top.lingkang.finalsecurity.solonplugin.config.FinalSecurityConfiguration Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of final-security-solon-plugin Show documentation
final-security，一个基于RBAC，专注于授权认证的轻量级框架
There is a newer version: 3.1.0
Show newest version
package top.lingkang.finalsecurity.solonplugin.config;

import org.noear.solon.core.handle.Context;
import org.noear.solon.core.handle.Filter;
import org.noear.solon.core.handle.FilterChain;
import top.lingkang.finalsecurity.common.base.FinalAuth;
import top.lingkang.finalsecurity.common.base.FinalHttpProperties;
import top.lingkang.finalsecurity.common.base.FinalSessionObject;
import top.lingkang.finalsecurity.common.error.FinalBaseException;
import top.lingkang.finalsecurity.common.error.FinalNotLoginException;
import top.lingkang.finalsecurity.common.error.FinalPermissionException;
import top.lingkang.finalsecurity.common.utils.AuthUtils;

import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

/**
 * @author lingkang
 * Created by 2022/10/28
 * @since 3.0.0
 */
public class FinalSecurityConfiguration implements Filter {
    public FinalHttpProperties properties;
    private FinalSessionObject sessionObject = new FinalSessionObjectSolon();

    @Override
    public void doFilter(Context ctx, FilterChain chain) throws Throwable {
        try {
            String path = ctx.path();
            // 缓存相关
            if (properties.getCheckPathCache().getExcludePath().contains(path)) {
                chain.doFilter(ctx);
                return;
            } else if (properties.getCheckPathCache().getAuths().containsKey(path)) {
                sessionObject.init(ctx);
                FinalAuth[] finalAuths = properties.getCheckPathCache().getAuths().get(path);
                for (FinalAuth auth : finalAuths) {
                    auth.check(sessionObject);
                }

                chain.doFilter(ctx);
                return;
            }

            // 排除
            for (String url : properties.getExcludePath()) {
                if (AuthUtils.matcher(url, path)) {
                    properties.getCheckPathCache().getExcludePath().add(path);// 添加缓存
                    chain.doFilter(ctx);
                    return;
                }
            }

            // 检查角色
            HashMap checkAuth = properties.getCheckAuthorize().getAuthorize();
            List auths = new ArrayList<>();
            for (Map.Entry entry : checkAuth.entrySet()) {
                if (AuthUtils.matcher(entry.getKey(), path)) {
                    auths.add(entry.getValue());
                }
            }

            // cache
            properties.getCheckPathCache().getAuths().put(path, AuthUtils.AllToOne(auths.toArray(new FinalAuth[auths.size()])));

            // 不需要校验
            if (auths.isEmpty()) {
                chain.doFilter(ctx);
                return;
            }

            // 执行检查
            sessionObject.init(ctx);
            for (FinalAuth auth : auths) {
                auth.check(sessionObject);
            }

            //放行
            chain.doFilter(ctx);
        } catch (Exception e) {
            if (FinalBaseException.class.isAssignableFrom(e.getClass())) {
                if (e instanceof FinalPermissionException) {
                    properties.getExceptionHandler().permissionException(e, ctx, ctx);
                } else if (e.getCause() instanceof FinalPermissionException)
                    properties.getExceptionHandler().permissionException(e.getCause(), ctx, ctx);
                else if (e instanceof FinalNotLoginException) {
                    properties.getExceptionHandler().notLoginException(e, ctx, ctx);
                } else if (e.getCause() instanceof FinalNotLoginException)
                    properties.getExceptionHandler().notLoginException(e.getCause(), ctx, ctx);
                else
                    properties.getExceptionHandler().exception(e, ctx, ctx);
                ctx.setHandled(true);
            } else {
                throw e;
            }
        }
    }

    protected void config(FinalHttpProperties config) {
        System.out.println("final-security use default config");
    }

    public void init() {
        properties = new FinalHttpProperties();
        properties.setExceptionHandler(new DefaultFinalExceptionHandler());
        config(properties);
    }

    public FinalHttpProperties getProperties() {
        return properties;
    }
}