blocks|key|201722|text|以下是在Spring+Boot+MVC应用程序中包含自定义过滤器的一种方法的示例。请确保在组件扫描中包含该软件包：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|201723|package+com.dearheart.gtsc.filters;

import+java.io.IOException;

import+javax.servlet.Filter;
import+javax.servlet.FilterChain;
import+javax.servlet.FilterConfig;
import+javax.servlet.ServletException;
import+javax.servlet.ServletRequest;
import+javax.servlet.ServletResponse;
import+javax.servlet.http.HttpServletResponse;

import+org.springframework.context.annotation.Profile;
import+org.springframework.stereotype.Component;

@Component
public+class+XClacksOverhead+implements+Filter+{

++public+static+final+String+X_CLACKS_OVERHEAD+=+"X-Clacks-Overhead";

++@Override
++public+void+doFilter(ServletRequest+req,+ServletResponse+res,
++++++FilterChain+chain)+throws+IOException,+ServletException+{

++++HttpServletResponse+response+=+(HttpServletResponse)+res;
++++response.setHeader(X_CLACKS_OVERHEAD,+"GNU+Terry+Pratchett");
++++chain.doFilter(req,+res);
++}

++@Override
++public+void+destroy()+{}

++@Override
++public+void+init(FilterConfig+arg0)+throws+ServletException+{}

}|code-block|syntax|javascript|201724|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Here is an example of one method of including a custom filter in a Spring Boot MVC application. Be sure to include the package in a component scan:

<pre><code>package com.dearheart.gtsc.filters;

import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletResponse;

import org.springframework.context.annotation.Profile;
import org.springframework.stereotype.Component;

@Component
public class XClacksOverhead implements Filter {

 public static final String X_CLACKS_OVERHEAD = "X-Clacks-Overhead";

 @Override
 public void doFilter(ServletRequest req, ServletResponse res,
 FilterChain chain) throws IOException, ServletException {

 HttpServletResponse response = (HttpServletResponse) res;
 response.setHeader(X_CLACKS_OVERHEAD, "GNU Terry Pratchett");
 chain.doFilter(req, res);
 }

 @Override
 public void destroy() {}

 @Override
 public void init(FilterConfig arg0) throws ServletException {}

}
</code></pre>

blocks|key|201766|text|下面是我的自定义过滤器类的一个示例：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|201767|package+com.dawson.controller.filter;

import+org.springframework.stereotype.Component;
import+org.springframework.web.filter.GenericFilterBean;

import+javax.servlet.*;
import+javax.servlet.http.HttpServletRequest;
import+javax.servlet.http.HttpServletResponse;
import+java.io.IOException;


@Component
public+class+DawsonApiFilter+extends+GenericFilterBean+{

++++@Override
++++public+void+doFilter(ServletRequest+request,+ServletResponse+response,+FilterChain+chain)+throws+IOException,+ServletException+{
++++++++HttpServletRequest+req+=+(HttpServletRequest)+request;
++++++++if+(req.getHeader("x-dawson-nonce")+==+null+%7C%7C+req.getHeader("x-dawson-signature")+==+null)+{
++++++++++++HttpServletResponse+httpResponse+=+(HttpServletResponse)+response;
++++++++++++httpResponse.setContentType("application/json");
++++++++++++httpResponse.sendError(HttpServletResponse.SC_BAD_REQUEST,+"Required+headers+not+specified+in+the+request");
++++++++++++return;
++++++++}
++++++++chain.doFilter(request,+response);
++++}
}|code-block|syntax|javascript|201768|我将其添加到Spring+Boot配置中，将其添加到configuration类中，如下所示：|201769|package+com.dawson.configuration;

import+com.fasterxml.jackson.datatype.hibernate5.Hibernate5Module;
import+com.dawson.controller.filter.DawsonApiFilter;
import+org.springframework.beans.factory.annotation.Autowired;
import+org.springframework.boot.autoconfigure.SpringBootApplication;
import+org.springframework.boot.web.servlet.FilterRegistrationBean;
import+org.springframework.context.annotation.Bean;
import+org.springframework.http.converter.json.Jackson2ObjectMapperBuilder;

@SpringBootApplication
public+class+ApplicationConfiguration+{
++++@Bean
++++public+FilterRegistrationBean+dawsonApiFilter()+{
++++++++FilterRegistrationBean+registration+=+new+FilterRegistrationBean();
++++++++registration.setFilter(new+DawsonApiFilter());

