spring boot 之登录拦截

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
登录拦截,请求的session里面有username者判断为登录状态@Configuration
public class WebSecurityConfig  extends WebMvcConfigurerAdapter {
    @Bean
    public SecurityInterceptor getSecurityInterceptor() {
        return new SecurityInterceptor();
    }
 
    public void addInterceptors(InterceptorRegistry registry) {
        InterceptorRegistration addInterceptor = registry.addInterceptor(getSecurityInterceptor());
 
        addInterceptor.excludePathPatterns("/error");
        addInterceptor.excludePathPatterns("/plan/login**");
        addInterceptor.addPathPatterns("/web/**");
    }
 
    private class SecurityInterceptor extends HandlerInterceptorAdapter {
 
        @Override
        public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
                throws Exception {
            HttpSession session = request.getSession();
            if (session.getAttribute("username") != null)
                return true;
            String url = "/plan/logins";
            response.sendRedirect(url);
            return false;
        }
    }
}  使用redis 进行增强。获取的session 去判断在redis里面是否存在,存在可登录成功@Configuration
public class WebSecurityConfig  extends WebMvcConfigurerAdapter {
    @Autowired
    private  RedisTemplate redisTemplate;
    private RedisTemplate userredis(RedisTemplate redisTemplate) {
        redisTemplate = RedisDbInit.initRedis(RedisConfig.userreidport, redisTemplate);
        return redisTemplate;
    }
    @Bean
    public SecurityInterceptor getSecurityInterceptor() {
        return new SecurityInterceptor();
    }
 
    public void addInterceptors(InterceptorRegistry registry) {
        InterceptorRegistration addInterceptor = registry.addInterceptor(getSecurityInterceptor());
 
        addInterceptor.excludePathPatterns("/error");
        addInterceptor.excludePathPatterns("/plan/login**");
        addInterceptor.addPathPatterns("/web/**");
    }
 
    private class SecurityInterceptor extends HandlerInterceptorAdapter {
 
        @Override
        public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
                throws Exception {
            String url = "/plan/logins";
            HttpSession session = request.getSession();
            if (session.getAttribute("username") != null){
                String name= (String) userredis(redisTemplate).opsForValue().get(session.getAttribute("username"));
                if (name==null){
                    response.sendRedirect(url);
                    return false;
                }else {
                    return true;
                }
            }
            response.sendRedirect(url);
            return false;
        }
    }
}

 

posted @   北漂的雷子  阅读(261)  评论(0编辑  收藏  举报
编辑推荐:
· 如何编写易于单元测试的代码
· 10年+ .NET Coder 心语,封装的思维:从隐藏、稳定开始理解其本质意义
· .NET Core 中如何实现缓存的预热?
· 从 HTTP 原因短语缺失研究 HTTP/2 和 HTTP/3 的设计差异
· AI与.NET技术实操系列:向量存储与相似性搜索在 .NET 中的实现
阅读排行:
· 周边上新:园子的第一款马克杯温暖上架
· Open-Sora 2.0 重磅开源!
· 分享 3 个 .NET 开源的文件压缩处理库,助力快速实现文件压缩解压功能!
· Ollama——大语言模型本地部署的极速利器
· DeepSeek如何颠覆传统软件测试?测试工程师会被淘汰吗?
点击右上角即可分享
微信分享提示