/*
|
Copyright [2020] [https://www.xiaonuo.vip]
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
you may not use this file except in compliance with the License.
|
You may obtain a copy of the License at
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
Unless required by applicable law or agreed to in writing, software
|
distributed under the License is distributed on an "AS IS" BASIS,
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
See the License for the specific language governing permissions and
|
limitations under the License.
|
|
Snowy采用APACHE LICENSE 2.0开源协议，您在使用过程中，需要注意以下几点：
|
|
1.请不要删除和修改根目录下的LICENSE文件。
|
2.请不要删除和修改Snowy源码头部的版权声明。
|
3.请保留源码和相关描述文件的项目出处，作者声明等。
|
4.分发源码时候，请注明软件出处 https://gitee.com/xiaonuobase/snowy
|
5.在修改包名，模块名称，项目代码等时，请注明软件出处 https://gitee.com/xiaonuobase/snowy
|
6.若您的项目无法满足以上几点，可申请商业授权，获取Snowy商业授权许可，请在官网购买授权，地址为 https://www.xiaonuo.vip
|
*/
|
package vip.xiaonuo.sys.core.aop;
|
|
import cn.hutool.core.util.StrUtil;
|
import cn.hutool.log.Log;
|
import org.aspectj.lang.JoinPoint;
|
import org.aspectj.lang.annotation.Aspect;
|
import org.aspectj.lang.annotation.Before;
|
import org.aspectj.lang.annotation.Pointcut;
|
import org.aspectj.lang.reflect.MethodSignature;
|
import org.springframework.core.annotation.Order;
|
import vip.xiaonuo.core.annotion.BusinessLog;
|
import vip.xiaonuo.core.annotion.Permission;
|
import vip.xiaonuo.core.consts.AopSortConstant;
|
import vip.xiaonuo.core.consts.SymbolConstant;
|
import vip.xiaonuo.core.context.login.LoginContextHolder;
|
import vip.xiaonuo.core.enums.LogicTypeEnum;
|
import vip.xiaonuo.core.exception.PermissionException;
|
import vip.xiaonuo.core.exception.enums.PermissionExceptionEnum;
|
import vip.xiaonuo.core.util.HttpServletUtil;
|
import vip.xiaonuo.sys.core.log.LogManager;
|
|
import javax.servlet.http.HttpServletRequest;
|
import java.lang.reflect.Method;
|
|
/**
|
* 权限过滤Aop切面
|
*
|
* @author xuyuxiang
|
* @date 2020/3/23 17:09
|
*/
|
@Aspect
|
@Order(AopSortConstant.PERMISSION_AOP)
|
public class PermissionAop {
|
|
private static final Log log = Log.get();
|
|
/**
|
* 权限切入点
|
*
|
* @author xuyuxiang
|
* @date 2020/3/23 17:10
|
*/
|
@Pointcut("@annotation(vip.xiaonuo.core.annotion.Permission)")
|
private void getPermissionPointCut() {
|
}
|
|
/**
|
* 执行权限过滤
|
*
|
* @author xuyuxiang
|
* @date 2020/3/23 17:14
|
*/
|
@Before("getPermissionPointCut()")
|
public void doPermission(JoinPoint joinPoint) {
|
|
// 如果是超级管理员，直接放过权限校验
|
boolean isSuperAdmin = LoginContextHolder.me().isSuperAdmin();
|
if (isSuperAdmin) {
|
return;
|
}
|
|
// 如果不是超级管理员，则开始进行权限校验
|
MethodSignature methodSignature = (MethodSignature) joinPoint.getSignature();
|
Method method = methodSignature.getMethod();
|
Permission permission = method.getAnnotation(Permission.class);
|
|
// 当前方法需要的角色集合
|
String[] requireRoles = permission.value();
|
|
// 逻辑类型
|
LogicTypeEnum logicTypeEnum = permission.logicType();
|
|
// 首先校验当前用户有没有 当前请求requestUri的权限
|
HttpServletRequest request = HttpServletUtil.getRequest();
|
boolean hasUriPermission = LoginContextHolder.me().hasPermission(request.getRequestURI());
|
if (!hasUriPermission) {
|
this.executeNoPermissionExceptionLog(joinPoint, new PermissionException(PermissionExceptionEnum.NO_PERMISSION));
|
throw new PermissionException(PermissionExceptionEnum.NO_PERMISSION);
|
}
|
|
// 如果当前接口需要特定的角色权限，则校验参数上的特殊角色当前用户有没
|
if (requireRoles.length != 0) {
|
boolean hasSpecialRolePermission = true;
|
if (LogicTypeEnum.AND.equals(logicTypeEnum)) {
|
hasSpecialRolePermission = LoginContextHolder.me().hasAllRole(StrUtil.join(SymbolConstant.COMMA, (Object) requireRoles));
|
} else if (LogicTypeEnum.OR.equals(logicTypeEnum)) {
|
hasSpecialRolePermission = LoginContextHolder.me().hasAnyRole(StrUtil.join(SymbolConstant.COMMA, (Object) requireRoles));
|
} else {
|
log.error(">>> permission注解逻辑枚举错误");
|
}
|
if (!hasSpecialRolePermission) {
|
this.executeNoPermissionExceptionLog(joinPoint, new PermissionException(PermissionExceptionEnum.NO_PERMISSION));
|
throw new PermissionException(PermissionExceptionEnum.NO_PERMISSION);
|
}
|
}
|
}
|
|
/**
|
* 记录无权限异常日志
|
*
|
* @author xuyuxiang
|
* @date 2020/3/24 11:14
|
*/
|
private void executeNoPermissionExceptionLog(JoinPoint joinPoint, Exception exception) {
|
MethodSignature methodSignature = (MethodSignature) joinPoint.getSignature();
|
Method method = methodSignature.getMethod();
|
BusinessLog businessLog = method.getAnnotation(BusinessLog.class);
|
|
//异步记录日志
|
LogManager.me().executeExceptionLog(
|
businessLog, LoginContextHolder.me().getSysLoginUserAccount(), joinPoint, exception);
|
}
|
|
}
|
