| | |
| | | |
| | | @Override |
| | | protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain) throws IOException, ServletException { |
| | | |
| | | // 忽略登录请求的token验证 |
| | | String requestURI = request.getRequestURI(); |
| | | if (requestURI.equalsIgnoreCase("/api/user/login")) { |
| | | chain.doFilter(request, response); |
| | | return; |
| | | } |
| | | String jwt = request.getHeader(JwtUtils.getHeader()); |
| | | // 这里如果没有jwt,继续往后走,因为后面还有鉴权管理器等去判断是否拥有身份凭证,所以是可以放行的 |
| | | // 没有jwt相当于匿名访问,若有一些接口是需要权限的,则不能访问这些接口 |
| | | if (StringUtils.isBlank(jwt)) { |
| | | chain.doFilter(request, response); |
| | | return; |
| | | jwt = request.getParameter(JwtUtils.getHeader()); |
| | | if (StringUtils.isBlank(jwt)) { |
| | | chain.doFilter(request, response); |
| | | return; |
| | | } |
| | | } |
| | | |
| | | |
| | | JwtUser jwtUser = JwtUtils.verifyToken(jwt); |
| | | String username = jwtUser.getUserName(); |