++++++++//+In+case+you+want+the+filter+to+apply+to+specific+URL+patterns+only
++++++++registration.addUrlPatterns("/dawson/*");
++++++++return+registration;
++++}
}|201770|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Here is an example of my custom Filter class:
<pre><code>package com.dawson.controller.filter;

import org.springframework.stereotype.Component;
import org.springframework.web.filter.GenericFilterBean;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;


@Component
public class DawsonApiFilter extends GenericFilterBean {

 @Override
 public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
 HttpServletRequest req = (HttpServletRequest) request;
 if (req.getHeader(&quot;x-dawson-nonce&quot;) == null || req.getHeader(&quot;x-dawson-signature&quot;) == null) {
 HttpServletResponse httpResponse = (HttpServletResponse) response;
 httpResponse.setContentType(&quot;application/json&quot;);
 httpResponse.sendError(HttpServletResponse.SC_BAD_REQUEST, &quot;Required headers not specified in the request&quot;);
 return;
 }
 chain.doFilter(request, response);
 }
}
</code></pre>
And I added it to the Spring Boot configuration by adding it to Configuration class as follows:
<pre><code>package com.dawson.configuration;

import com.fasterxml.jackson.datatype.hibernate5.Hibernate5Module;
import com.dawson.controller.filter.DawsonApiFilter;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.http.converter.json.Jackson2ObjectMapperBuilder;

@SpringBootApplication
public class ApplicationConfiguration {
 @Bean
 public FilterRegistrationBean dawsonApiFilter() {
 FilterRegistrationBean registration = new FilterRegistrationBean();
 registration.setFilter(new DawsonApiFilter());

 // In case you want the filter to apply to specific URL patterns only
 registration.addUrlPatterns(&quot;/dawson/*&quot;);
 return registration;
 }
}
</code></pre>

blocks|key|201797|text|如果你使用Spring+Boot+%2B+Spring+Security，你可以在安全配置中这样做。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|201798|在下面的示例中，我在UsernamePasswordAuthenticationFilter+(参见all+the+default+Spring+Security+filters+and+their+order)之前添加了一个自定义过滤器。|offset|length|201799|@EnableWebSecurity
class+SecurityConfig+extends+WebSecurityConfigurerAdapter+{

++++@Autowired+FilterDependency+filterDependency;

++++@Override
++++protected+void+configure(HttpSecurity+http)+throws+Exception+{
++++++++http
++++++++++++.addFilterBefore(
++++++++++++++++new+MyFilter(filterDependency),
++++++++++++++++UsernamePasswordAuthenticationFilter.class);
++++}
}|code-block|syntax|javascript|201800|和filter类|201801|class+MyFilter+extends+OncePerRequestFilter++{
++++private+final+FilterDependency+filterDependency;

++++public+MyFilter(FilterDependency+filterDependency)+{
++++++++this.filterDependency+=+filterDependency;
++++}

++++@Override
++++protected+void+doFilterInternal(HttpServletRequest+request,
++++++++HttpServletResponse+response,
++++++++FilterChain+filterChain)
++++++++throws+ServletException,+IOException+{

++++++++//+Filter
++++++++filterChain.doFilter(request,+response);
++++}
}|201802|entityMap|0|LINK|mutability|MUTABLE|url|https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/#filter-ordering^0|0|1E|1J|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@]|9|@$D|Y|E|Z|1|10]]|A|$]]|$1|F|3|G|5|H|7|11|8|@]|9|@]|A|$I|J]]|$1|K|3|L|5|6|7|12|8|@]|9|@]|A|$]]|$1|M|3|N|5|H|7|13|8|@]|9|@]|A|$I|J]]|$1|O|3|-4|5|6|7|14|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]]]

If you use Spring Boot + Spring Security, you can do that in the security configuration.
In the below example, I'm adding a custom filter before the UsernamePasswordAuthenticationFilter (see <a href="https://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/#filter-ordering" rel="nofollow noreferrer">all the default Spring Security filters and their order</a>).

