SpringBoot登录拦截配置详解(实测可用)

public class LoginInterceptor implements HandlerInterceptor {

  @Override
  public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
  	// 这里是关键
    User loginUser = (User) request.getSession().getAttribute("user");
    if (loginUser == null) {
      // 未登录抛出异常，交给统一异常处理器处理
      throw new CustomException(ResultCode.USER_NOT_LOGIN);
    }
    return true;
  }

  @Override
  public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {

  }

  @Override
  public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {

  }
}

@Configuration
public class WebMvcConfig implements WebMvcConfigurer {

  @Override
  public void addInterceptors(InterceptorRegistry registry) {
    //注册TestInterceptor拦截器
    registry.addInterceptor(new LoginInterceptor())
        .addPathPatterns("/**")
        // 排除登录注册等接口，注意这里的格式是 /**/xxx
        .excludePathPatterns("/**/login", "/**/register"); 
  }
}

 /**
   * 登录
   * @return 用户信息
   */
public User login(UserVO userVO. HttpServlet) {
  String username = userVO.getUsername();
  String password = userVO.getPassword();

  User user = userMapper.findByUsernameAndPassword(username, password);
  // 未找到用户
  if(user == null) {
    throw new CustomException(ResultCode.USER_ACCOUNT_ERROR);
  }
  // 设置session中的用户信息
  SessionUtils.setSessionAttribute("user", user);
  return user;
}