method

。

*java.lang.IllegalStateException

Only

AbstractNameValueGatewayFilterFactory

implements

exchange.getRequest().getURI();URI

UriComponentsBuilder.fromUri(uri).build(true).toUri();ServerHttpRequest

request

exchange.getRequest().mutate().uri(ex).build();//封装我们的requestif

(POST.equalsIgnoreCase(request.getMethodValue()))

body

request.getBody();AtomicReferenceString

bodyRef

AtomicReference();//缓存读取的request

body信息body.subscribe(dataBuffer

{CharBuffer

StandardCharsets.UTF_8.decode(dataBuffer.asByteBuffer());DataBufferUtils.release(dataBuffer);bodyRef.set(charBuffer.toString());});//读取request

body到缓存String

stringBuffer(bodyStr);FluxDataBuffer

bodyFlux

Flux.just(bodyDataBuffer);request

new

ServerHttpRequestDecorator(request)

{Overridepublic

chain.filter(exchange.mutate().request(request).build());};}private

DataBuffer

value.getBytes(StandardCharsets.UTF_8);NettyDataBufferFactory

new

NettyDataBufferFactory(ByteBufAllocator.DEFAULT);DataBuffer

buffer

nettyDataBufferFactory.allocateBuffer(bytes.length);buffer.write(bytes);return

int

ConfigurationProperties(auth.skip.urls)

Getter

USER:ACCESS_TOKEN:userInfo:;private

final

redis中access_token过期时间*/private

static

服务名*/Value(${spring.application.name})private

String

applicationName;BeanConditionalOnMissingBeanpublic

messageConverters(ObjectProviderHttpMessageConverter?

converters)

HttpMessageConverters(converters.orderedStream().collect(Collectors.toList()));}/***

全局拦截**

UUID.randomUUID().toString().replace(-,

);MDC.put(traceId,

UUID.randomUUID().toString().replace(-,

));Object

exchange.getAttributes().get(GATEWAY_REQUEST_URL_ATTR);if

(uriObj

http);exchange.getAttributes().put(GATEWAY_REQUEST_URL_ATTR,

request

exchange.getRequest();ServerHttpResponse

response

exchange.getRequest().getURI().getPath();if

url);}StringBuffer

sb.append(/).append(applicationName).toString();if

{url

url.substring(applicationName.length()

(checkSkipAuthUrls(Arrays.asList(skipAuthUrls),

url))

chain.filter(exchange.mutate().request(exchange.getRequest().mutate().header(X-TraceId,

traceId).build()).build());}//获取用户令牌信息//头文件中log.info(-----------------------获取请求头中的令牌---------------------);final

String

request.getHeaders().getFirst(AUTHORIZE_TOKEN);final

String

request.getHeaders().getFirst(APP_KEY);//如果没有令牌,则拦截if

{log.info(-----------------------未获取到token令牌---------------------);//设置没有权限的状态码401return

unAuth(exchange,

stringRedisTemplate.hasKey(accessTokenRedisKey);String

redisKey

stringRedisTemplate.hasKey(redisKey);if

(BooleanUtils.isTrue(isExistKey)

BooleanUtils.isTrue(isExistFlag))

(Boolean.FALSE.equals(stringRedisTemplate.hasKey(ACCESS_TOKEN_USERID_REDIS_KEY

token)))

{log.info(客户登陆状态无效返回401);return

unAuth(exchange,

(BooleanUtils.isFalse(JwtUtils.validateToken(token)))

{log.info(客户登陆状态无效返回403);return

unAuth(exchange,

stringRedisTemplate.expire(accessTokenRedisKey,

stringRedisTemplate.expire(redisKey,

else

null);}//将令牌封装到头文件中ConsumerHttpHeaders

httpHeaders

{httpHeader.set(AUTHORIZE_TOKEN,

serverHttpRequest

exchange.getRequest().mutate().headers(httpHeaders).build();exchange.mutate().request(serverHttpRequest).build();//有效,放行return

chain.filter(exchange.mutate().request(exchange.getRequest().mutate().header(X-TraceId,

traceId).build()).build());}private

Boolean

x.contains(**)).collect(Collectors.toList());if

(!CollectionUtils.isEmpty(superSkipUrlList))

{for

exchange.getResponse();response.getHeaders().setContentType(MediaType.APPLICATION_JSON);response.setStatusCode(HttpStatus.OK);log.error([鉴权异常处理]请求路径:{}

状态码{},

exchange.getRequest().getPath(),errCode

null

HttpStatus.UNAUTHORIZED.value()

errCode);return

response.writeWith(Mono.fromSupplier(()

{DataBufferFactory

response.bufferFactory();return

bufferFactory.wrap(JSON.toJSONBytes(ResponseResult.fail(errCode

null

HttpStatus.UNAUTHORIZED.value()

errCode,

UriComponentsBuilder.fromUri(uri).scheme(scheme);if

(uri.getRawQuery()

{uriComponentsBuilder.replaceQuery(uri.getRawQuery().replace(,

%20));}return

uriComponentsBuilder.build(true).toUri();}}