<pre><code>@EnableWebSecurity
class SecurityConfig extends WebSecurityConfigurerAdapter {

 @Autowired FilterDependency filterDependency;

 @Override
 protected void configure(HttpSecurity http) throws Exception {
 http
 .addFilterBefore(
 new MyFilter(filterDependency),
 UsernamePasswordAuthenticationFilter.class);
 }
}
</code></pre>
And the filter class

<pre><code>class MyFilter extends OncePerRequestFilter {
 private final FilterDependency filterDependency;

 public MyFilter(FilterDependency filterDependency) {
 this.filterDependency = filterDependency;
 }

 @Override
 protected void doFilterInternal(HttpServletRequest request,
 HttpServletResponse response,
 FilterChain filterChain)
 throws ServletException, IOException {

 // Filter
 filterChain.doFilter(request, response);
 }
}
</code></pre>

blocks|key|4707605|text|您可以在实现javax.servlet.Filter的类上使用@WebFilter+javax.servlet.annotation.WebFilter：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4707606|@WebFilter(urlPatterns+=+"/*")
public+class+MyFilter+implements+Filter+{
}|code-block|syntax|javascript|4707607|然后使用@ServletComponentScan进行注册。|4707608|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

You can use @WebFilter javax.servlet.annotation.WebFilter on a class that implements javax.servlet.Filter:
<pre><code>@WebFilter(urlPatterns = &quot;/*&quot;)
public class MyFilter implements Filter {
}
</code></pre>
Then use @ServletComponentScan to register.

blocks|key|201850|text|使用@WebFilter注释，可以按如下方式完成：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|201851|@WebFilter(urlPatterns+=+{"/*"+})
public+class+AuthenticationFilter+implements+Filter{

++++private+static+Logger+logger+=+Logger.getLogger(AuthenticationFilter.class);

++++@Override
++++public+void+destroy()+{
++++++++//+TODO+Auto-generated+method+stub

++++}

++++@Override
++++public+void+doFilter(ServletRequest+arg0,+ServletResponse+response,+FilterChain+chain)
++++++++++++throws+IOException,+ServletException+{

+++++++++logger.info("checking+client+id+in+filter");
++++++++HttpServletRequest+request+=+(HttpServletRequest)+arg0;
++++++++String+clientId+=+request.getHeader("clientId");
++++++++if+(StringUtils.isNotEmpty(clientId))+{
++++++++++++chain.doFilter(request,+response);
++++++++}+else+{
++++++++++++logger.error("client+id+missing.");
++++++++}
++++}

++++@Override
++++public+void+init(FilterConfig+arg0)+throws+ServletException+{
++++++++//+TODO+Auto-generated+method+stub

++++}

}|code-block|syntax|javascript|201852|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Using the @WebFilter annotation, it can be done as follows:

<pre><code>@WebFilter(urlPatterns = {"/*" })
public class AuthenticationFilter implements Filter{

 private static Logger logger = Logger.getLogger(AuthenticationFilter.class);

 @Override
 public void destroy() {
 // TODO Auto-generated method stub

 }

 @Override
 public void doFilter(ServletRequest arg0, ServletResponse response, FilterChain chain)
 throws IOException, ServletException {

 logger.info("checking client id in filter");
 HttpServletRequest request = (HttpServletRequest) arg0;
 String clientId = request.getHeader("clientId");
 if (StringUtils.isNotEmpty(clientId)) {
 chain.doFilter(request, response);
 } else {
 logger.error("client id missing.");
 }
 }

 @Override
 public void init(FilterConfig arg0) throws ServletException {
 // TODO Auto-generated method stub

 }

}
</code></pre>

blocks|key|201901|text|过滤器通常在记录器文件中使用。它根据您在项目中使用的记录器的不同而不同。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|201902|让我为log4j2解释一下：|201903|<Filters>
++++
++++<ThresholdFilter+level="error"+onMatch="DENY"+onMismatch="NEUTRAL"/>

++++
++++<ThresholdFilter+level="debug"+onMatch="DENY"+onMismatch="NEUTRAL"+/>

++++
++++<ThresholdFilter+level="info"+onMatch="ACCEPT"+onMismatch="DENY"+/>
</Filters>|code-block|syntax|javascript|201904|过滤器用于限制数据，我使用阈值过滤器进一步限制流中的数据级别。我提到了可以在那里受到限制的级别。|201905|有关进一步的参考，请参阅log4j2+-+Log4J级别的级别顺序:+ALL+>+TRACE+>+DEBUG+>+INFO+>+WARN+>+ERROR+>+FATAL+>+OFF|201906|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Q|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|R|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|S|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

