图源:简书 (jianshu.com)
在之前文章中,已经展示了如何在前后端分离的Web应用中封装并返回统一格式的返回值,但之前展示的返回值封装的相当简单,只能用于简单示例,今天对返回值进行进一步封装和重构。
本篇文章会在从零开始 Spring Boot 9:Shiro - 魔芋红茶’s blog (icexmoon.cn)中最终代码的基础上进行修改。你可以从下面的链接获取对应的示例代码:
- learn_spring_boot/ch9 at main · icexmoon/learn_spring_boot (github.com)
为了说明之前设计的一些缺陷,这里为这个示例代码添加上Swagger文档支持,具体方法见从零开始 Spring Boot 8:Swagger - 魔芋红茶’s blog (icexmoon.cn),这里不再详细说明。
因为这个示例程序使用Shiro做权限验证,所以需要将Swagger相关路径添加为例外,不经过Shiro验证:
// 配置不会被拦截的链接 顺序判断
map.put("/swagger-ui
public static Result success() {
return SUCCESS_RESULT;
}
public static Result success(Object data) {
Result result = new Result();
result.setData(data);
return result;
}
public static Result fail(ErrorCode errorCode, String msg) {
Result result = new Result();
result.setSuccess(false);
result.setCode(errorCode);
result.setData(null);
result.setMsg(msg);
return result;
}
public static Result fail(ResultException exp) {
Result result = new Result();
result.setSuccess(false);
result.setCode(exp.getCode());
result.setData(null);
result.setMsg(exp.getMessage());
return result;
}
@Override
public String toString() {
JSONObject jsonObject = new JSONObject();
jsonObject.put("success", success);
jsonObject.put("msg", msg);
jsonObject.put("data", data);
jsonObject.put("code", code.getCode());
return jsonObject.toString();
}
}
这个新的Result类型除了包含基本的data和success等,更便利的是使用内嵌的枚举封装了系统错误类型,这样在编程的时候就无需使用类属性或者字符串来指定错误,并且枚举自带desc属性可以对错误进行说明。
就像前边说的,因为之后Controller层的方法会直接返回具体业务类型,所以我们需要添加拦截器来对具体类型统一封装:
package cn.icexmoon.demo.books.system; import cn.icexmoon.demo.books.system.result.IResult; import cn.icexmoon.demo.books.system.result.Result; import com.fasterxml.jackson.databind.ObjectMapper; import lombok.SneakyThrows; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.core.MethodParameter; import org.springframework.http.MediaType; import org.springframework.http.converter.HttpMessageConverter; import org.springframework.http.server.ServerHttpRequest; import org.springframework.http.server.ServerHttpResponse; import org.springframework.web.bind.annotation.RestControllerAdvice; import org.springframework.web.servlet.mvc.method.annotation.ResponseBodyAdvice; @RestControllerAdvice public class ResponseAdvice implements ResponseBodyAdvice
这里拦截了所有HTTP请求的返回值,这其中包含一些静态资源,如果对其进行封装显然会造成系统错误。所以这里我使用了一个标记接口IResult来识别是否是Controller层返回的需要封装的对象,如果是,再进行封装。
package cn.icexmoon.demo.books.system.result;
public interface IResult {
}
现在我们修改Controller中的接口方法,让其返回具体类型:
package cn.icexmoon.demo.books.book.controller;
import cn.icexmoon.demo.books.book.entity.Book;
import cn.icexmoon.demo.books.book.service.IBookService;
import cn.icexmoon.demo.books.system.result.IResultArrayList;
import cn.icexmoon.demo.books.system.result.Result;
import cn.icexmoon.demo.books.user.entity.User;
import cn.icexmoon.demo.books.user.service.IUserService;
import io.swagger.annotations.ApiOperation;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authz.annotation.Logical;
import org.apache.shiro.authz.annotation.RequiresRoles;
import org.apache.shiro.subject.Subject;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RestController;
import java.util.List;
@RestController
public class BookController {
@Autowired
private IBookService bookService;
@Autowired
private IUserService userService;
@RequiresRoles(value = {"guest", "manager"}, logical = Logical.OR)
@GetMapping("/book")
@ApiOperation("获取所有图书列表")
public List listAllBooks() {
Result result = new Result();
List books = new IResultArrayList<>();
books.addAll(bookService.list());
return books;
}
@RequiresRoles("manager")
@PostMapping("/book/add")
@ApiOperation("添加书籍")
public Result addBook(@RequestBody Book book) {
//添加图书
Subject subject = SecurityUtils.getSubject();
String name = (String) subject.getPrincipal();
User user = userService.getUserByName(name);
book.setUserId(user.getId());
bookService.save(book);
return Result.success();
}
}
这里为了能封装返回的List,我定义了一个实现了IResult的IResultArrayList:
package cn.icexmoon.demo.books.system.result; import java.util.ArrayList; import java.util.List; import java.util.function.Function; public class IResultArrayListextends ArrayList implements IResult { public IResultArrayList() { super(); } public IResultArrayList(List items, Function mapFunc) { this(); for (E item : items) { add(mapFunc.apply(item)); } } }
实际上也可以在拦截器中用反射检查对象是否为List的子类型来决定是否封装。
现在再看Swagger中的类型:
这样就可以愉快地让前端自己去看返回值格式了。
处理异常最后还要重构下对错误的处理,定义一个统一的系统异常:
package com.sjcx.ccsp.system.result;
public class ResultException extends RuntimeException {
private Result.ErrorCode code;
public ResultException(Result.ErrorCode code, String msg) {
super(msg);
this.code = code;
}
public Result.ErrorCode getCode() {
return code;
}
}
在全局异常拦截器中拦截该类型的异常并包装成Result类型返回:
@ExceptionHandler(ResultException.class)
public Result doHandleResultException(ResultException exp, Model model) {
return Result.fail(exp);
}
现在可以将之前产生错误并返回Result的地方全部改成简单的抛出异常:
package cn.icexmoon.demo.books.system;
import cn.icexmoon.demo.books.system.result.Result;
import cn.icexmoon.demo.books.system.result.ResultException;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.UnknownAccountException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.authz.AuthorizationException;
import org.apache.shiro.subject.Subject;
import org.springframework.stereotype.Component;
import org.springframework.util.ObjectUtils;
@Component
public class Login {
public Result checkAndLogin(String name, String password) {
Result result = new Result();
if (ObjectUtils.isEmpty(name) || ObjectUtils.isEmpty(password)) {
throw new ResultException(Result.ErrorCode.LOGIN_ERROR, "用户名或密码为空。");
}
//用户认证信息
Subject subject = SecurityUtils.getSubject();
UsernamePasswordToken usernamePasswordToken = new UsernamePasswordToken(
name,
password
);
try{
subject.login(usernamePasswordToken);
}
catch (UnknownAccountException e){
throw new ResultException(Result.ErrorCode.LOGIN_ERROR, "账户不存在");
}
catch (AuthenticationException e){
throw new ResultException(Result.ErrorCode.LOGIN_ERROR, "账号或密码错误");
}
catch (AuthorizationException e){
throw new ResultException(Result.ErrorCode.DEFAULT_ERROR, "没有权限");
}
result.setData(subject.getSession().getId());
return result;
}
}
故意输错密码试一下:
可以看到拦截器很好地发挥了作用,将异常封装成了统一返回值。
好了,这篇文章就到这里了,谢谢阅读。
本篇文章的最终代码见learn_spring_boot/ch11 at main · icexmoon/learn_spring_boot (github.com)。



