自定义注解实现拦截sql.rar

package com.example.mybatis_plus_demo.config; import com.baomidou.mybatisplus.core.toolkit.StringUtils; import com.example.mybatis_plus_demo.annotations.AuthMapper; import net.sf.jsqlparser.JSQLParserException; import net.sf.jsqlparser.expression.Expression; import net.sf.jsqlparser.parser.CCJSqlParserUtil; import net.sf.jsqlparser.statement.select.PlainSelect; import net.sf.jsqlparser.statement.select.Select; import net.sf.jsqlparser.statement.select.SelectBody; import org.apache.ibatis.cache.CacheKey; import org.apache.ibatis.executor.Executor; import org.apache.ibatis.mapping.BoundSql; import org.apache.ibatis.mapping.MappedStatement; import org.apache.ibatis.mapping.SqlCommandType; import org.apache.ibatis.mapping.SqlSource; import org.apache.ibatis.plugin.*; import org.apache.ibatis.reflection.DefaultReflectorFactory; import org.apache.ibatis.reflection.MetaObject; import org.apache.ibatis.reflection.factory.DefaultObjectFactory; import org.apache.ibatis.reflection.wrapper.DefaultObjectWrapperFactory; import org.apache.ibatis.session.ResultHandler; import org.apache.ibatis.session.RowBounds; import org.springframework.stereotype.Component; import java.lang.reflect.InvocationTargetException; import java.lang.reflect.Method; import java.sql.SQLException; import java.util.Properties; /** * @author ：dzp * @date ：Created in 2021/8/12 17:18 * @description：拦截select请求 并判断是否是自定义注解 如果是的话 就进行权限sql的修改。 * 1.Executor：拦截执行器的方法。 * 2.ParameterHandler：拦截参数的处理。 * 3.ResultHandler：拦截结果集的处理。 * 4.StatementHandler：拦截Sql语法构建的处理。 * * 该拦截器的作用是拦截执行的sql 进行更改 加入关联对应的通道信息权限的sql。 * */ @Component @Intercepts({ @Signature( type= Executor.class, method = "query", args = {MappedStatement.class,Object.class , RowBounds.class, ResultHandler.class, CacheKey.class, BoundSql.class})}) public class SqlReplaceInterceptor implements Interceptor { @Override public Object intercept(Invocation invocation) throws Throwable { return getSqlByInvocation(invocation); } /** * 获取sql语句 * @param invocation * @return */ private Object getSqlByInvocation(Invocation invocation) throws InvocationTargetException, IllegalAccessException, ClassNotFoundException { final Object[] args = invocation.getArgs(); MappedStatement ms = (MappedStatement) args[0]; SqlCommandType sqlCommandType = ms.getSqlCommandType(); Object parameterObject = args[1]; BoundSql boundSql = ms.getBoundSql(parameterObject); String sql = boundSql.getSql(); if (StringUtils.isBlank(sql)) { return invocation.proceed(); } try { //todo 这里可以获取到用户id的信息 进行切面 resetSql2Invocation(invocation, boundSql.getSql() , 1); }catch (Exception e) { // 没有获取到用户消息 } return invocation.proceed(); } /** * 包装sql后，重置到invocation中 * @param invocation * @param sql * @throws SQLException */ private void resetSql2Invocation(Invocation invocation, String sql,Integer id) throws ClassNotFoundException { final Object[] args = invocation.getArgs(); MappedStatement statement = (MappedStatement) args[0]; Object parameterObject = args[1]; BoundSql boundSql = statement.getBoundSql(parameterObject); Class<?> classType = Class.forName(statement.getId().substring(0, statement.getId().lastIndexOf("."))); String mName = statement.getId().substring(statement.getId().lastIndexOf(".") + 1); for (Method method : classType.getDeclaredMethods()) { //判断是否包含AuthMapper注解(自定义的注解) if (method.isAnnotationPresent(AuthMapper.class) && mName.equals(method.getName())) { MappedStatement newStatement = newMappedStatement(statement, new BoundSqlSqlSource(boundSql)); //MeatObject是Mybatis的工具类，通过MetaObject获取和设置对象的属性值 MetaObject msObject = MetaObject.forObject(newStatement, new DefaultObjectFactory(), new DefaultObjectWrapperFactory(),new DefaultReflectorFactory()); Select select; try { select = (Select) CCJSqlParserUtil.parse(sql); SelectBody selectBody = select.getSelectBody(); if(selectBody instanceof PlainSelect) { PlainSelect plainSelect = (PlainSelect) selectBody; //获取之前的条件 Expression oldWhere = plainSelect.getWhere(); Expression where=CCJSqlParserUtil.parseCondExpression( String.format(CustomConstantSql.SQL_AUTH, id)); if(oldWhere != null) { where = CCJSqlParserUtil.parseCondExpression(oldWhere.toString() + " and " + String.format(CustomConstantSql.SQL_AUTH, id)); } //重新设置where 条件 plainSelect.setWhere(where); msObject.setValue("sqlSource.boundSql.sql", select.toString()); } } catch (JSQLParserException e) { // 如果上述出现异常 就用原来的sql msObject.setValue("sqlSource.boundSql.sql", sql); } args[0] = newStatement; // 这里需要注意 [0]变了还是执行原来的sql 需要这个 更改args[5]的 args[5]=newStatement.getBoundSql(parameterObject); break; } } } /** * 创建一个新的MappedStatement * newMappedStatement * @param ms * @param newSqlSource * @return */ private MappedStatement newMappedStatement(MappedStatement ms, SqlSource newSqlSource) { MappedStatement.Builder builder = new MappedStatement.Builder(ms.getConfiguration(), ms.getId(), newSqlSource, ms.getSqlCommandType()); builder.resource(ms.getResource()); builder.fetchSize(ms.getFetchSize()); builder.statementType(ms.getStatementType()); builder.keyGenerator(ms.getKeyGenerator()); if (ms.getKeyProperties() != null && ms.getKeyProperties().length != 0) { StringBuilder keyProperties = new StringBuilder(); for (String keyProperty : ms.getKeyProperties()) { keyProperties.append(keyProperty).append(","); } keyProperties.delete(keyProperties.length() - 1, keyProperties.length()); builder.keyProperty(keyProperties.toString()); } builder.timeout(ms.getTimeout()); builder.parameterMap(ms.getParameterMap()); builder.resultMaps(ms.getResultMaps()); builder.resultSetType(ms.getResultSetType()); builder.cache(ms.getCache()); builder.flushCacheRequired(ms.isFlushCacheRequired()); builder.useCache(ms.isUseCache()); return builder.build(); } class BoundSqlSqlSource implements SqlSource { private BoundSql boundSql; public BoundSqlSqlSource(BoundSql boundSql) { this.boundSql = boundSql; } @Override public BoundSql getBoundSql(Object parameterObject) { return boundSql; } } @Override public Object plugin(Object target) { return Plugin.wrap(targ