解释 public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { //支持跨域请求 response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE"); response.setHeader("Access-Control-Max-Age", "3600"); response.setHeader("Access-Control-Allow-Credentials", "true"); response.setHeader("Access-Control-Allow-Headers", "x-requested-with,request-source,Token, Origin,imgType, Content-Type, cache-control,postman-token,Cookie, Accept,authorization"); response.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin")); // 跨域时会首先发送一个OPTIONS请求,这里我们给OPTIONS请求直接返回正常状态 if (request.getMethod().equals(RequestMethod.OPTIONS.name())) { response.setStatus(HttpStatus.OK.value()); return false; } IgnoreAuth annotation; if (handler instanceof HandlerMethod) { annotation = ((HandlerMethod) handler).getMethodAnnotation(IgnoreAuth.class); } else { return true; } //从header中获取token String token = request.getHeader(LOGIN_TOKEN_KEY); /** * 不需要验证权限的方法直接放过 */ if(annotation!=null) { return true; } TokenEntity tokenEntity = null; if(StringUtils.isNotBlank(token)) { tokenEntity = tokenService.getTokenEntity(token); } if(tokenEntity != null) { request.getSession().setAttribute("userId", tokenEntity.getUserid()); request.getSession().setAttribute("role", tokenEntity.getRole()); request.getSession().setAttribute("tableName", tokenEntity.getTablename()); request.getSession().setAttribute("username", tokenEntity.getUsername()); return true; } PrintWriter writer = null; response.setCharacterEncoding("UTF-8"); response.setContentType("application/json; charset=utf-8"); try { writer = response.getWriter(); writer.print(JSONObject.toJSONString(R.error(401, "请先登录"))); } finally { if(writer != null){ writer.close(); } } // throw new EIException("请先登录", 401); return false; }
时间: 2024-02-15 17:29:06 浏览: 20
这段代码是一个Java的拦截器,用于对请求进行预处理。在这个方法中,首先设置了支持跨域请求的相关参数,然后判断是否为OPTIONS请求,如果是则直接返回正常状态。接下来判断是否有IgnoreAuth注解,如果有则直接放过,否则从请求头中获取Token,并通过TokenService验证Token的有效性。如果Token有效,则将相关信息存入Session中,否则返回401错误提示。最后,返回true或者false表示是否允许请求继续处理。
相关问题
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { //支持跨域请求 response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE"); response.setHeader("Access-Control-Max-Age", "3600"); response.setHeader("Access-Control-Allow-Credentials", "true"); response.setHeader("Access-Control-Allow-Headers", "x-requested-with,request-source,Token, Origin,imgType, Content-Type, cache-control,postman-token,Cookie, Accept,authorization"); response.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin")); // 跨域时会首先发送一个OPTIONS请求,这里我们给OPTIONS请求直接返回正常状态 if (request.getMethod().equals(RequestMethod.OPTIONS.name())) { response.setStatus(HttpStatus.OK.value()); return false; } 这是什么意思
这是一个 Java Servlet 中的拦截器(Interceptor)方法,用于处理 HTTP 请求前的预处理工作。该方法通过设置响应头信息,来支持跨域请求。其中,Access-Control-Allow-Methods 表示支持请求的 HTTP 方法,Access-Control-Max-Age 表示预检请求的有效期,Access-Control-Allow-Credentials 表示是否允许发送 Cookie 等凭证信息,Access-Control-Allow-Headers 表示允许的请求头信息,Access-Control-Allow-Origin 表示允许的跨域来源。如果请求方式为 OPTIONS,直接返回状态码 200,表示正常状态。
@Component public class AuthorizationInterceptor implements HandlerInterceptor { public static final String LOGIN_TOKEN_KEY = "Token"; @Autowired private TokenService tokenService; @Override public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { //支持跨域请求 response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE"); response.setHeader("Access-Control-Max-Age", "3600"); response.setHeader("Access-Control-Allow-Credentials", "true"); response.setHeader("Access-Control-Allow-Headers", "x-requested-with,request-source,Token, Origin,imgType, Content-Type, cache-control,postman-token,Cookie, Accept,authorization"); response.setHeader("Access-Control-Allow-Origin", request.getHeader("Origin")); IgnoreAuth annotation; if (handler instanceof HandlerMethod) { annotation = ((HandlerMethod) handler).getMethodAnnotation(IgnoreAuth.class); } else { return true; }解析代码
这是一个基于Spring框架的拦截器,用于拦截HTTP请求并进行身份验证。具体来说,在每个请求到达处理程序之前,该拦截器会检查请求头中是否包含一个名为"Token"的字段。如果包含该字段,则将其传递给TokenService进行身份验证。如果验证成功,则该请求将被允许进入处理程序;否则,该请求将被拒绝。
此外,该拦截器还处理了跨域请求的相关设置,允许指定的HTTP头字段,以及支持从处理程序中排除身份验证的注释。