9-11 前后端加入请求拦截用于验证 token

src/main/java/io/github/yubincloud/fairywiki/config/SpringMvcConfig.java

 package io.github.yubincloud.fairywiki.config;
 
+import io.github.yubincloud.fairywiki.interceptor.LoginInterceptor;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
 import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
 
+import javax.annotation.Resource;
 
 @Configuration
 public class SpringMvcConfig implements WebMvcConfigurer {
 
-    public void addInterceptors(InterceptorRegistry registry) {
+    @Resource
+    LoginInterceptor loginInterceptor;
 
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(loginInterceptor)
+                .addPathPatterns("/**")
+                .excludePathPatterns(
+                        "/test/**",
+                        "/redis/**",
+                        "/user/login",
+                        "/category/all",
+                        "/ebook/query",
+                        "/doc/all/**",
+                        "/doc/read-content/**"
+                );
     }
 }

src/main/java/io/github/yubincloud/fairywiki/interceptor/LoginInterceptor.java

+package io.github.yubincloud.fairywiki.interceptor;
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.data.redis.core.RedisTemplate;
+import org.springframework.http.HttpStatus;
+import org.springframework.stereotype.Component;
+import org.springframework.web.servlet.HandlerInterceptor;
+import org.springframework.web.servlet.ModelAndView;
+
+import javax.annotation.Resource;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+/**
+ * 拦截器：Spring框架特有的，常用于登录校验，权限校验，请求日志打印
+ */
+@Component
+public class LoginInterceptor implements HandlerInterceptor {
+
+    private static final Logger LOG = LoggerFactory.getLogger(LoginInterceptor.class);
+
+    @Resource
+    private RedisTemplate redisTemplate;
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
+        // 打印请求信息
+        LOG.info("------------- LoginInterceptor 开始 -------------");
+        long startTime = System.currentTimeMillis();
+        request.setAttribute("requestStartTime", startTime);
+
+        // OPTIONS请求不做校验,
+        // 前后端分离的架构, 前端会发一个OPTIONS请求先做预检, 对预检请求不做校验
+        if(request.getMethod().toUpperCase().equals("OPTIONS")){
+            return true;
+        }
+
+        String path = request.getRequestURL().toString();
+        LOG.info("接口登录拦截：，path：{}", path);
+
+        //获取header的token参数
+        String token = request.getHeader("token");
+        LOG.info("登录校验开始，token：{}", token);
+        if (token == null || token.isEmpty()) {
+            LOG.info( "token为空，请求被拦截" );
+            response.setStatus(HttpStatus.UNAUTHORIZED.value());
+            return false;
+        }
+        Object object = redisTemplate.opsForValue().get(token);
+        if (object == null) {
+            LOG.warn( "token无效，请求被拦截" );
+            response.setStatus(HttpStatus.UNAUTHORIZED.value());
+            return false;
+        } else {
+            LOG.info("已登录：{}", object);
+            return true;
+        }
+    }
+
+    @Override
+    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
+        long startTime = (Long) request.getAttribute("requestStartTime");
+        LOG.info("------------- LoginInterceptor 结束 耗时：{} ms -------------", System.currentTimeMillis() - startTime);
+    }
+
+    @Override
+    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
+//        LOG.info("LogInterceptor 结束");
+    }
+}

web/src/main.ts

@@ -6,6 +6,7 @@ import Antd from 'ant-design-vue'
 import 'ant-design-vue/dist/antd.css'
 import * as Icons from '@ant-design/icons-vue'
 import axios from 'axios';
+import {Tool} from "@/util/tool";
 
 axios.defaults.baseURL = process.env.VUE_APP_SERVER;  // 在使用 axios 发送请求时全局的base域
 
@@ -14,6 +15,11 @@ axios.defaults.baseURL = process.env.VUE_APP_SERVER;  // 在使用 axios 发送
  */
 axios.interceptors.request.use(function (reqConf) {
     console.log('请求参数：', reqConf);
+    const token = store.state.localUser.token;
+    if (Tool.isNotEmpty(token)) {
+        reqConf.headers.token = token;
+        console.log("请求headers增加token:", token);
+    }
     return reqConf;
 }, error => {
     return Promise.reject(error);