119 lines
4.0 KiB
Java
119 lines
4.0 KiB
Java
/**
|
||
* Copyright (c) 2018-2028, Chill Zhuang 庄骞 (smallchill@163.com).
|
||
* <p>
|
||
* Licensed under the GNU LESSER GENERAL PUBLIC LICENSE;
|
||
* you may not use this file except in compliance with the License.
|
||
* You may obtain a copy of the License at
|
||
* <p>
|
||
* http://www.gnu.org/licenses/lgpl.html
|
||
* <p>
|
||
* Unless required by applicable law or agreed to in writing, software
|
||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
* See the License for the specific language governing permissions and
|
||
* limitations under the License.
|
||
*/
|
||
package org.springblade.core.secure.aspect;
|
||
|
||
import org.aspectj.lang.ProceedingJoinPoint;
|
||
import org.aspectj.lang.annotation.Around;
|
||
import org.aspectj.lang.annotation.Aspect;
|
||
import org.aspectj.lang.reflect.MethodSignature;
|
||
import org.springblade.core.secure.annotation.PreAuth;
|
||
import org.springblade.core.secure.auth.AuthFun;
|
||
import org.springblade.core.secure.exception.SecureException;
|
||
import org.springblade.core.tool.api.ResultCode;
|
||
import org.springblade.core.tool.utils.ClassUtil;
|
||
import org.springblade.core.tool.utils.StringUtil;
|
||
import org.springframework.beans.BeansException;
|
||
import org.springframework.context.ApplicationContext;
|
||
import org.springframework.context.ApplicationContextAware;
|
||
import org.springframework.context.expression.BeanFactoryResolver;
|
||
import org.springframework.core.MethodParameter;
|
||
import org.springframework.expression.Expression;
|
||
import org.springframework.expression.ExpressionParser;
|
||
import org.springframework.expression.spel.standard.SpelExpressionParser;
|
||
import org.springframework.expression.spel.support.StandardEvaluationContext;
|
||
|
||
import java.lang.reflect.Method;
|
||
|
||
/**
|
||
* AOP 鉴权
|
||
*/
|
||
@Aspect
|
||
public class AuthAspect implements ApplicationContextAware {
|
||
|
||
/**
|
||
* 表达式处理
|
||
*/
|
||
private static final ExpressionParser SPEL_PARSER = new SpelExpressionParser();
|
||
|
||
/**
|
||
* 切 方法 和 类上的 @PreAuth 注解
|
||
* @param point 切点
|
||
* @return Object
|
||
* @throws Throwable 没有权限的异常
|
||
*/
|
||
@Around(
|
||
"@annotation(org.springblade.core.secure.annotation.PreAuth) || " +
|
||
"@within(org.springblade.core.secure.annotation.PreAuth)"
|
||
)
|
||
public Object preAuth(ProceedingJoinPoint point) throws Throwable {
|
||
if (handleAuth(point)) {
|
||
return point.proceed();
|
||
}
|
||
throw new SecureException(ResultCode.UN_AUTHORIZED);
|
||
}
|
||
|
||
/**
|
||
* 处理权限
|
||
*
|
||
* @param point 切点
|
||
*/
|
||
private boolean handleAuth(ProceedingJoinPoint point) {
|
||
MethodSignature ms = (MethodSignature) point.getSignature();
|
||
Method method = ms.getMethod();
|
||
// 读取权限注解，优先方法上，没有则读取类
|
||
PreAuth preAuth = ClassUtil.getAnnotation(method, PreAuth.class);
|
||
// 判断表达式
|
||
String condition = preAuth.value();
|
||
if (StringUtil.isNotBlank(condition)) {
|
||
Expression expression = SPEL_PARSER.parseExpression(condition);
|
||
// 方法参数值
|
||
Object[] args = point.getArgs();
|
||
StandardEvaluationContext context = getEvaluationContext(method, args);
|
||
return expression.getValue(context, Boolean.class);
|
||
}
|
||
return false;
|
||
}
|
||
|
||
/**
|
||
* 获取方法上的参数
|
||
*
|
||
* @param method 方法
|
||
* @param args 变量
|
||
* @return {SimpleEvaluationContext}
|
||
*/
|
||
private StandardEvaluationContext getEvaluationContext(Method method, Object[] args) {
|
||
// 初始化Sp el表达式上下文，并设置 AuthFun
|
||
StandardEvaluationContext context = new StandardEvaluationContext(new AuthFun());
|
||
// 设置表达式支持spring bean
|
||
context.setBeanResolver(new BeanFactoryResolver(applicationContext));
|
||
for (int i = 0; i < args.length; i++) {
|
||
// 读取方法参数
|
||
MethodParameter methodParam = ClassUtil.getMethodParameter(method, i);
|
||
// 设置方法 参数名和值 为sp el变量
|
||
context.setVariable(methodParam.getParameterName(), args[i]);
|
||
}
|
||
return context;
|
||
}
|
||
|
||
private ApplicationContext applicationContext;
|
||
|
||
@Override
|
||
public void setApplicationContext(ApplicationContext applicationContext) throws BeansException {
|
||
this.applicationContext = applicationContext;
|
||
}
|
||
|
||
}
|