From d9c906634caef1128f0976b346c676f5c97032d6 Mon Sep 17 00:00:00 2001
From: ZY <zc857179121@qq.com>
Date: 星期六, 10 五月 2025 15:14:50 +0800
Subject: [PATCH] 123

---
 src/main/java/com/zy/common/config/AdminInterceptor.java |   52 ++++++++++++++++++++++++++++++++++------------------
 1 files changed, 34 insertions(+), 18 deletions(-)

diff --git a/src/main/java/com/zy/common/config/AdminInterceptor.java b/src/main/java/com/zy/common/config/AdminInterceptor.java
index 5830527..6c12489 100644
--- a/src/main/java/com/zy/common/config/AdminInterceptor.java
+++ b/src/main/java/com/zy/common/config/AdminInterceptor.java
@@ -1,15 +1,20 @@
 package com.zy.common.config;
 
-import com.alibaba.fastjson.JSON;
 import com.baomidou.mybatisplus.mapper.EntityWrapper;
 import com.core.annotations.ManagerAuth;
 import com.core.common.BaseRes;
 import com.core.common.Cools;
+import com.google.common.util.concurrent.RateLimiter;
+import com.zy.common.model.annotations.RateLimit;
 import com.zy.common.utils.Http;
-import com.zy.system.entity.*;
+import com.zy.system.entity.Permission;
+import com.zy.system.entity.RolePermission;
+import com.zy.system.entity.User;
+import com.zy.system.entity.UserLogin;
 import com.zy.system.service.*;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Value;
+import org.springframework.http.HttpStatus;
 import org.springframework.lang.Nullable;
 import org.springframework.stereotype.Component;
 import org.springframework.web.method.HandlerMethod;
@@ -19,6 +24,7 @@
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 import java.lang.reflect.Method;
+import java.util.concurrent.TimeUnit;
 
 /**
  * Created by vincent on 2019-06-13
@@ -39,11 +45,23 @@
     @Autowired
     private RolePermissionService rolePermissionService;
 
+    private final RateLimiter rateLimiter = RateLimiter.create(10);// 榛樿姣忕鏈�澶氬鐞� 10 涓姹�
+
     @Override
     public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
         cors(response);
         if (handler instanceof org.springframework.web.servlet.resource.ResourceHttpRequestHandler) {
             return true;
+        }
+        HandlerMethod handlerMethod = (HandlerMethod) handler;
+        Method method = handlerMethod.getMethod();
+        if (method.isAnnotationPresent(RateLimit.class)){
+            RateLimit annotation = method.getAnnotation(RateLimit.class);
+            rateLimiter.setRate(annotation.value());
+            if (!rateLimiter.tryAcquire(annotation.value(), TimeUnit.SECONDS)) {
+                response.setStatus(HttpStatus.TOO_MANY_REQUESTS.value());
+                return false;
+            }
         }
         // super璐﹀彿
         String token = request.getHeader("token");
@@ -52,7 +70,7 @@
             if (deToken!=null){
                 long timestamp = Long.parseLong(deToken.substring(0, 13));
                 // 1澶╁悗杩囨湡
-                if (System.currentTimeMillis() - timestamp > 86400000){
+                if (System.currentTimeMillis() - timestamp > 64800000){
                     Http.response(response, BaseRes.DENIED);
                     return false;
                 }
@@ -64,8 +82,6 @@
         }
         // 璺ㄥ煙璁剧疆
         // response.setHeader("Access-Control-Allow-Origin", "*");
-        HandlerMethod handlerMethod = (HandlerMethod) handler;
-        Method method = handlerMethod.getMethod();
         if (method.isAnnotationPresent(ManagerAuth.class)){
             ManagerAuth annotation = method.getAnnotation(ManagerAuth.class);
             if (annotation.value().equals(ManagerAuth.Auth.CHECK)){
@@ -77,12 +93,12 @@
 
     @Override
     public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, @Nullable ModelAndView modelAndView) {
-        Object obj = request.getAttribute("operateLog");
-        if (obj instanceof OperateLog) {
-            OperateLog operate = (OperateLog) obj;
-            operate.setResponse(String.valueOf(response.getStatus()));
-            operateLogService.insert(operate);
-        }
+//        Object obj = request.getAttribute("operateLog");
+//        if (obj instanceof OperateLog) {
+//            OperateLog operate = (OperateLog) obj;
+//            operate.setResponse(String.valueOf(response.getStatus()));
+//            operateLogService.insert(operate);
+//        }
     }
 
     private boolean check(HttpServletRequest request, HttpServletResponse response, String memo) {
@@ -97,7 +113,7 @@
             String deToken = Cools.deTokn(token, user.getPassword());
             long timestamp = Long.parseLong(deToken.substring(0, 13));
             // 1澶╁悗杩囨湡
-            if (System.currentTimeMillis() - timestamp > 86400000){
+            if (System.currentTimeMillis() - timestamp > 64800000){
                 Http.response(response, BaseRes.DENIED);
                 return false;
             }
@@ -107,14 +123,14 @@
                 return false;
             }
             // 鎿嶄綔鏃ュ織
-            OperateLog operateLog = new OperateLog();
-            operateLog.setAction(Cools.isEmpty(memo)?request.getRequestURI():memo);
-            operateLog.setIp(request.getRemoteAddr());
-            operateLog.setUserId(user.getId());
-            operateLog.setRequest(JSON.toJSONString(request.getParameterMap()));
+//            OperateLog operateLog = new OperateLog();
+//            operateLog.setAction(Cools.isEmpty(memo)?request.getRequestURI():memo);
+//            operateLog.setIp(request.getRemoteAddr());
+//            operateLog.setUserId(user.getId());
+//            operateLog.setRequest(JSON.toJSONString(request.getParameterMap()));
             // 璇锋眰缂撳瓨
             request.setAttribute("userId", user.getId());
-            request.setAttribute("operateLog", operateLog);
+//            request.setAttribute("operateLog", operateLog);
             return true;
         } catch (Exception e){
             Http.response(response, BaseRes.DENIED);

--
Gitblit v1.9.1