第SpringBoot實(shí)現(xiàn)任意位置獲取HttpServletRequest對(duì)象//獲取RequestAttributes

RequestAttributesrequestAttributes=RequestContextHolder.getRequestAttributes();

//從獲取RequestAttributes中獲取HttpServletRequest的信息

HttpServletRequestrequest=(HttpServletRequest)requestAttributes.resolveReference(RequestAttributes.REFERENCE_REQUEST);

ServletRequestAttributesattributes=(ServletRequestAttributes)RequestContextHolder.getRequestAttributes();

HttpServletRequestrequest=attributes.getRequest();

HttpServletRequest只能讀取一次的解決

業(yè)務(wù)邏輯，通過filter讀取請(qǐng)求的request,獲取token，并將token傳遞后面流程使用

BodyReaderHttpServletRequestWrapper：

publicclassBodyReaderHttpServletRequestWrapperextendsHttpServletRequestWrapper{

privatefinalbyte[]body;

publicBodyReaderHttpServletRequestWrapper(HttpServletRequestrequest)throwsIOException{

super(request);

body=HttpHelper.getBodyString(request).getBytes(Charset.forName(UTF-8));

@Override

publicBufferedReadergetReader()throwsIOException{

returnnewBufferedReader(newInputStreamReader(getInputStream()));

@Override

publicServletInputStreamgetInputStream()throwsIOException{

finalByteArrayInputStreambyteArrayInputStream=newByteArrayInputStream(body);

returnnewServletInputStream(){

@Override

publicintread()throwsIOException{

returnbyteArrayInputStream.read();

@Override

publicbooleanisFinished(){

returnfalse;

@Override

publicbooleanisReady(){

returnfalse;

@Override

publicvoidsetReadListener(ReadListenerreadListener){

}

RepeatReadFilter：

*封裝HttpServletRequest為可重復(fù)讀取請(qǐng)求

publicclassRepeatReadFilterimplementsFilter{

@Override

publicvoidinit(FilterConfigfilterConfig)throwsServletException{

@Override

publicvoiddoFilter(ServletRequestrequest,ServletResponseresponse,FilterChainchain)

throwsIOException,ServletException{

HttpServletRequesthttpServletRequest=(HttpServletRequest)request;

//防止流讀取一次后就沒有了,所以需要將流繼續(xù)寫出去

ServletRequestrequestWrapper=newBodyReaderHttpServletRequestWrapper(httpServletRequest);

//獲取用戶憑證

Stringtoken=httpServletRequest.getHeader(Constants.USER_TOKEN);

if(StringUtils.isBlank(token)){

token=httpServletRequest.getParameter(Constants.USER_TOKEN);

//=================獲取json格式的token字段=========================

Stringbody=HttpHelper.getBodyString(requestWrapper);

if(StringUtils.isNotBlank(body)){

JSONObjectjsonObject=JSONObject.parseObject(body);

Objectobj=jsonObject.get(token

if(null!=obj){

token=obj.toString();

requestWrapper.setAttribute(Constants.USER_TOKEN,token);

chain.doFilter(requestWrapper,response);

@Override

publicvoiddestroy(){

FilterConfig：

@Configuration

publicclassFilterConfig{

@Bean

publicFilterRegistrationBeanregistFilter(){

FilterRegistrationBeanregistration=newFilterRegistrationBean();

registration.setFilter(newRepeatReadFilter());

registration.addUrlPatterns(/app/*

registration.setName(UrlFilter

registration.setOrder(1);

returnregistration;

AuthorizationInterceptor：

@Component

publicclassAuthorizationInterceptorextendsHandlerInterceptorAdapter{

@Override

publicbooleanpreHandle(HttpServletRequestrequest,HttpServletResponseresponse,Objecthandler)throwsException{

AuthIgnoreannotation;

if(handlerinstanceofHandlerMethod){

annotation=((HandlerMethod)handler).getMethodAnnotation(AuthIgnore.class);

}else{

returntrue;

//如果有@AuthIgnore注解，則不驗(yàn)證token

if(annotation!=null){

returntrue;

//獲取用戶憑證

Stringtoken=request.getHeader(Constants.USER_TOKEN);

if(StringUtils.isBlank(token)){

token=request.getParameter(Constants.USER_TOKEN);

if(StringUtils.isBlank(token)){

Objectobj=request.getAttribute(Constants.USER_TOKEN);

if(null!=obj){

token=obj.toString();

//token憑證為空

if(StringUtils.isBlank(token)){

thrownewAuthException(Constants.USER_TOKEN+不能為空,HttpStatus.UNAUTHORIZED.value());

returntrue;

WebMvcConfig：

@Configuration

publicclassWebMvcConfigextendsWebMvcConfigurerAdapter{

@Autowired

privateAuthorizationInterceptorauthorizationInterceptor;

//@Autowired

//privateLoginUserHandlerMethodArgumentResolverloginUserHandlerMethodArgumentResolver;

@Override

publicvoidaddInterceptors(InterceptorRegistryregistry){

registry.addInterceptor(authorizationInterceptor).addPathPatterns(/**

super.addInterceptors(registry);

@Override

publicvoidaddArgumentResolvers(ListHandlerMethodArgumentResolverargumentResolvers){

//argumentResolvers.add(loginUserHandlerMethodArgumentResolver);

@Override

publicvoidconfigureMessageConverters(ListHttpMessageConverterconverters){

super.configureMessageConverters(converters);

@Override

publicvoidextendMessageConverters(ListHttpMessageConverterconverters){

在filter中讀取token，在interceptor中進(jìn)行讀取判斷使用

HttpHelper：

publicclassHttpHelper{

*獲取請(qǐng)求Body

*@paramrequest

*@return

publicstaticStringgetBodyString(ServletRequestrequest){

StringBuildersb=newStringBuilder();

InputStreaminputStream=null;

BufferedReaderreader=null;

try{

inputStream=request.getInputStream();

reader=newBufferedReader(newInputStreamReader(inputStream,Charset.forName(UTF-8)));

Stringline=

while((line=reader.readLine())!=null){

sb.append(line);

}catch(IOExceptione){

e.printStackTrace();

}f