Package net.risesoft.security

Class DefaultSecurityManager

java.lang.Object

net.risesoft.security.DefaultSecurityManager

All Implemented Interfaces:

javax.servlet.Filter, SecurityManager, org.springframework.beans.factory.Aware, org.springframework.context.ApplicationContextAware

@Service
public class DefaultSecurityManager
extends Object
implements SecurityManager, javax.servlet.Filter, org.springframework.context.ApplicationContextAware

Field Summary

Fields

Modifier and Type	Field	Description
String[]	excludeEndUrls	getToken 接口放开
String[]	excludeStartUrls	rpc 和注册相关http 跳过
static net.risesoft.pojo.Y9Result<Object>	noPermission
static net.risesoft.pojo.Y9Result<Object>	noToken
static net.risesoft.pojo.Y9Result<Object>	tokenError

Fields inherited from interface net.risesoft.security.SecurityManager

TOKEN_KEY

Constructor Summary

Constructors

Constructor	Description
DefaultSecurityManager()

Method Summary

Modifier and Type	Method	Description
void	checkFailureToken()	每1小时判断一次 检查token 状态
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain chain)
String	getConcurrentIp()
ConcurrentSecurity	getConcurrentSecurity()
String	getToken()
boolean	hasMatch(String[] source, String compare)
boolean	hasMatch(String source, String compare)
void	init(javax.servlet.FilterConfig filterConfig)
boolean	removeToken(String token)
void	setApplicationContext(org.springframework.context.ApplicationContext applicationContext)
void	tokenFailure(List<String> failureTokens, Long time)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.servlet.Filter

destroy

Field Detail

noToken

public static net.risesoft.pojo.Y9Result<Object> noToken

tokenError

public static net.risesoft.pojo.Y9Result<Object> tokenError

noPermission

public static net.risesoft.pojo.Y9Result<Object> noPermission

excludeStartUrls

public String[] excludeStartUrls

rpc 和注册相关http 跳过

excludeEndUrls

public String[] excludeEndUrls

getToken 接口放开

Constructor Detail

DefaultSecurityManager

public DefaultSecurityManager()

Method Detail

getConcurrentSecurity

public ConcurrentSecurity getConcurrentSecurity()

Specified by:

getConcurrentSecurity in interface SecurityManager

hasMatch

public boolean hasMatch(String source,
                        String compare)

Specified by:

hasMatch in interface SecurityManager

hasMatch

public boolean hasMatch(String[] source,
                        String compare)

Specified by:

hasMatch in interface SecurityManager

tokenFailure

public void tokenFailure(List<String> failureTokens,
                         Long time)

Specified by:

tokenFailure in interface SecurityManager

removeToken

public boolean removeToken(String token)

Specified by:

removeToken in interface SecurityManager

getConcurrentIp

public String getConcurrentIp()

Specified by:

getConcurrentIp in interface SecurityManager

checkFailureToken

@Scheduled(cron="0 0 0/1 * * ? ")
public void checkFailureToken()

每1小时判断一次 检查token 状态

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

getToken

public String getToken()

Specified by:

getToken in interface SecurityManager

setApplicationContext

public void setApplicationContext(org.springframework.context.ApplicationContext applicationContext)
                           throws org.springframework.beans.BeansException

Specified by:

setApplicationContext in interface org.springframework.context.ApplicationContextAware

Throws:

org.springframework.beans.BeansException