|
|
|
@@ -16,18 +16,16 @@ import org.jeecg.common.util.oConvertUtils;
|
|
|
|
|
import org.jeecg.config.JeecgBaseConfig;
|
|
|
|
|
import org.jeecg.config.shiro.filters.CustomShiroFilterFactoryBean;
|
|
|
|
|
import org.jeecg.config.shiro.filters.JwtFilter;
|
|
|
|
|
import org.springframework.aop.framework.Advised;
|
|
|
|
|
import org.springframework.aop.framework.autoproxy.DefaultAdvisorAutoProxyCreator;
|
|
|
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
|
|
|
import org.springframework.context.ApplicationContext;
|
|
|
|
|
import org.springframework.context.ConfigurableApplicationContext;
|
|
|
|
|
import org.springframework.boot.web.servlet.FilterRegistrationBean;
|
|
|
|
|
import org.springframework.context.annotation.Bean;
|
|
|
|
|
import org.springframework.context.annotation.Configuration;
|
|
|
|
|
import org.springframework.context.annotation.DependsOn;
|
|
|
|
|
import org.springframework.core.env.Environment;
|
|
|
|
|
import org.springframework.data.redis.connection.lettuce.LettuceConnectionFactory;
|
|
|
|
|
import org.springframework.beans.factory.config.BeanDefinition;
|
|
|
|
|
import org.springframework.boot.autoconfigure.data.redis.RedisProperties;
|
|
|
|
|
import org.springframework.boot.web.servlet.FilterRegistrationBean;
|
|
|
|
|
import org.springframework.context.annotation.*;
|
|
|
|
|
import org.springframework.core.annotation.AnnotationUtils;
|
|
|
|
|
import org.springframework.core.env.Environment;
|
|
|
|
|
import org.springframework.core.type.filter.AnnotationTypeFilter;
|
|
|
|
|
import org.springframework.data.redis.connection.lettuce.LettuceConnectionFactory;
|
|
|
|
|
import org.springframework.util.CollectionUtils;
|
|
|
|
|
import org.springframework.util.StringUtils;
|
|
|
|
|
import org.springframework.web.bind.annotation.*;
|
|
|
|
@@ -39,7 +37,6 @@ import javax.annotation.Resource;
|
|
|
|
|
import javax.servlet.DispatcherType;
|
|
|
|
|
import javax.servlet.Filter;
|
|
|
|
|
import java.lang.reflect.Method;
|
|
|
|
|
import java.time.Duration;
|
|
|
|
|
import java.util.*;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
@@ -50,6 +47,8 @@ import java.util.*;
|
|
|
|
|
|
|
|
|
|
@Slf4j
|
|
|
|
|
@Configuration
|
|
|
|
|
// 免认证注解 @IgnoreAuth 注解生效范围配置
|
|
|
|
|
@ComponentScan(basePackages = {"org.jeecg"})
|
|
|
|
|
public class ShiroConfig {
|
|
|
|
|
|
|
|
|
|
@Resource
|
|
|
|
@@ -60,9 +59,6 @@ public class ShiroConfig {
|
|
|
|
|
private JeecgBaseConfig jeecgBaseConfig;
|
|
|
|
|
@Autowired(required = false)
|
|
|
|
|
private RedisProperties redisProperties;
|
|
|
|
|
|
|
|
|
|
@Autowired
|
|
|
|
|
private ApplicationContext ctx;
|
|
|
|
|
/**
|
|
|
|
|
* Filter Chain定义说明
|
|
|
|
|
*
|
|
|
|
@@ -177,13 +173,15 @@ public class ShiroConfig {
|
|
|
|
|
// 企业微信证书排除
|
|
|
|
|
filterChainDefinitionMap.put("/WW_verify*", "anon");
|
|
|
|
|
|
|
|
|
|
// // 通过注解免登录url
|
|
|
|
|
// List<String> ignoreAuthUrlList = collectIgnoreAuthUrl(ctx);
|
|
|
|
|
// if (!CollectionUtils.isEmpty(ignoreAuthUrlList)) {
|
|
|
|
|
// for (String url : ignoreAuthUrlList) {
|
|
|
|
|
// filterChainDefinitionMap.put(url, "anon");
|
|
|
|
|
// }
|
|
|
|
|
// }
|
|
|
|
|
|
|
|
|
|
// 通过注解免登录url
|
|
|
|
|
List<String> ignoreAuthUrlList = collectIgnoreAuthUrl();
|
|
|
|
|
if (!CollectionUtils.isEmpty(ignoreAuthUrlList)) {
|
|
|
|
|
for (String url : ignoreAuthUrlList) {
|
|
|
|
|
filterChainDefinitionMap.put(url, "anon");
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
// 添加自己的过滤器并且取名为jwt
|
|
|
|
|
Map<String, Filter> filterMap = new HashMap<String, Filter>(1);
|
|
|
|
@@ -339,20 +337,27 @@ public class ShiroConfig {
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@SneakyThrows
|
|
|
|
|
public List<String> collectIgnoreAuthUrl(ApplicationContext context) {
|
|
|
|
|
public List<String> collectIgnoreAuthUrl() {
|
|
|
|
|
List<String> ignoreAuthUrls = new ArrayList<>();
|
|
|
|
|
Map<String, Object> controllers = context.getBeansWithAnnotation(RestController.class);
|
|
|
|
|
for (Object bean : controllers.values()) {
|
|
|
|
|
if (!(bean instanceof Advised)) {
|
|
|
|
|
continue;
|
|
|
|
|
ClassPathScanningCandidateComponentProvider provider = new ClassPathScanningCandidateComponentProvider(false);
|
|
|
|
|
provider.addIncludeFilter(new AnnotationTypeFilter(RestController.class));
|
|
|
|
|
|
|
|
|
|
// 获取当前类的扫描注解的配置
|
|
|
|
|
Set<BeanDefinition> components = new HashSet<>();
|
|
|
|
|
for (String basePackage : AnnotationUtils.getAnnotation(ShiroConfig.class, ComponentScan.class).basePackages()) {
|
|
|
|
|
components.addAll(provider.findCandidateComponents(basePackage));
|
|
|
|
|
}
|
|
|
|
|
Class<?> beanClass = ((Advised) bean).getTargetSource().getTarget().getClass();
|
|
|
|
|
RequestMapping base = beanClass.getAnnotation(RequestMapping.class);
|
|
|
|
|
|
|
|
|
|
// 逐个匹配获取免认证路径
|
|
|
|
|
for (BeanDefinition component : components) {
|
|
|
|
|
String beanClassName = component.getBeanClassName();
|
|
|
|
|
Class<?> clazz = Class.forName(beanClassName);
|
|
|
|
|
RequestMapping base = clazz.getAnnotation(RequestMapping.class);
|
|
|
|
|
String[] baseUrl = {};
|
|
|
|
|
if (Objects.nonNull(base)) {
|
|
|
|
|
baseUrl = base.value();
|
|
|
|
|
}
|
|
|
|
|
Method[] methods = beanClass.getDeclaredMethods();
|
|
|
|
|
Method[] methods = clazz.getDeclaredMethods();
|
|
|
|
|
|
|
|
|
|
for (Method method : methods) {
|
|
|
|
|
if (method.isAnnotationPresent(IgnoreAuth.class) && method.isAnnotationPresent(RequestMapping.class)) {
|
|
|
|
|