fix: 升级数据集插件版本0.0.1.2023071101.Alpha；移除原有的接口权限注解，统一使用数据集插件提供的权限校验注解
升级数据集插件版本0.0.1.2023071101.Alpha；移除原有的接口权限注解，统一使用数据集插件提供的权限校验注解main
hong.yang
2 years ago
parent
59f17ac8a7
commit
82e62c2048
@ -1,61 +0,0 @@
|
|||||||
package com.gccloud.dataroom.core.permission;
|
|
||||||
|
|
||||||
import com.gccloud.common.exception.GlobalException;
|
|
||||||
import lombok.extern.slf4j.Slf4j;
|
|
||||||
import org.aspectj.lang.JoinPoint;
|
|
||||||
import org.aspectj.lang.annotation.AfterThrowing;
|
|
||||||
import org.aspectj.lang.annotation.Aspect;
|
|
||||||
import org.aspectj.lang.annotation.Before;
|
|
||||||
import org.aspectj.lang.reflect.MethodSignature;
|
|
||||||
import org.springframework.stereotype.Component;
|
|
||||||
import org.springframework.web.context.request.RequestContextHolder;
|
|
||||||
import org.springframework.web.context.request.ServletRequestAttributes;
|
|
||||||
|
|
||||||
import javax.annotation.Resource;
|
|
||||||
import javax.servlet.http.HttpServletRequest;
|
|
||||||
import java.lang.reflect.Method;
|
|
||||||
import java.util.Objects;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @author hongyang
|
|
||||||
* @version 1.0
|
|
||||||
* @date 2023/5/15 10:51
|
|
||||||
*/
|
|
||||||
@Slf4j
|
|
||||||
@Aspect
|
|
||||||
@Component("dataRoomLoginRequiredAspect")
|
|
||||||
public class LoginRequiredAspect {
|
|
||||||
@Resource
|
|
||||||
private DataRoomPermissionClient tokenClient;
|
|
||||||
|
|
||||||
@Before("@annotation(loginRequired) || @within(loginRequired)")
|
|
||||||
public void doBefore(JoinPoint joinPoint, ScreenPermission loginRequired) {
|
|
||||||
// 获取request
|
|
||||||
HttpServletRequest request = ((ServletRequestAttributes) Objects.requireNonNull(RequestContextHolder.getRequestAttributes())).getRequest();
|
|
||||||
// 判断方法所属的类是否标记了该注解
|
|
||||||
Class<?> targetClass = joinPoint.getTarget().getClass();
|
|
||||||
ScreenPermission classAnnotation = targetClass.getAnnotation(ScreenPermission.class);
|
|
||||||
boolean classRequired = (classAnnotation != null && classAnnotation.required());
|
|
||||||
// 判断方法是否标记了该注解
|
|
||||||
MethodSignature signature = (MethodSignature) joinPoint.getSignature();
|
|
||||||
Method method = signature.getMethod();
|
|
||||||
ScreenPermission methodAnnotation = method.getAnnotation(ScreenPermission.class);
|
|
||||||
boolean methodRequired = (methodAnnotation != null && methodAnnotation.required());
|
|
||||||
// 判断是否需要登录权限，就近原则，方法上有优先方法上的，方法上没有则使用类上的
|
|
||||||
boolean required = methodRequired || classRequired;
|
|
||||||
if (required) {
|
|
||||||
// 获取权限
|
|
||||||
String[] permissions = methodAnnotation != null ? methodAnnotation.permissions() : classAnnotation.permissions();
|
|
||||||
// 校验token
|
|
||||||
boolean verify = tokenClient.verifyApiPermission(request, permissions);
|
|
||||||
if (!verify) {
|
|
||||||
throw new GlobalException("请求权限不足");
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
@AfterThrowing(pointcut = "@annotation(loginRequired) || @within(loginRequired)")
|
|
||||||
public void doAfterThrowing(JoinPoint joinPoint, ScreenPermission loginRequired) {
|
|
||||||
// 记录日志等操作
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@ -1,20 +0,0 @@
|
|||||||
package com.gccloud.dataroom.core.permission;
|
|
||||||
|
|
||||||
import java.lang.annotation.ElementType;
|
|
||||||
import java.lang.annotation.Retention;
|
|
||||||
import java.lang.annotation.RetentionPolicy;
|
|
||||||
import java.lang.annotation.Target;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @author hongyang
|
|
||||||
* @version 1.0
|
|
||||||
* @date 2023/5/15 10:51
|
|
||||||
*/
|
|
||||||
@Target({ElementType.METHOD, ElementType.TYPE})
|
|
||||||
@Retention(RetentionPolicy.RUNTIME)
|
|
||||||
public @interface ScreenPermission {
|
|
||||||
|
|
||||||
boolean required() default true;
|
|
||||||
|
|
||||||
String[] permissions() default {};
|
|
||||||
}
|
|
||||||
Loading…
Reference in New Issue