import org.springframework.stereotype.Component;
import org.springframework.web.servlet.HandlerInterceptor;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

@Component
public class TokenInterceptor implements HandlerInterceptor {

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        // 從請(qǐng)求頭中獲取 Token
        String token = request.getHeader("Authorization");

        // 驗(yàn)證 Token
        if (token == null || !isValidToken(token)) {
            response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); // 401 未授權(quán)
            response.getWriter().write("Token 無(wú)效或未提供");
            return false; // 中斷請(qǐng)求
        }

        return true; // 繼續(xù)執(zhí)行請(qǐng)求
    }

    // 模擬 Token 驗(yàn)證邏輯
    private boolean isValidToken(String token) {
        // 這里可以調(diào)用具體的 Token 驗(yàn)證服務(wù)
        return "valid-token".equals(token);
    }
}

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

@Configuration
public class WebConfig implements WebMvcConfigurer {

    @Autowired
    private TokenInterceptor tokenInterceptor;

    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        // 攔截所有路徑
        registry.addInterceptor(tokenInterceptor)
                .addPathPatterns("/**") // 攔截所有接口
                .excludePathPatterns("/login", "/register"); // 排除不需要攔截的路徑
    }
}

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class TokenFilter implements Filter {

    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
            throws IOException, ServletException {
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        HttpServletResponse httpResponse = (HttpServletResponse) response;

        // 從請(qǐng)求頭中獲取 Token
        String token = httpRequest.getHeader("Authorization");

        // 驗(yàn)證 Token
        if (token == null || !isValidToken(token)) {
            httpResponse.setStatus(HttpServletResponse.SC_UNAUTHORIZED); // 401 未授權(quán)
            httpResponse.getWriter().write("Token 無(wú)效或未提供");
            return; // 中斷請(qǐng)求
        }

        chain.doFilter(request, response); // 繼續(xù)執(zhí)行請(qǐng)求
    }

    // 模擬 Token 驗(yàn)證邏輯
    private boolean isValidToken(String token) {
        // 這里可以調(diào)用具體的 Token 驗(yàn)證服務(wù)
        return "valid-token".equals(token);
    }
}

import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

@Configuration
public class FilterConfig {

    @Bean
    public FilterRegistrationBean<TokenFilter> tokenFilter() {
        FilterRegistrationBean<TokenFilter> registrationBean = new FilterRegistrationBean<>();
        registrationBean.setFilter(new TokenFilter());
        registrationBean.addUrlPatterns("/*"); // 攔截所有路徑
        registrationBean.setOrder(1); // 設(shè)置過(guò)濾器順序
        return registrationBean;
    }
}

public class ApiResponse {
    private boolean status;
    private int code;
    private String message;

    // 構(gòu)造方法和 Getter/Setter 省略
}

import org.springframework.http.HttpStatus;
import org.springframework.web.bind.annotation.ExceptionHandler;
import org.springframework.web.bind.annotation.ResponseStatus;
import org.springframework.web.bind.annotation.RestControllerAdvice;

@RestControllerAdvice
public class GlobalExceptionHandler {

    @ExceptionHandler(UnauthorizedException.class)
    @ResponseStatus(HttpStatus.UNAUTHORIZED)
    public ApiResponse handleUnauthorizedException(UnauthorizedException e) {
        return new ApiResponse(false, 401, e.getMessage());
    }
}

if (token == null || !isValidToken(token)) {
    throw new UnauthorizedException("Token 無(wú)效或未提供");
}