister registerConf = site.getGlobal().getRegister();
            String orgId = request.getParameter( "orgId" );
            if( orgId == null || orgId.trim().equals( "" ) ) {
                orgId = "1";
            }
            if( id != null && id != "1" ) {
                Org org = orgService.get( Integer.parseInt( id ) );
                List<Org> orgList = new ArrayList<Org>();
                orgList.add( org );
                modelMap.addAttribute( "orgList", orgList );
            }
            else {
                List<Org> orgList = orgService.findList( null, 1, false, null, null );
                modelMap.addAttribute( "orgList", orgList );
            }
            Org org = orgService.get( Integer.parseInt( orgId ) );
            modelMap.addAttribute( "org", org );
            if( registerConf.getMode() == GlobalRegister.MODE_OFF ) {
                return resp.warning( "register.off" );
            }
            Map<String, Object> data = modelMap.asMap();
            ForeContext.setData( data, request );
            return "/1/hongchuang/sys_member_register.html";
        }else{        
            CmsAdvisor advisor=new CmsAdvisor();
            modelMap.addAttribute( "advisor", advisor);
            Map<String, Object> data = modelMap.asMap();
            ForeContext.setData( data, request );
            return "/1/hongchuang/expertJoinForm1.html";
        }
    }

    /**
     * 前台申请加入专家功能
     * @author DIXIN
     * @since 0727
     * @param advisor
     * @param request
     * @param response
     * @param modelMap
     * @return
     */
    @Token(remove=true)
    @RequestMapping( value = "/saveExpertJoinForm.jspx" )
    public String saveExpertJoinForm(CmsAdvisor advisor, HttpServletRequest request, HttpServletResponse response, org.springframework.ui.Model modelMap ) {
        Response resp = new Response( request, response, modelMap );
        advisorService.save( advisor);
        Map<String, Object> data = modelMap.asMap();
        ForeContext.setData( data, request );
        return "/1/hongchuang/expertJoinForm2.html";
    }

5：页面使用

需要放在form里面

<input type="hidden" name="token" value="${token}" />