在 spring rest/spring boot 中添加自定义标头以响应

Question

我正在尝试在休息控制器的响应标头中发送会话 ID，但 excludepathpattern() 似乎不起作用

** 配置类未触发 **

我尝试过更改 sevlet 版本，但没有成功

上下文监听器

@Override
    public void contextInitialized(ServletContextEvent sce) {
        ServletContext context = sce.getServletContext();
        Map<String, HttpSession> map = new HashMap<>();
        context.setAttribute("activeUsers", map);

HttpSessionListener

ServletContext context = session.getServletContext();
        Map<String, HttpSession> activeUsers = (Map<String, HttpSession>) context.getAttribute("activeUsers");

        activeUsers.put(session.getId(), session);

处理程序拦截器

ServletContext context = request.getServletContext();
        Map<String, HttpSession> activeUsers = (Map<String, HttpSession>) context.getAttribute("activeUsers");
        String sessionId = request.getHeader("sessionId");
        String requestUrl = request.getRequestURL().toString();
        if (requestUrl.contains("/getOtp") || requestUrl.contains("/validateOtp")) {
            return true;
        } else {
            if (activeUsers.containsKey(sessionId)) {
                return true;
            } else {
                response.setStatus(401);
                return false;
            }
        }

通过扩展 websecurityconfigure 进行拦截器配置

@Configuration
@EnableAutoConfiguration
public class SessionInterceptorConfig implements WebMvcConfigurer  {
@Autowired
    private SessionHanlderInterceptor sessionHandlerIntercepto;

    @Override
    public void addInterceptors(InterceptorRegistry registry) {
//      List<String> paths = new ArrayList<String>();
//      paths.add("/auth/*");
        registry.addInterceptor(sessionHandlerIntercepto).excludePathPatterns("/auth/**");
    }

    @Bean
    public ServletListenerRegistrationBean<CustomSessionListener> filterRegistrationBean() {
        ServletListenerRegistrationBean<CustomSessionListener> registrationBean = new ServletListenerRegistrationBean<CustomSessionListener>();
        CustomSessionListener customURLFilter = new CustomSessionListener();

        registrationBean.setListener(customURLFilter);
        registrationBean.setOrder(1); // set precedence
        return registrationBean;
    }

    @Bean
    public ServletListenerRegistrationBean<CustomServletContextListener> filterContextRregistration() {
        ServletListenerRegistrationBean<CustomServletContextListener> registrationBean = new ServletListenerRegistrationBean<CustomServletContextListener>();
        CustomServletContextListener customURLFilter = new CustomServletContextListener();
        registrationBean.setListener(customURLFilter);
        registrationBean.setOrder(1); // set precedence
        return registrationBean;
    }

Sprintboot 主类

@SpringBootApplication
public class CustomerApplication extends SpringBootServletInitializer  {

我希望将会话 ID 添加到标头作为响应并检查请求中的会话 ID

Answer 1

您可以使用 Spring Web 组件“OncePerRequestFilter”。您需要注入一个扩展OncePerRequestFilter 的bean。示例：

public class CustomHeaderFilter extends OncePerRequestFilter {

    @Override
    public void doFilterInternal(final HttpServletRequest request, final HttpServletResponse response,
                                 final FilterChain chain) throws IOException, ServletException {
           response.setHeader(customHeaderName, customHeaderValue);
        chain.doFilter(request, response);
    }
 }