ssm框架后台对app的接口进行登录验证（拦截器，更智能只要方法上面有这个定义注解就验证）

1 pom依赖 我的spring版本是4.3.9 还有jackson版本2.8.8

<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-annotations</artifactId>
<version>2.8.8</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-core</artifactId>
<version>2.8.8</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>2.8.8</version>
</dependency>

2 spring-web.xml配置：

<!-- 拦截器  -->
<mvc:interceptors>
<!-- 多个拦截器，顺序执行 说明： 1 mvc:mapping 拦截器路径配置 ; 2 mvc:exclude-mapping 拦截器不需要拦截的路径-->
<mvc:interceptor>
<mvc:mapping path="/**"/>
<!-- <mvc:exclude-mapping path="/account/**" />
<mvc:exclude-mapping path="/message/**" />
<mvc:exclude-mapping path="/find/**" /> -->
<bean class="com.datebook.aop.LoginInterceptor"></bean>
</mvc:interceptor>
</mvc:interceptors>

3 自己定义一个注解

package com.datebook.common;

import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;

/**
* Created by wangH on 2017/10/24.
*/
@Target({ElementType.METHOD})
@Retention(RetentionPolicy.RUNTIME)
public @interface LoginRequired {
}

4 自定义拦截器

package com.datebook.aop;

import java.lang.reflect.Method;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.ModelAndView;
import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;

import com.alibaba.fastjson.JSON;
import com.datebook.common.JsonResult;
import com.datebook.common.LoginRequired;
import com.datebook.common.ResultCode;
import com.datebook.service.WebTokenService;
import com.datebook.vo.WebToken;

/**
* 登录认证的拦截器
*/
@Configuration
public class LoginInterceptor extends HandlerInterceptorAdapter{

@Autowired
public WebTokenService tokenService;
/**
* Handler执行之前调用这个方法
*/
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
final HttpServletRequest httpRequest = (HttpServletRequest) request;
final HttpServletResponse httpResponse = (HttpServletResponse) response;
final String authHeaderVal = httpRequest.getHeader("token");

if (!(handler instanceof HandlerMethod)) {
return true;
}

String name = request.getServletPath().toString();

HandlerMethod handlerMethod = (HandlerMethod) handler;
Method method = handlerMethod.getMethod();

LoginRequired methodAnnotation = method.getAnnotation(LoginRequired.class);
if (methodAnnotation != null) {
if (StringUtils.isNotEmpty(authHeaderVal)) {
try {
WebToken webToken = tokenService.getToken(authHeaderVal);
int userId = Integer.valueOf(webToken.getId());
System.out.println("========"+name+"===>LoginInterceptor preHandle 验证成功放行");
return true;
} catch (Exception e) {
response.setCharacterEncoding("UTF-8");
response.getWriter().write(JSON.toJSONString(new JsonResult(ResultCode.INVALID_AUTHCODE, "登录已过期，请重新登录！")));
System.out.println("========"+name+"===>LoginInterceptor preHandle 拦截，登录已过期，请重新登录！");
return false;
}
} else {
response.setCharacterEncoding("UTF-8");
response.getWriter().write(JSON.toJSONString(new JsonResult(ResultCode.NOT_LOGIN,"尚未登录")));
System.out.println("========"+name+"===>LoginInterceptor preHandle 拦截，尚未登录！");
return false;
}
}
System.out.println("========"+name+"===>LoginInterceptor preHandle 没加验证注解放行");
return true;
}

/**
* Handler执行之后，ModelAndView返回之前调用这个方法
*/
@Override
public void postHandle(HttpServletRequest request, HttpServletResponse response,
Object handler, ModelAndView modelAndView) throws Exception {
String name = request.getServletPath().toString();
System.out.println("========"+name+"===>LoginInterceptor postHandle");
}

/**
* Handler执行完成之后调用这个方法
*/
@Override
public void afterCompletion(HttpServletRequest request,
HttpServletResponse response, Object handler, Exception exc)
throws Exception {
String name = request.getServletPath().toString();
System.out.println("========"+name+"===>LoginInterceptor afterCompletion");
}
}

最后在需要调用的接口上面加@LoginRequired注解就行。

/**
* 通过手机号获取用户个人资料
*
* */
@LoginRequired
@RequestMapping(value = "/getByMobile", method = RequestMethod.POST)
private JsonResult getByMobile(@RequestBody Map<String, Object> params) {
if (params == null||
StringUtils.isEmpty(params.get("mobile").toString())) {
return new JsonResult(ResultCode.PARAMS_ERROR, "参数错误");
}
User user = userService.getUserByMobile(params.get("mobile").toString());
Map<String, Object> map = new HashMap<>();
user.setPassword("不告诉你");
map.put("userInfo", user);
return new JsonResult(ResultCode.SUCCESS,"成功",map);
}