寻径

1
@Retention(RetentionPolicy.RUNTIME)
2
@Target({ElementType.METHOD, ElementType.TYPE})
3
@Documented
4
public @interface RequirePermission {
5
    Role[] value();
6
}

1
@RequirePermission({Role.systemAdministrator})
2
public class UniversityController

1
    @RequirePermission({Role.systemAdministrator})
2
    @ApiOperation("登陆接口")
3
    @PostMapping("/login")
4
    public Response<LoginResultVO> login(@RequestBody LoginForm loginForm)

1
    @Pointcut("@within(*.api.annotation.RequirePermission) || @annotation(*.api.annotation.RequirePermission)")
2
    public void permissionCheck() {}

1
    @Around("permissionCheck()")
2
    public Object checkPermission(ProceedingJoinPoint joinPoint) throws Throwable {
3
        MethodSignature signature = (MethodSignature) joinPoint.getSignature();
4
        Method method = signature.getMethod();
5

6
        RequirePermission methodAnnotation = AnnotationUtils.findAnnotation(method, RequirePermission.class);
7

8
        // 获取类上的注解
9
        RequirePermission classAnnotation = AnnotationUtils.findAnnotation(method.getDeclaringClass(), RequirePermission.class);
10

11
        // 优先使用方法上的注解，如果没有则使用类上的注解
12
        Role[] requiredRoles = methodAnnotation != null ? methodAnnotation.value() :
13
                classAnnotation != null ? classAnnotation.value() : new Role[0];
14
        //TODO: 权限校验
15

16
        return joinPoint.proceed();
17
    }