Filters are mostly used in logger files. It varies according to the logger you using in the project.
Let me explain for log4j2:
<pre><code>&lt;Filters&gt;
 &lt;!-- It prevents an error --&gt;
 &lt;ThresholdFilter level=&quot;error&quot; onMatch=&quot;DENY&quot; onMismatch=&quot;NEUTRAL&quot;/&gt;

 &lt;!-- It prevents debug --&gt;
 &lt;ThresholdFilter level=&quot;debug&quot; onMatch=&quot;DENY&quot; onMismatch=&quot;NEUTRAL&quot; /&gt;

 &lt;!-- It allows all levels except debug/trace --&gt;
 &lt;ThresholdFilter level=&quot;info&quot; onMatch=&quot;ACCEPT&quot; onMismatch=&quot;DENY&quot; /&gt;
&lt;/Filters&gt;
</code></pre>
Filters are used to restrict the data and I used the threshold filter further to restrict the levels of data in the flow. I mentioned the levels that can be restricted over there.
For your further reference, see the level order of log4j2 - Log4J Levels: ALL &gt; TRACE &gt; DEBUG &gt; INFO &gt; WARN &gt; ERROR &gt; FATAL &gt; OFF

blocks|key|4707703|text|您还可以通过使用@WebFilter并实现Filter来创建过滤器。这样就行了。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4707704|@Configuration
public+class+AppInConfig
{
++++@Bean
++++@Order(1)
++++public+FilterRegistrationBean+aiFilterRegistration()
++++{
++++++++FilterRegistrationBean+registration+=+new+FilterRegistrationBean();
++++++++registration.setFilter(new+TrackingFilter());
++++++++registration.addUrlPatterns("/**");
++++++++registration.setOrder(1);
++++++++return+registration;
++++}

++++@Bean(name+=+"TrackingFilter")
++++public+Filter+TrackingFilter()
++++{
++++++++return+new+TrackingFilter();
++++}
}|code-block|syntax|javascript|4707705|entityMap^0|8|A|L|6|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]|$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|R|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|S|8|@]|D|@]|E|$]]]|L|$]]

You can also make a filter by using <code>@WebFilter</code> and implementing <code>Filter</code>. It will do.
<pre><code>@Configuration
public class AppInConfig
{
 @Bean
 @Order(1)
 public FilterRegistrationBean aiFilterRegistration()
 {
 FilterRegistrationBean registration = new FilterRegistrationBean();
 registration.setFilter(new TrackingFilter());
 registration.addUrlPatterns(&quot;/**&quot;);
 registration.setOrder(1);
 return registration;
 }

 @Bean(name = &quot;TrackingFilter&quot;)
 public Filter TrackingFilter()
 {
 return new TrackingFilter();
 }
}
</code></pre>

blocks|key|4707762|text|首先，将@ServletComponentScan添加到您的SpringBootApplication类。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4707763|@ServletComponentScan
public+class+Application+{|code-block|syntax|javascript|4707764|其次，创建一个扩展filter或第三方Filter类的filter文件，并将@WebFilter添加到此文件中，如下所示：|4707765|@Order(1)+//optional
@WebFilter(filterName+=+"XXXFilter",+urlPatterns+=+"/*",
++++dispatcherTypes+=+{DispatcherType.REQUEST,+DispatcherType.FORWARD},
++++initParams+=+{@WebInitParam(name+=+"confPath",+value+=+"classpath:/xxx.xml")})
public+class+XXXFilter+extends+Filter{|4707766|entityMap^0|4|L|0|0|12|A|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|T|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|U|8|@$9|V|A|W|B|C]]|D|@]|E|$]]|$1|M|3|N|5|H|7|X|8|@]|D|@]|E|$I|J]]|$1|O|3|-4|5|6|7|Y|8|@]|D|@]|E|$]]]|P|$]]

First, add <code>@ServletComponentScan</code> to your SpringBootApplication class.

