| | |
| | | import com.core.annotations.ManagerAuth; |
| | | import com.core.common.BaseRes; |
| | | import com.core.common.Cools; |
| | | import com.google.common.util.concurrent.RateLimiter; |
| | | import com.zy.common.model.annotations.RateLimit; |
| | | import com.zy.common.utils.Http; |
| | | import com.zy.system.entity.Permission; |
| | | import com.zy.system.entity.RolePermission; |
| | |
| | | import com.zy.system.service.*; |
| | | import org.springframework.beans.factory.annotation.Autowired; |
| | | import org.springframework.beans.factory.annotation.Value; |
| | | import org.springframework.http.HttpStatus; |
| | | import org.springframework.lang.Nullable; |
| | | import org.springframework.stereotype.Component; |
| | | import org.springframework.web.method.HandlerMethod; |
| | |
| | | import javax.servlet.http.HttpServletRequest; |
| | | import javax.servlet.http.HttpServletResponse; |
| | | import java.lang.reflect.Method; |
| | | import java.util.concurrent.TimeUnit; |
| | | |
| | | /** |
| | | * Created by vincent on 2019-06-13 |
| | |
| | | @Autowired |
| | | private RolePermissionService rolePermissionService; |
| | | |
| | | private final RateLimiter rateLimiter = RateLimiter.create(10);// 默认每秒最多处理 10 个请求 |
| | | |
| | | @Override |
| | | public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { |
| | | cors(response); |
| | | if (handler instanceof org.springframework.web.servlet.resource.ResourceHttpRequestHandler) { |
| | | return true; |
| | | } |
| | | HandlerMethod handlerMethod = (HandlerMethod) handler; |
| | | Method method = handlerMethod.getMethod(); |
| | | if (method.isAnnotationPresent(RateLimit.class)){ |
| | | RateLimit annotation = method.getAnnotation(RateLimit.class); |
| | | rateLimiter.setRate(annotation.value()); |
| | | if (!rateLimiter.tryAcquire(annotation.value(), TimeUnit.SECONDS)) { |
| | | response.setStatus(HttpStatus.TOO_MANY_REQUESTS.value()); |
| | | return false; |
| | | } |
| | | } |
| | | // super账号 |
| | | String token = request.getHeader("token"); |
| | |
| | | } |
| | | // 跨域设置 |
| | | // response.setHeader("Access-Control-Allow-Origin", "*"); |
| | | HandlerMethod handlerMethod = (HandlerMethod) handler; |
| | | Method method = handlerMethod.getMethod(); |
| | | if (method.isAnnotationPresent(ManagerAuth.class)){ |
| | | ManagerAuth annotation = method.getAnnotation(ManagerAuth.class); |
| | | if (annotation.value().equals(ManagerAuth.Auth.CHECK)){ |