love.keeping.starter.web.aop.PermissionAspect Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of web-starter Show documentation

The newest version!

package love.keeping.starter.web.aop;

import love.keeping.starter.common.exceptions.impl.AccessDeniedException;
import love.keeping.starter.web.annotations.security.HasPermission;
import love.keeping.starter.web.components.security.CheckPermissionHandler;
import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.annotation.Around;
import org.aspectj.lang.annotation.Aspect;
import org.aspectj.lang.annotation.Pointcut;
import org.aspectj.lang.reflect.MethodSignature;
import org.springframework.beans.factory.annotation.Autowired;

/**
 * 鉴权切面
 *
 * @author Keeping
 */
@Aspect
public class PermissionAspect {

  @Autowired
  private CheckPermissionHandler checkPermissionHandler;

  @Pointcut("@annotation(love.keeping.starter.web.annotations.security.HasPermission) && execution(public * *(..))")
  public void permissionPointCut() {

  }

  @Around(value = "permissionPointCut()")
  public Object permission(ProceedingJoinPoint joinPoint) throws Throwable {

    MethodSignature signature = (MethodSignature) joinPoint.getSignature();

    HasPermission hasPermission = signature.getMethod().getAnnotation(HasPermission.class);

    if (!checkPermissionHandler.valid(hasPermission.calcType(), hasPermission.value())) {
      throw new AccessDeniedException("暂无权限，请联系系统管理员！");
    }

    Object value = joinPoint.proceed();

    return value;
  }
}