用户路由权限

gic-enterprise-common/src/main/java/com/gic/enterprise/interceptor/AuthInterceptor.java

@@ -4,6 +4,7 @@ import com.alibaba.fastjson.JSON;
 import com.gic.enterprise.constants.Constants;
 import com.gic.enterprise.context.UserContext;
 import com.gic.enterprise.utils.UserDetail;
+import com.gic.enterprise.utils.UserDetailUtils;
 import com.sun.tools.internal.xjc.reader.xmlschema.bindinfo.BIConversion;
 import org.apache.dubbo.rpc.RpcContext;
 import org.apache.logging.log4j.LogManager;
@@ -11,6 +12,7 @@ import org.apache.logging.log4j.Logger;
 import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
+import java.util.Map;
 
 
 public class AuthInterceptor extends HandlerInterceptorAdapter {
@@ -25,6 +27,23 @@ public class AuthInterceptor extends HandlerInterceptorAdapter {
         String token = UserContext.getContext().getToken();
         RpcContext.getContext().getAttachments().put(Constants.USER_TOKEN, token);
         System.out.println(JSON.toJSONString(RpcContext.getContext().getArguments()));
+
+        //获取uri
+        String uri = request.getRequestURI();
+        log.info("用户接口访问路由：{}", uri);
+        //不需要拦截的路径
+        for (int i = 0; i < ignoreURI.length; i++) {
+            if (uri.contains(ignoreURI[i])) {
+                return true;
+            }
+        }
+        //判断是否有权限的路径
+        UserDetail userDetail = UserDetailUtils.getUserDetail();
+        Map<String, Object> menuUrlMap = userDetail.getMenuUrlMap();
+        if (!menuUrlMap.containsKey(uri)) {
+            throw new Exception("sorry，您无该页面的访问权限，请联系超级管理员！");
+        }
+
         return true;
     }
 }