<pre><code>@ServletComponentScan
public class Application {
</code></pre>

Second, create a filter file extending Filter or third-party filter class and add <code>@WebFilter</code> to this file like this:

<pre><code>@Order(1) //optional
@WebFilter(filterName = "XXXFilter", urlPatterns = "/*",
 dispatcherTypes = {DispatcherType.REQUEST, DispatcherType.FORWARD},
 initParams = {@WebInitParam(name = "confPath", value = "classpath:/xxx.xml")})
public class XXXFilter extends Filter{
</code></pre>

blocks|key|4707803|text|我在这里看到了很多答案，但我没有尝试任何一个。我刚刚创建了过滤器，如以下代码所示。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4707804|import+org.springframework.context.annotation.Configuration;
import+javax.servlet.*;
import+javax.servlet.annotation.WebFilter;
import+java.io.IOException;

@WebFilter(urlPatterns+=+"/Admin")
@Configuration
public+class+AdminFilter+implements+Filter{
++++@Override
++++public+void+init(FilterConfig+filterConfig)+throws+ServletException+{

++++}

++++@Override
++++public+void+doFilter(ServletRequest+servletRequest,+ServletResponse++servletResponse,+FilterChain+filterChain)+throws+IOException,+ServletException++++++{
++++System.out.println("happened");

++++}

++++@Override
++++public+void+destroy()+{

++++}
}|code-block|syntax|javascript|4707805|我让剩下的Spring+Boot应用程序保持原样。|4707806|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

I saw a lot of answers here, but I didn't try any of them. I've just created the filter as in the following code.
<pre><code>import org.springframework.context.annotation.Configuration;
import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import java.io.IOException;

@WebFilter(urlPatterns = &quot;/Admin&quot;)
@Configuration
public class AdminFilter implements Filter{
 @Override
 public void init(FilterConfig filterConfig) throws ServletException {

 }

 @Override
 public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
 System.out.println(&quot;happened&quot;);

 }

 @Override
 public void destroy() {

 }
}
</code></pre>
And I left the remaining Spring Boot application as it was.

blocks|key|201999|text|使用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|202000|@WebFilter(urlPatterns="/*")
public+class+XSSFilter+implements+Filter+{

++++private+static+final+org.apache.log4j.Logger+LOGGER+=+LogManager.getLogger(XSSFilter.class);

++++@Override
++++public+void+init(FilterConfig+filterConfig)+throws+ServletException+{
++++++++LOGGER.info("Initiating+XSSFilter...+");
++++}

++++@Override
++++public+void+doFilter(ServletRequest+request,+ServletResponse+response,+FilterChain+chain)
++++++++++++throws+IOException,+ServletException+{
++++++++HttpServletRequest+req+=+(HttpServletRequest)+request;
++++++++HttpRequestWrapper+requestWrapper+=+new+HttpRequestWrapper(req);
++++++++chain.doFilter(requestWrapper,+response);
++++}

++++@Override
++++public+void+destroy()+{
++++++++LOGGER.info("Destroying+XSSFilter...+");
++++}

}|code-block|syntax|javascript|202001|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Use:

<pre class="lang-html prettyprint-override"><code>@WebFilter(urlPatterns=&quot;/*&quot;)
public class XSSFilter implements Filter {

 private static final org.apache.log4j.Logger LOGGER = LogManager.getLogger(XSSFilter.class);

 @Override
 public void init(FilterConfig filterConfig) throws ServletException {
 LOGGER.info(&quot;Initiating XSSFilter... &quot;);
 }

 @Override
 public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
 throws IOException, ServletException {
 HttpServletRequest req = (HttpServletRequest) request;
 HttpRequestWrapper requestWrapper = new HttpRequestWrapper(req);
 chain.doFilter(requestWrapper, response);
 }

 @Override
 public void destroy() {
 LOGGER.info(&quot;Destroying XSSFilter... &quot;);
 }

}
</code></pre>

blocks|key|202029|text|此过滤器还将帮助您允许跨域访问|type|unstyled|depth|inlineStyleRanges|entityRanges|data|202030|@Component
@Order(Ordered.HIGHEST_PRECEDENCE)
public+class+SimpleCORSFilter+implements+Filter+{

++++public+void+doFilter(ServletRequest+req,+ServletResponse+res,+FilterChain+chain)+throws+IOException,+ServletException+{

