| File was renamed from ruoyi-common/ruoyi-common-security/src/main/java/com/ruoyi/common/security/interceptor/HeaderInterceptor.java |
| | |
| | | package com.ruoyi.common.security.interceptor;
|
| | |
|
| | | import jakarta.servlet.http.HttpServletRequest;
|
| | | import jakarta.servlet.http.HttpServletResponse;
|
| | | import org.springframework.web.method.HandlerMethod;
|
| | | import org.springframework.web.servlet.AsyncHandlerInterceptor;
|
| | | import com.ruoyi.common.core.constant.SecurityConstants;
|
| | | import com.ruoyi.common.core.context.SecurityContextHolder;
|
| | | import com.ruoyi.common.core.utils.ServletUtils;
|
| | | import com.ruoyi.common.core.utils.StringUtils;
|
| | | import com.ruoyi.common.security.auth.AuthUtil;
|
| | | import com.ruoyi.common.security.utils.SecurityUtils;
|
| | | import com.ruoyi.system.api.model.LoginUser;
|
| | |
|
| | | /**
|
| | | * 自定义请求头拦截器,将Header数据封装到线程变量中方便获取
|
| | | * 注意:此拦截器会同时验证当前用户有效期自动刷新有效期
|
| | | *
|
| | | * @author ruoyi
|
| | | */
|
| | | public class HeaderInterceptor implements AsyncHandlerInterceptor
|
| | | {
|
| | | @Override
|
| | | public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception
|
| | | {
|
| | | if (!(handler instanceof HandlerMethod))
|
| | | {
|
| | | return true;
|
| | | }
|
| | |
|
| | | SecurityContextHolder.setUserId(ServletUtils.getHeader(request, SecurityConstants.DETAILS_USER_ID));
|
| | | SecurityContextHolder.setUserName(ServletUtils.getHeader(request, SecurityConstants.DETAILS_USERNAME));
|
| | | SecurityContextHolder.setUserKey(ServletUtils.getHeader(request, SecurityConstants.USER_KEY));
|
| | |
|
| | | String token = SecurityUtils.getToken();
|
| | | if (StringUtils.isNotEmpty(token))
|
| | | {
|
| | | LoginUser loginUser = AuthUtil.getLoginUser(token);
|
| | | if (StringUtils.isNotNull(loginUser))
|
| | | {
|
| | | AuthUtil.verifyLoginUserExpire(loginUser);
|
| | | SecurityContextHolder.set(SecurityConstants.LOGIN_USER, loginUser);
|
| | | }
|
| | | }
|
| | | return true;
|
| | | }
|
| | |
|
| | | @Override
|
| | | public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex)
|
| | | throws Exception
|
| | | {
|
| | | SecurityContextHolder.remove();
|
| | | }
|
| | | }
|
| | | package com.sgd.common.security.interceptor; |
| | | |
| | | import jakarta.servlet.http.HttpServletRequest; |
| | | import jakarta.servlet.http.HttpServletResponse; |
| | | import org.springframework.web.method.HandlerMethod; |
| | | import org.springframework.web.servlet.AsyncHandlerInterceptor; |
| | | import com.sgd.common.core.constant.SecurityConstants; |
| | | import com.sgd.common.core.context.SecurityContextHolder; |
| | | import com.sgd.common.core.utils.ServletUtils; |
| | | import com.sgd.common.core.utils.StringUtils; |
| | | import com.sgd.common.security.auth.AuthUtil; |
| | | import com.sgd.common.security.utils.SecurityUtils; |
| | | import com.sgd.system.api.model.LoginUser; |
| | | |
| | | /** |
| | | * 自定义请求头拦截器,将Header数据封装到线程变量中方便获取 |
| | | * 注意:此拦截器会同时验证当前用户有效期自动刷新有效期 |
| | | * |
| | | * @author ruoyi |
| | | */ |
| | | public class HeaderInterceptor implements AsyncHandlerInterceptor |
| | | { |
| | | @Override |
| | | public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception |
| | | { |
| | | if (!(handler instanceof HandlerMethod)) |
| | | { |
| | | return true; |
| | | } |
| | | |
| | | SecurityContextHolder.setUserId(ServletUtils.getHeader(request, SecurityConstants.DETAILS_USER_ID)); |
| | | SecurityContextHolder.setUserName(ServletUtils.getHeader(request, SecurityConstants.DETAILS_USERNAME)); |
| | | SecurityContextHolder.setUserKey(ServletUtils.getHeader(request, SecurityConstants.USER_KEY)); |
| | | |
| | | String token = SecurityUtils.getToken(); |
| | | if (StringUtils.isNotEmpty(token)) |
| | | { |
| | | LoginUser loginUser = AuthUtil.getLoginUser(token); |
| | | if (StringUtils.isNotNull(loginUser)) |
| | | { |
| | | AuthUtil.verifyLoginUserExpire(loginUser); |
| | | SecurityContextHolder.set(SecurityConstants.LOGIN_USER, loginUser); |
| | | } |
| | | } |
| | | return true; |
| | | } |
| | | |
| | | @Override |
| | | public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) |
| | | throws Exception |
| | | { |
| | | SecurityContextHolder.remove(); |
| | | } |
| | | } |