GateWay实现黑白名单

GateWay实现黑白名单

配置文件

spring:
  security:
    resource:
      - /**/favicon-*.png/**
      - /**/api-docs
      - /**/*.js
      - /**/*.css
      - /**/*.html
      - /**/*.htm
      - /**/*.ico
      - /**/swagger-resources
      - /**/user/customAvatars
      - /**/webjars
      - /**/user/smsCode
      - /**/order/payNotify
      - /**/user/walletNotify
      - /**/user/wallet/status/change/notify
      - /**/market/initIndexPage
      - /**/owner/initNftGoods
      - /**/owner/udtGdFrmOneMarket
      - /**/market/nft/initGoodsForNft
      - /**/introduce/list
      - /**/introduce/add
      - /**/mq/nftPrice/sync
      - /**/admin/refreshGoods
      - /**/market/nftPriceRange
      - /**/user/testRedisGet
      - /**/admin/destroyGoods
    whites:
      - /app/v1/user/mobileLogin
      - /app/v1/user/customAvatars
      - /app/v1/home/nft
      - /app/v1/home/banner
      - /app/v1/market/**
      - /app/v1/market/menu
      - /app/v1/market/series
      - /app/v1/market/series/{seriesId}
      - /app/v1/market/nft
      - /app/v1/market/nft/search
      - /app/v1/market/nftDetail
      - /app/v1/market/nft/goods/list
      - /app/v1/market/nft/goods/priceHistory
      - /app/v1/market/nft/goods/{goodsId}
      - /app/v1/market/nft/goods/{nftTemplateId}/default
      - /app/v1/order/payNotify
      - /app/v1/redis/cache/delete/**
      - /app/v1/user/walletNotify
      - /app/v1/user/wallet/status/change/notify
      - /app/v1/market/newNft
    blocks:

配置类

import lombok.Data;
import org.springframework.boot.context.properties.ConfigurationProperties;
import org.springframework.context.annotation.Configuration;

import java.util.ArrayList;
import java.util.List;

@Configuration
@Data
@ConfigurationProperties("spring.security")
public class AuthProperties {
    /**
     * 资源名单
     */
    private List<String> resource = new ArrayList<>();

    /**
     * 白名单
     */
    private List<String> whites = new ArrayList<>();

    /**
     * 阻塞名单配置
     */
    private List<String> blocks = new ArrayList<>();
}

拦截类

public class AuthFilter implements GlobalFilter {
  
    @Autowired
    private AuthProperties authProperties;

    @Override
    public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) {
      
        String url = exchange.getRequest().getURI().getPath();
        AntPathMatcher matcher = new AntPathMatcher();

        // 资源名单
        for (String s : authProperties.getResource()) {
            if (matcher.match(s, url)) {
                return chain.filter(exchange);
            }
        }

        // 阻塞名单
        for (String block : authProperties.getBlocks()) {
            if (matcher.match(block, url)) {
                log.info("{}请求不被允许，触发阻塞名单", url);
                return this.unPassResponse(exchange, HttpStatus.FORBIDDEN.value(), "请求不被允许，触发阻塞名单");
            }
        }

        // 白名单验证
        boolean isWhite = false;
        for (String white : authProperties.getWhites()) {
            if (matcher.match(white, url)) {
                isWhite = true;
                break;
            }
        }

        // 验证token
        // 白名单API不验证token
        // 非白名单API验证token
    }

    /**
     * 未通过鉴权返回结果
     */
    private Mono<Void> unPassResponse(ServerWebExchange exchange, int code, String msg) {
        ServerHttpResponse response = exchange.getResponse();
        response.getHeaders().setContentType(MediaType.APPLICATION_JSON);
        response.setStatusCode(HttpStatus.OK);
        return response.writeWith(Mono.fromSupplier(() -> {
            DataBufferFactory bufferFactory = response.bufferFactory();
            return bufferFactory.wrap(JSON.toJSONBytes(Result.fail(code, msg)));
        }));
    }

}