SpringBoot aop 注解数据权限校验-白红宇

SpringBoot aop 注解数据权限校验

阅读量：4453 次

发布时间：2019-06-07

本文共 2202 字，大约阅读时间需要 7 分钟。

注解类：

@Retention(RetentionPolicy.RUNTIME)public @interface DataAuthValid{        //位置    public int index() default 0;        //字段   id    //public String id() default "id";        //字段   id    public String orgId() default "org_id";        //mapper    @SuppressWarnings("rawtypes")    public Class
      mapper();}

AOP切面：

@Aspect@Component@Order(1)public class DataAuthAop {     private static String types = "java.lang.String,java.lang.Long,long";        @Before("@annotation(dataAuth)")    public void beforeMethod(JoinPoint point,DataAuthValid dataAuth) throws Exception {                HttpServletRequest request = ((ServletRequestAttributes) RequestContextHolder.getRequestAttributes()).getRequest();        Map
     
       payloadMap = (Map
      
       ) request.getAttribute("payloadMap");        Long companyid = Long.parseLong(payloadMap.get("companyid")+"");        if(companyid != 1) {            Object[] args = point.getArgs();            Object obj = args[dataAuth.index()];            String ids = null;            String typeName = obj.getClass().getTypeName();            if(types.contains(typeName)) {                ids = obj + "";            }else {                Field[] fields = obj.getClass().getDeclaredFields();                for (Field f : fields) {                    f.setAccessible(true);                    if("id".equals(f.getName())) {                        Long id = (Long) f.get(obj);                        ids = id + "";                    }                }            }            String[] idArr = ids.split(",");            for (String id : idArr) {                Class cla = dataAuth.mapper();                Mapper mapper = (Mapper) SpringBeanFactoryUtils.getApplicationContext().getBean(cla);                Object object = mapper.selectByPrimaryKey(Long.valueOf(id));                Field field = obj.getClass().getDeclaredField(dataAuth.orgId());                field.setAccessible(true);                Long orgId = (Long)field.get(obj);                if(!companyid.equals(orgId)) {                    throw new RuntimeException();                }            }        }    }}

使用：