From a861a66802880bf562b3d85994025c660f964832 Mon Sep 17 00:00:00 2001 From: lfdfwqwcs <lfdfwqwcs> Date: 星期四, 06 三月 2025 10:27:45 +0800 Subject: [PATCH] # --- src/main/java/com/zy/common/config/AdminInterceptor.java | 48 ++++++++++++++++++++++++++++++++---------------- 1 files changed, 32 insertions(+), 16 deletions(-) diff --git a/src/main/java/com/zy/common/config/AdminInterceptor.java b/src/main/java/com/zy/common/config/AdminInterceptor.java index 5830527..5ae30f1 100644 --- a/src/main/java/com/zy/common/config/AdminInterceptor.java +++ b/src/main/java/com/zy/common/config/AdminInterceptor.java @@ -1,15 +1,20 @@ package com.zy.common.config; -import com.alibaba.fastjson.JSON; import com.baomidou.mybatisplus.mapper.EntityWrapper; import com.core.annotations.ManagerAuth; import com.core.common.BaseRes; import com.core.common.Cools; +import com.google.common.util.concurrent.RateLimiter; +import com.zy.common.model.annotations.RateLimit; import com.zy.common.utils.Http; -import com.zy.system.entity.*; +import com.zy.system.entity.Permission; +import com.zy.system.entity.RolePermission; +import com.zy.system.entity.User; +import com.zy.system.entity.UserLogin; import com.zy.system.service.*; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Value; +import org.springframework.http.HttpStatus; import org.springframework.lang.Nullable; import org.springframework.stereotype.Component; import org.springframework.web.method.HandlerMethod; @@ -19,6 +24,7 @@ import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.lang.reflect.Method; +import java.util.concurrent.TimeUnit; /** * Created by vincent on 2019-06-13 @@ -39,11 +45,23 @@ @Autowired private RolePermissionService rolePermissionService; + private final RateLimiter rateLimiter = RateLimiter.create(10);// 榛樿姣忕鏈�澶氬鐞� 10 涓姹� + @Override public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { cors(response); if (handler instanceof org.springframework.web.servlet.resource.ResourceHttpRequestHandler) { return true; + } + HandlerMethod handlerMethod = (HandlerMethod) handler; + Method method = handlerMethod.getMethod(); + if (method.isAnnotationPresent(RateLimit.class)){ + RateLimit annotation = method.getAnnotation(RateLimit.class); + rateLimiter.setRate(annotation.value()); + if (!rateLimiter.tryAcquire(annotation.value(), TimeUnit.SECONDS)) { + response.setStatus(HttpStatus.TOO_MANY_REQUESTS.value()); + return false; + } } // super璐﹀彿 String token = request.getHeader("token"); @@ -64,8 +82,6 @@ } // 璺ㄥ煙璁剧疆 // response.setHeader("Access-Control-Allow-Origin", "*"); - HandlerMethod handlerMethod = (HandlerMethod) handler; - Method method = handlerMethod.getMethod(); if (method.isAnnotationPresent(ManagerAuth.class)){ ManagerAuth annotation = method.getAnnotation(ManagerAuth.class); if (annotation.value().equals(ManagerAuth.Auth.CHECK)){ @@ -77,12 +93,12 @@ @Override public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, @Nullable ModelAndView modelAndView) { - Object obj = request.getAttribute("operateLog"); - if (obj instanceof OperateLog) { - OperateLog operate = (OperateLog) obj; - operate.setResponse(String.valueOf(response.getStatus())); - operateLogService.insert(operate); - } +// Object obj = request.getAttribute("operateLog"); +// if (obj instanceof OperateLog) { +// OperateLog operate = (OperateLog) obj; +// operate.setResponse(String.valueOf(response.getStatus())); +// operateLogService.insert(operate); +// } } private boolean check(HttpServletRequest request, HttpServletResponse response, String memo) { @@ -107,14 +123,14 @@ return false; } // 鎿嶄綔鏃ュ織 - OperateLog operateLog = new OperateLog(); - operateLog.setAction(Cools.isEmpty(memo)?request.getRequestURI():memo); - operateLog.setIp(request.getRemoteAddr()); - operateLog.setUserId(user.getId()); - operateLog.setRequest(JSON.toJSONString(request.getParameterMap())); +// OperateLog operateLog = new OperateLog(); +// operateLog.setAction(Cools.isEmpty(memo)?request.getRequestURI():memo); +// operateLog.setIp(request.getRemoteAddr()); +// operateLog.setUserId(user.getId()); +// operateLog.setRequest(JSON.toJSONString(request.getParameterMap())); // 璇锋眰缂撳瓨 request.setAttribute("userId", user.getId()); - request.setAttribute("operateLog", operateLog); +// request.setAttribute("operateLog", operateLog); return true; } catch (Exception e){ Http.response(response, BaseRes.DENIED); -- Gitblit v1.9.1