基于拦截器对token 进行时间校验

    1. 主要是需要继承 HandlerInterceptorAdapter类重写拦截器方法进行逻辑处理 ```java /**
      • Copyright (c) 2016-2019 人人开源 All rights reserved. *
      • https://www.renren.io *
      • 版权所有，侵权必究！ */

    package io.renren.interceptor;

    import io.renren.annotation.Login; import io.renren.common.exception.RRException; import io.renren.entity.TokenEntity; import io.renren.service.TokenService; import org.apache.commons.lang.StringUtils; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.stereotype.Component; import org.springframework.web.method.HandlerMethod; import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;

    import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse;

    /**

    • 权限(Token)验证 *

    • @author Mark sunlightcs@gmail.com */ @Component public class AuthorizationInterceptor extends HandlerInterceptorAdapter { @Autowired private TokenService tokenService;

      public static final String USER_KEY = “userId”;

      @Override public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

      1.  Login annotation;
      2.  if(handler instanceof HandlerMethod) {
      3.      annotation = ((HandlerMethod) handler).getMethodAnnotation(Login.class);
      4.  }else{
      5.      return true;
      6.  }
      8.  if(annotation == null){
      9.      return true;
      10.  }
      12.  //从header中获取token
      13.  String token = request.getHeader("token");
      14.  //如果header中不存在token，则从参数中获取token
      15.  if(StringUtils.isBlank(token)){
      16.      token = request.getParameter("token");
      17.  }
      19.  //token为空
      20.  if(StringUtils.isBlank(token)){
      21.      throw new RRException("token不能为空");
      22.  }
      24.  //查询token信息
      25.  TokenEntity tokenEntity = tokenService.queryByToken(token);
      26.  if(tokenEntity == null || tokenEntity.getExpireTime().getTime() < System.currentTimeMillis()){
      27.      throw new RRException("token失效，请重新登录");
      28.  }
      30.  //设置userId到request里，后续根据userId，获取用户信息
      31.  request.setAttribute(USER_KEY, tokenEntity.getUserId());
      33.  return true;

      } }

    ```