<!--lombok-->
<dependency>
 <groupId>org.projectlombok</groupId>
 <artifactId>lombok</artifactId>
 <version>1.18.2</version>
 <optional>true</optional>
</dependency>

<!--Spring AOP-->
<dependency>
 <groupId>org.springframework.boot</groupId>
 <artifactId>spring-boot-starter-aop</artifactId>
</dependency>

/**
 * 用戶請求權(quán)限校驗
 */
@Retention(RetentionPolicy.RUNTIME)
@Target(ElementType.METHOD)
public @interface MyPermissionTag {
 String value() default "";
 String name() default "";
}

@Slf4j
@Aspect
@Component
public class AuthInterceptor {


 /**
 * 參數(shù)處理
 *
 * @param point
 */
 @Before("@annotation(com.luo.common.tag.MyPermissionTag)")
 public void beforeProReq(JoinPoint point) {
 log.info("前置攔截-開始");
 Request req = getOperationRequest(point.getArgs());
 if (req != null) {
  //解密帳號
  log.info("前置攔截-開始解密ACCOUNT:{}", req.getAccount());


  log.info("前置攔截-結(jié)束解密ACCOUNT:{}", req.getAccount());
 }
 log.info("前置攔截-結(jié)束");
 }


 @Around("@annotation(com.luo.common.tag.MyPermissionTag)")
 public Object authCheck(ProceedingJoinPoint pjp) throws Throwable {
 log.info("權(quán)限攔截-開始");
 //請求方法
 ReqMethod reqMethod = getPermissionTag(pjp);


 MyPermissionTag myPermissionTag =reqMethod.perTag;
 log.info(myPermissionTag.value()); //獲取配置的值
 log.info("權(quán)限攔截-開始-攔截到方法:{}", reqMethod.getMethodName());


 if("true".equals(myPermissionTag.value().toString())){
  //錯誤返回
  Response notGoRes = new Response();
  Request req = getOperationRequest(pjp.getArgs());
  // 校驗請求對象
  if (req == null) {
  notGoRes.setErrorMsg("(AUTH)未能獲得有效的請求參數(shù)！");
  log.info("(AUTH-NO)未能獲得有效的請求參數(shù)！");
  return notGoRes;
  }else {//可以在這里根據(jù)請求參數(shù)對請求做進一步校驗


  log.info("完成請求校驗:"+req);




  }
 }else {
  log.info("未開啟權(quán)限校驗");
 }


 return pjp.proceed();
 }




 /**
 * 獲取 request 接口中的請求參數(shù)
 * @param args
 * @return
 */
 private Request getOperationRequest(Object[] args) {
 if (args == null || args.length <= 0) {
  log.error("AUTH權(quán)限驗證：攔截方法的請求參數(shù)為空！");
  return null;
 }
 Object obj = args[0];
 if (obj instanceof Request) {
  log.info("AUTH權(quán)限驗證：請求對象為正確的OperationRequest對象");
  return (Request) obj;
 }
 return null;
 }




 /**
 * 獲取攔截的資源標簽
 * 這里可以獲取方法名+注解信息(包括 key+value 等)
 * @param pjp
 * @return
 * @throws SecurityException
 * @throws NoSuchMethodException
 */
 private ReqMethod getPermissionTag(ProceedingJoinPoint pjp) throws NoSuchMethodException, SecurityException {
 Signature signature = pjp.getSignature();
 MethodSignature methodSignature = (MethodSignature) signature;
 Method targetMethod = methodSignature.getMethod();
 Method realMethod = pjp.getTarget().getClass().getDeclaredMethod(signature.getName(), targetMethod.getParameterTypes());
 MyPermissionTag permissionTag = realMethod.getAnnotation(MyPermissionTag.class);
 return new ReqMethod(permissionTag, realMethod.getName());
 }


 @Setter
 @Getter
 class ReqMethod {


 private MyPermissionTag perTag;
 private String methodName;


 public ReqMethod(MyPermissionTag perTag, String methodName) {
  this.perTag = perTag;
  this.methodName = methodName;
 }


 }
}

@PostMapping("/helloluo")
@MyPermissionTag(value = "true")
public String helloluo(UserPojoReq userPojoReq){
 return "Hello World";
}