今天給大家介紹一下SpringBoot中實現攔截器級別URl過快訪問攔截，並利用JPA實現IP黑名單的功能。

上一節中已經將中已經介紹了在控制器層面上面的URL攔截，這一節則側重於網站全域性式的攔截。就是不管輸入什麼URL地址都會進行過濾，判斷是否存在URL訪問過快的情況發生。因為本文會用到前面已經講過的JPA和攔截器技術，所以接下來就不對JPA和攔截器的實現過程進行認真的講解了。有需要的朋友可以看我以前寫的部落格案例。

步驟一：下面先新建一張IP黑名單表，表的結構如下所示：

步驟二：新建一個實體類，並於黑名單表相對映。例子程式碼如下：

package example.entity;
import javax.persistence.*;
import java.util.Date;
@Entity
@Table(name = "blacklist")
public class Blacklist {
    @Id
    @GeneratedValue(strategy = GenerationType.AUTO)
    private int id;

    @Column(name = "ip", nullable = true, length = 30)
    private String ip;

    @Temporal(TemporalType.TIMESTAMP)
    private Date iptime; // 日期型別，格式：yyyy-MM-dd HH:mm:ss

    public Blacklist() {
    }

    public Blacklist(String ip, Date iptime) {
        this.ip = ip;
        this.iptime = iptime;
    }

    public int getId() {
        return id;
    }

    public void setId(int id) {
        this.id = id;
    }

    public String getIp() {
        return ip;
    }

    public void setIp(String ip) {
        this.ip = ip;
    }

    public Date getIptime() {
        return iptime;
    }

    public void setIptime(Date iptime) {
        this.iptime = iptime;
    }
}
 

package example.dao;
import example.entity.Blacklist;
import org.springframework.data.jpa.repository.JpaRepository;
import org.springframework.stereotype.Repository;
import javax.transaction.Transactional;
import java.util.List;
@Transactional
@Repository
public interface BlacklistDao extends JpaRepository<Blacklist, Integer> {
    public List<Blacklist> findByIp(String ip);
}
 

package example.Interceptor;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import example.controller.exception.RequestLimitException;
import example.controller.limit.RequestLimit;
import example.controller.limit.RequestLimitContract;
import example.dao.BlacklistDao;
import example.entity.Blacklist;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import org.springframework.stereotype.Controller;
import org.springframework.stereotype.Service;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import java.util.*;
/**
 * 自定義攔截器1
 *
 * @author   林志強(208017534)
 * @myblog    www.wolzq.com
 * @create    2016年9月20日
 */
public class URLInterceptor implements HandlerInterceptor {
    @Autowired
    private BlacklistDao blacklistDao;
    private Map<String, Integer> redisTemplate=new HashMap<String,Integer>();
    private static final Logger logger = LoggerFactory.getLogger("RequestLimitLogger");
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
            throws Exception {
        return true;
    }


    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler,
                           ModelAndView modelAndView) throws Exception {
        String ip = request.getLocalAddr();
        List<Blacklist> blackList =blacklistDao.findByIp(ip);
        if(blackList==null || blackList.size()==0){
            urlHandle(request,10000,10);
        }else{
            modelAndView.setViewName("/errorpage/error");
        }
    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex)
            throws Exception {

    }

    public void urlHandle(HttpServletRequest request, long limitTime,int limitCount) throws RequestLimitException {
        try{
        String ip = request.getLocalAddr();
        String url = request.getRequestURL().toString();
        String key = "req_limit_".concat(url).concat(ip);
        if(redisTemplate.get(key)==null || redisTemplate.get(key)==0){
            redisTemplate.put(key,1);
        }else{
            redisTemplate.put(key,redisTemplate.get(key)+1);
        }
        int count = redisTemplate.get(key);
        if (count > 0) {
            Timer timer= new Timer();
            TimerTask task  = new TimerTask(){
                @Override
                public void run() {
                    redisTemplate.remove(key);
                }
            };
            timer.schedule(task, limitTime);
        }
        if (count > limitCount) {
            addHostHandle(ip);
            throw new RequestLimitException();
        }
    } catch (RequestLimitException e) {
        throw e;
    } catch (Exception e) {
        logger.error("發生異常: ", e);
    }
    }

    public void addHostHandle(String ip){
        Calendar calendar = Calendar.getInstance();
        Date iptime=calendar.getTime();
        Blacklist blacklist=new Blacklist(ip,iptime);
        blacklistDao.save(blacklist);
    }
}
 

package example.configuration;
import example.Interceptor.ErrorInterceptor;
import example.Interceptor.URLInterceptor;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
@Configuration
public class MyWebAppConfigurer
        extends WebMvcConfigurerAdapter {
    @Bean
    public HandlerInterceptor getMyInterceptor(){
        return new URLInterceptor();
    }


    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        // 多個攔截器組成一個攔截器鏈
        // addPathPatterns 用於新增攔截規則
        // excludePathPatterns 使用者排除攔截
        registry.addInterceptor(getMyInterceptor()).addPathPatterns("/**");
        super.addInterceptors(registry);
    }
}

<html>
<head>
    <meta charset="UTF-8"/>
    <title>Title</title>
</head>
<body>
<h1>您已經被列入黑名單中，請及時和管理員聯絡，接觸黑名單限制。。。。</h1>
</body>
</html>