Zuul 網關做token權限驗證

zuul 傳遞請求頭 

 

@Component
public class WebFilter extends ZuulFilter {
    @Override
    public String filterType() {
        return "pre";
    }

    @Override
    public int filterOrder() {
        return 0;
    }

    @Override
    public boolean shouldFilter() {
        return true;
    }

    @Override
    public Object run() throws ZuulException {
        //得到request上下文
        RequestContext currentContext = RequestContext.getCurrentContext();
        //得到request域
        HttpServletRequest request = currentContext.getRequest();
        //得到頭信息
        String header = request.getHeader("Authorization");
        //判斷是否有頭信息
        if(header!=null && !"".equals(header)){
            //把頭信息繼續向下傳
            currentContext.addZuulRequestHeader("Authorization", header);
        }
        return null;
    }
}

 

做權限驗證  

 

@Component
public class ManagerFilter extends ZuulFilter {

    @Autowired
    private JwtUtil jwtUtil;
    /**
     * 在請求前pre或者后post執行
     * @return
     */
    @Override
    public String filterType() {
        return "pre";
    }

    /**
     * 多個過濾器的執行順序，數字越小，表示越先執行
     * @return
     */
    @Override
    public int filterOrder() {
        return 0;
    }

    /**
     * 當前過濾器是否開啟true表示開啟
     * @return
     */
    @Override
    public boolean shouldFilter() {
        return true;
    }

    /**
     * 過濾器內執行的操作 return 任何ojbect的值都表示繼續執行
     * setsendzullRespponse(false)表示不再繼續執行
     * @return
     * @throws ZuulException
     */
    @Override
    public Object run() throws ZuulException {
        System.out.println("經過后台過濾器了！");
        RequestContext requestContext = RequestContext.getCurrentContext();
        //request域
        HttpServletRequest request = requestContext.getRequest();

        if(request.getMethod().equals("OPTIONS")){  //預請求 放行
            return null;
        }

        if(request.getRequestURI().indexOf("login")>0){ //登錄請求放行
            return null;
        }

        //得到頭信息
        String header = request.getHeader("Authorization");
        if(header!=null && !"".equals(header)){
            if(header.startsWith("Bearer ")){
                String token = header.substring(7);
                try {
                    Claims claims = jwtUtil.parseJWT(token);
                    String roles = (String) claims.get("roles");
                    if(roles.equals("admin")){
                        //把頭信息轉發下去，並且放行
                        requestContext.addZuulRequestHeader("Authorization", header);
                        return null;
                    }
                }catch (Exception e){
                    e.printStackTrace();
                    requestContext.setSendZuulResponse(false);//終止運行
                }
            }
        }
        requestContext.setSendZuulResponse(false);//終止運行
        requestContext.setResponseStatusCode(403);
        requestContext.setResponseBody("權限不足");
        requestContext.getResponse().setContentType("text/html;charset=utf-8");
        return null;
    }
}