package org.jeecg.common.aspect; import lombok.extern.slf4j.Slf4j; import org.aspectj.lang.ProceedingJoinPoint; import org.aspectj.lang.annotation.Around; import org.aspectj.lang.annotation.Aspect; import org.aspectj.lang.annotation.Pointcut; import org.aspectj.lang.reflect.MethodSignature; import org.jeecg.common.api.CommonAPI; import org.jeecg.common.aspect.annotation.PermissionData; import org.jeecg.common.constant.CommonConstant; import org.jeecg.common.constant.SymbolConstant; import org.jeecg.common.system.query.QueryRuleEnum; import org.jeecg.common.system.util.JeecgDataAutorUtils; import org.jeecg.common.system.util.JwtUtil; import org.jeecg.common.system.vo.SysPermissionDataRuleModel; import org.jeecg.common.system.vo.SysUserCacheInfo; import org.jeecg.common.util.SpringContextUtils; import org.jeecg.common.util.oConvertUtils; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Lazy; import org.springframework.stereotype.Component; import javax.servlet.http.HttpServletRequest; import java.lang.reflect.Method; import java.util.List; /** * 数据权限切面处理类 * 当被请求的方法有注解PermissionData时,会在往当前request中写入数据权限信息 * @Date 2019年4月10日 * @Version: 1.0 * @author: jeecg-boot */ @Aspect @Component @Slf4j public class PermissionDataAspect { @Lazy @Autowired private CommonAPI commonApi; private static final String SPOT_DO = ".do"; @Pointcut("@annotation(org.jeecg.common.aspect.annotation.PermissionData)") public void pointCut() { } @Around("pointCut()") public Object arround(ProceedingJoinPoint point) throws Throwable{ HttpServletRequest request = SpringContextUtils.getHttpServletRequest(); MethodSignature signature = (MethodSignature) point.getSignature(); Method method = signature.getMethod(); PermissionData pd = method.getAnnotation(PermissionData.class); String component = pd.pageComponent(); String requestMethod = request.getMethod(); String requestPath = request.getRequestURI().substring(request.getContextPath().length()); requestPath = filterUrl(requestPath); //update-begin-author:taoyan date:20211027 for:JTC-132【online报表权限】online报表带参数的菜单配置数据权限无效 //先判断是否online报表请求 // TODO 参数顺序调整有隐患 if(requestPath.indexOf(UrlMatchEnum.CGREPORT_DATA.getMatchUrl())>=0){ // 获取地址栏参数 String urlParamString = request.getParameter(CommonConstant.ONL_REP_URL_PARAM_STR); if(oConvertUtils.isNotEmpty(urlParamString)){ requestPath+="?"+urlParamString; } } //update-end-author:taoyan date:20211027 for:JTC-132【online报表权限】online报表带参数的菜单配置数据权限无效 log.info("拦截请求 >> {} ; 请求类型 >> {} . ", requestPath, requestMethod); String username = JwtUtil.getUserNameByToken(request); //查询数据权限信息 //TODO 微服务情况下也得支持缓存机制 List dataRules = commonApi.queryPermissionDataRule(component, requestPath, username); if(dataRules!=null && dataRules.size()>0) { //临时存储 JeecgDataAutorUtils.installDataSearchConditon(request, dataRules); //TODO 微服务情况下也得支持缓存机制 SysUserCacheInfo userinfo = commonApi.getCacheUser(username); JeecgDataAutorUtils.installUserInfo(request, userinfo); } return point.proceed(); } private String filterUrl(String requestPath){ String url = ""; if(oConvertUtils.isNotEmpty(requestPath)){ url = requestPath.replace("\\", "/"); url = url.replace("//", "/"); if(url.indexOf(SymbolConstant.DOUBLE_SLASH)>=0){ url = filterUrl(url); } /*if(url.startsWith("/")){ url=url.substring(1); }*/ } return url; } /** * 获取请求地址 * @param request * @return */ @Deprecated private String getJgAuthRequsetPath(HttpServletRequest request) { String queryString = request.getQueryString(); String requestPath = request.getRequestURI(); if(oConvertUtils.isNotEmpty(queryString)){ requestPath += "?" + queryString; } // 去掉其他参数(保留一个参数) 例如:loginController.do?login if (requestPath.indexOf(SymbolConstant.AND) > -1) { requestPath = requestPath.substring(0, requestPath.indexOf("&")); } if(requestPath.indexOf(QueryRuleEnum.EQ.getValue())!=-1){ if(requestPath.indexOf(SPOT_DO)!=-1){ requestPath = requestPath.substring(0,requestPath.indexOf(".do")+3); }else{ requestPath = requestPath.substring(0,requestPath.indexOf("?")); } } // 去掉项目路径 requestPath = requestPath.substring(request.getContextPath().length() + 1); return filterUrl(requestPath); } @Deprecated private boolean moHuContain(List list,String key){ for(String str : list){ if(key.contains(str)){ return true; } } return false; } }