++++++++++++HttpServletResponse+response+=+(HttpServletResponse)+res;
++++++++++++HttpServletRequest+request+=+(HttpServletRequest)+req;
++++++++++++response.setHeader("Access-Control-Allow-Origin",+"*");
++++++++++++response.setHeader("Access-Control-Allow-Methods",+"POST,+GET,+OPTIONS,+DELETE");
++++++++++++response.setHeader("Access-Control-Max-Age",+"20000");
++++++++++++response.setHeader("Access-Control-Allow-Headers",+"x-requested-with,+authorization,+Content-Type,+Authorization,+credential,+X-XSRF-TOKEN");

++++++++++++if("OPTIONS".equalsIgnoreCase(request.getMethod()))+{
++++++++++++++++response.setStatus(HttpServletResponse.SC_OK);
++++++++++++}+else+{
++++++++++++++++chain.doFilter(req,+res);
++++++++++++}
++++}


++++public+void+destroy()+{}

++++@Override
++++public+void+init(FilterConfig+arg0)+throws+ServletException+{
++++++++//+TODO+Auto-generated+method+stub

++++}

}|code-block|syntax|javascript|202031|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

This filter will also help you to allow cross origin access

<pre><code>@Component
@Order(Ordered.HIGHEST_PRECEDENCE)
public class SimpleCORSFilter implements Filter {

 public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {

 HttpServletResponse response = (HttpServletResponse) res;
 HttpServletRequest request = (HttpServletRequest) req;
 response.setHeader("Access-Control-Allow-Origin", "*");
 response.setHeader("Access-Control-Allow-Methods", "POST, GET, OPTIONS, DELETE");
 response.setHeader("Access-Control-Max-Age", "20000");
 response.setHeader("Access-Control-Allow-Headers", "x-requested-with, authorization, Content-Type, Authorization, credential, X-XSRF-TOKEN");

 if("OPTIONS".equalsIgnoreCase(request.getMethod())) {
 response.setStatus(HttpServletResponse.SC_OK);
 } else {
 chain.doFilter(req, res);
 }
 }


 public void destroy() {}

 @Override
 public void init(FilterConfig arg0) throws ServletException {
 // TODO Auto-generated method stub

 }

}
</code></pre>

blocks|key|4707881|text|对于我所做过的任何配置类中的Spring+Boot：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4707882|@Bean
public+OncePerRequestFilter+myFilter()+{
++++return+new+OncePerRequestFilter()+{
++++++++@Override
++++++++protected+void+doFilterInternal(HttpServletRequest+request,+HttpServletResponse+response,+FilterChain+filterChain)+throws+ServletException,+IOException+{
++++++++++++AuthUser+authUser+=+SecurityUtil.safeGet();+//+applied+after+secutiry+filters
++++++++++++...
++++++++++++filterChain.doFilter(request,+response);
++++++++}
++++};
}|code-block|syntax|javascript|4707883|仅此而已，不需要任何注册。另请参阅What+is+OncePerRequestFilter?|offset|length|4707884|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/13152946/what-is-onceperrequestfilter^0|0|0|H|T|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@$I|V|J|W|1|X]]|A|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

For Spring Boot in any configuration class I've done:
<pre><code>@Bean
public OncePerRequestFilter myFilter() {
 return new OncePerRequestFilter() {
 @Override
 protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
 AuthUser authUser = SecurityUtil.safeGet(); // applied after secutiry filters
 ...
 filterChain.doFilter(request, response);
 }
 };
}
</code></pre>
That's all, no any registration needed. See also <a href="https://stackoverflow.com/questions/13152946/what-is-onceperrequestfilter">What is OncePerRequestFilter?</a>

Is there any annotation for a <code>Filter</code> class (for web applications) in Spring Boot? Perhaps <code>@Filter</code>?
I want to add a custom filter in my project.
<a href="http://docs.spring.io/spring-boot/docs/current-SNAPSHOT/reference/htmlsingle/" rel="noreferrer">The Spring Boot Reference Guide</a> mentioned about
<code>FilterRegistrationBean</code>, but I am not sure how to use it.

How can I add a filter class in Spring Boot?

Spring Boot

Spring Boot中是否有针对Filter类(用于web应用程序)的注释？也许是@Filter我想在我的项目中添加一个自定义过滤器。提到了FilterRegistrationBean，但我不确定如何使用它。

问如何在Spring Boot中添加过滤器类？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Spring Boot中添加过滤器类？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Spring Boot中添加过滤器类？
EN