美文网首页
RequestBodyAdvice和ResponseBodyAd

RequestBodyAdvice和ResponseBodyAd

作者: 小胖学编程 | 来源:发表于2023-05-11 21:22 被阅读0次

    场景:

    1. 前后端交互中,前端传给后端的是一个String类型的加密串,后端需要解析成Json报文,并反序列为对象。如何在不侵入业务代码的前提上来实现这个功能?
    2. 例如需要解析报文中的某些字段,放入到ThreadLocal中,后续进行使用;
    3. 填充一些公共字段,例如前后端交互过程中,uid不会信任前端报文传递的,而是信任cookie中解析出来的,需要set到对象中。
    4. 对项目报文某些字段进行加密;
    5. 填充项目报文公共字段;

    这些都可以交由RequestBodyAdvice和ResponseBodyAdvice来实现:

    @Target(ElementType.TYPE)
    @Retention(RetentionPolicy.RUNTIME)
    public @interface DecryptRequestBody {
    
    }
    
    import static java.nio.charset.StandardCharsets.UTF_8;
    
    import java.io.IOException;
    import java.io.InputStream;
    import java.lang.reflect.Type;
    import java.nio.charset.Charset;
    import java.util.Map;
    
    import org.apache.commons.io.IOUtils;
    import org.springframework.core.MethodParameter;
    import org.springframework.http.HttpHeaders;
    import org.springframework.http.HttpInputMessage;
    import org.springframework.http.converter.HttpMessageConverter;
    import org.springframework.web.bind.annotation.ControllerAdvice;
    import org.springframework.web.servlet.mvc.method.annotation.RequestBodyAdviceAdapter;
    
    import com.alibaba.fastjson.JSON;
    
    @ControllerAdvice
    public class DecryptRequestBodyAdvice extends RequestBodyAdviceAdapter {
        @Override
        public boolean supports(MethodParameter methodParameter, Type targetType,
                Class<? extends HttpMessageConverter<?>> converterType) {
            //当存在这个注解时,则进行解析
            return methodParameter.hasParameterAnnotation(DecryptRequestBody.class);
        }
    
        //报文解析前进行出来
        @Override
        public HttpInputMessage beforeBodyRead(HttpInputMessage inputMessage, MethodParameter parameter, Type targetType,
                Class<? extends HttpMessageConverter<?>> converterType) throws IOException {
    
            DecryptHttpInputMessage message = new DecryptHttpInputMessage(inputMessage);
            //todo message可以做各种处理,典型的是将加密串解析成Json,以适配RequestBody转成对象
            return message;
        }
    
    
        //报文解析后,可以做的工作
        @Override
        public Object afterBodyRead(Object body, HttpInputMessage inputMessage, MethodParameter parameter, Type targetType,
                Class<? extends HttpMessageConverter<?>> converterType) {
    
            //todo 例如强制为对象,来赋予公共值;例如读取出特定的值
            String jsonString = JSON.toJSONString(body);
            Map<String, Object> params = JSON.parseObject(jsonString);
            Object language = params.get("language");
            //...
    
            return body;
        }
    
        /**
         * 自定义一个HttpInputMessage用于存储新的信息
         */
        public static class DecryptHttpInputMessage implements HttpInputMessage {
            private final Charset charset = UTF_8;
            private HttpHeaders headers;
            private InputStream body;
            private String bodyData;
    
            public DecryptHttpInputMessage(HttpInputMessage inputMessage) throws IOException {
                headers = inputMessage.getHeaders();
                bodyData = IOUtils.toString(inputMessage.getBody(), charset);
                body = IOUtils.toInputStream(bodyData, charset);
            }
    
            @Override
            public InputStream getBody() throws IOException {
                return body;
            }
    
            @Override
            public HttpHeaders getHeaders() {
                return headers;
            }
    
            public String getBodyData() {
                return bodyData;
            }
    
            public void setBody(InputStream inputStream) {
                body = inputStream;
            }
    
            /**
             * 写入新的body流
             */
            public void setBody(String newBodyData) {
                body = IOUtils.toInputStream(newBodyData, charset);
            }
    
            public void setBodyData(String bodyDataStr) {
                bodyData = bodyDataStr;
            }
        }
    }
    

    相关文章

      网友评论

          本文标题:RequestBodyAdvice和ResponseBodyAd

          本文链接:https://www.haomeiwen.com/subject/qoossdtx.html