Spring AOP实现功能权限校验功能的示例代码

实现功能权限校验的功能有多种方法，其一使用拦截器拦截请求，其二是使用aop抛异常。

首先用拦截器实现未登录时跳转到登录界面的功能。注意这里没有使用AOP切入，而是用拦截器拦截，因为AOP一般切入的是service层方法，而拦截器是拦截控制器层的请求，它本身也是一个处理器，可以直接中断请求的传递并返回视图，而AOP则不可以。

1.使用拦截器实现未登录时跳转到登录界面的功能

1.1 拦截器SecurityInterceptor

package com.jykj.demo.filter;import java.io.PrintWriter;import javax.servlet.Http.httpservletRequest;import javax.servlet.http.HttpServletResponse;import javax.servlet.http.HttpSession;import org.springframework.WEB.servlet.HandlerInterceptor;import org.springframework.web.servlet.ModelAndView;import com.alibaba.fastJSON.jsON;import com.jykj.demo.util.Helper;import com.jykj.demo.util.Result;public class SecurityInterceptor implements HandlerInterceptor{ @Override public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)   throws Exception {  System.out.println("SecurityInterceptor:"+request.getContextPath()+","+request.getRequestURI()+","+request.getMethod());  HttpSession session = request.getSession();  if (session.getAttribute(Helper.SESSION_USER) == null) {   System.out.println("AuthorizationException:未登录！"+request.getMethod());   if("POST".equalsIgnoreCase(request.getMethod())){    response.setContentType("text/html; charset=utf-8");     PrintWriter out = response.getWriter();     out.write(JSON.toJSONString(new Result(false,"未登录！")));    out.flush();    out.close();   }else{    response.sendRedirect(request.getContextPath()+"/login");    }   return false;  } else {   return true;  } } @Override public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler,   ModelAndView modelAndView) throws Exception {  // TODO Auto-generated method stub } @Override public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex)   throws Exception {  // TODO Auto-generated method stub }}