public class AuthInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
        // 檢查用戶是否登錄
        if (request.getSession().getAttribute("user") == null) {
            response.sendRedirect("/login");
            return false; // 中斷請(qǐng)求
        }
        return true;
    }
}

@Configuration
public class WebMvcConfig implements WebMvcConfigurer {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(new AuthInterceptor())
                .addPathPatterns("/**")
                .excludePathPatterns("/login", "/static/**");
    }
}

@Configuration
public class WebMvcConfig implements WebMvcConfigurer {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        // 第一個(gè)攔截器：日志（優(yōu)先級(jí)高）
        registry.addInterceptor(new LogInterceptor())
                .addPathPatterns("/**")       // 攔截所有路徑
                .excludePathPatterns("/static/**"); // 排除靜態(tài)資源
        // 第二個(gè)攔截器：權(quán)限（優(yōu)先級(jí)低）
        registry.addInterceptor(new AuthInterceptor())
                .addPathPatterns("/api/**");  // 僅攔截/api路徑
    }
}

registry.addInterceptor(new LogInterceptor()).order(1);
registry.addInterceptor(new AuthInterceptor()).order(2);

@WebFilter(urlPatterns = "/*")
public class LoggingFilter implements Filter {
    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) 
            throws IOException, ServletException {
        System.out.println("請(qǐng)求開(kāi)始: " + ((HttpServletRequest) request).getRequestURI());
        chain.doFilter(request, response); // 繼續(xù)執(zhí)行后續(xù)過(guò)濾器或Servlet
        System.out.println("請(qǐng)求結(jié)束");
    }
}

@Configuration
public class FilterConfig {
    @Bean
    public FilterRegistrationBean<LoggingFilter> loggingFilter() {
        FilterRegistrationBean<LoggingFilter> bean = new FilterRegistrationBean<>();
        bean.setFilter(new LoggingFilter());
        bean.addUrlPatterns("/*");
        bean.setOrder(1); // 設(shè)置執(zhí)行順序
        return bean;
    }
}

客戶端 → Filter.doFilter() → Interceptor.preHandle()
       → Controller → Interceptor.postHandle()
       → 視圖渲染 → Interceptor.afterCompletion()
       → Filter.doFilter()后續(xù)處理 → 客戶端

public class AuthInterceptor implements HandlerInterceptor {
    @Autowired
    private UserService userService; // 直接注入
}

public class ModifyRequestWrapper extends HttpServletRequestWrapper {
    // 重寫(xiě)getParameter等方法以修改參數(shù)
}
// 在Filter中替換Request對(duì)象
chain.doFilter(new ModifyRequestWrapper(request), response);

registry.addInterceptor(new LogInterceptor())
        .addPathPatterns("/**");

@Override
public boolean preHandle(...) {
    if (跳過(guò)條件) {
        return false; // 后續(xù)攔截器和Controller不會(huì)執(zhí)行
    }
    return true;
}

// 在第一個(gè)攔截器中存儲(chǔ)數(shù)據(jù)
request.setAttribute("key", "value");
// 在后續(xù)攔截器中獲取
String value = (String) request.getAttribute("key");