《web应用技术》第十一次作业

1、验证过滤器进行权限验证的原理。

代码展示：

@Slf4j

@WebFilter(urlPatterns = "/*")

public class LoginCheckFilter implements Filter {

    @Override

    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {

        HttpServletRequest req = (HttpServletRequest) request;

        HttpServletResponse resp = (HttpServletResponse) response;

        String url = req.getRequestURL().toString();

        log.info("请求的url: {}",url);

        if(url.contains("login")){

            log.info("登录操作, 放行...");

            chain.doFilter(request,response);

            return;

 }

        String jwt = req.getHeader("token");

        if(!StringUtils.hasLength(jwt)){

            log.info("请求头token为空,返回未登录的信息");

            Result error = Result.error("NOT_LOGIN");

            String notLogin = JSONObject.toJSONString(error);

            resp.getWriter().write(notLogin);

            return;

        }

        try {

            JwtUtils.parseJWT(jwt);

        } catch (Exception e) {//jwt解析失败

            e.printStackTrace();

            log.info("解析令牌失败, 返回未登录错误信息");

            Result error = Result.error("NOT_LOGIN");

            String notLogin = JSONObject.toJSONString(error);

            resp.getWriter().write(notLogin);

            return;

        }

        log.info("令牌合法, 放行");

        chain.doFilter(request, response);

    }

}

2、Apifox的使用

3、Git的继续使用