import cn.erika.demo.common.model.vo.Message;
import com.alibaba.fastjson.JSON;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.subject.Subject;
import org.apache.shiro.web.servlet.AdviceFilter;

import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * Ajax請(qǐng)求處理 用于前后臺(tái)分離的場(chǎng)景
 */
public class AjaxFilter extends AdviceFilter {
  @Override
  protected boolean preHandle(ServletRequest request, ServletResponse response) throws Exception {
    // 先判斷是不是ajax請(qǐng)求 ajax請(qǐng)求都會(huì)自帶一個(gè)請(qǐng)求頭X-Requested-With
    // 如果有值而且是XMLHttpRequest那就可以確定是個(gè)ajax請(qǐng)求 返回json數(shù)據(jù)就行
    HttpServletRequest req = (HttpServletRequest) request;

    if ("XMLHttpRequest".equals(req.getHeader("X-Requested-With"))) {
      // 獲取到當(dāng)前的登錄對(duì)象 如果是沒(méi)有經(jīng)過(guò)認(rèn)證的用戶就獲取不到認(rèn)證信息
      Subject subject = SecurityUtils.getSubject();

      if (subject.getPrincipal() == null) {
        HttpServletResponse resp = (HttpServletResponse) response;

        // 設(shè)置響應(yīng)類型和編碼字符 不然中文亂碼
        resp.setContentType("application/json;charset=utf-8");
        resp.setCharacterEncoding("UTF-8");

        // Message是我寫(xiě)的一個(gè)包裝類,用來(lái)向前臺(tái)返回?cái)?shù)據(jù)
        resp.getWriter().write(JSON.toJSONString(Message.failed("請(qǐng)登錄后操作")));
        return false;
      } else {
        // 經(jīng)過(guò)認(rèn)證的話就放過(guò)去 讓下一個(gè)過(guò)濾器處理
        return true;
      }
    } else {
      // 不是ajax請(qǐng)求的話也放過(guò)去 讓下一個(gè)過(guò)濾器處理
      return true;
    }
  }
}

@Bean(name = "shiroFilter")
public ShiroFilterFactoryBean shiroFilterFactoryBean(SecurityManager securityManager) {
  ShiroFilterFactoryBean factoryBean = new ShiroFilterFactoryBean();
  factoryBean.setSecurityManager(securityManager);
  // 設(shè)置登錄界面URL
  factoryBean.setLoginUrl(loginUrl);
  // 設(shè)置未經(jīng)認(rèn)證頁(yè)面的URL
  factoryBean.setUnauthorizedUrl(unauthorizedUrl);

  // 這里是設(shè)置過(guò)濾器
  // 要注意 如果你沒(méi)寫(xiě)的話默認(rèn)是有一個(gè)FormAuthenticationFilter
  // 如果你手動(dòng)設(shè)置了過(guò)濾器會(huì)覆蓋掉默認(rèn)設(shè)置
  // 在這里加上就好了
  HashMap<String, Filter> filter = new HashMap<>();
  filter.put("authc", new AjaxFilter());
  filter.put("authc", new FormAuthenticationFilter());
  factoryBean.setFilters(filter);

  // 需要認(rèn)證的加到authc里面
  // 不需要認(rèn)證的加到anon里面
  HashMap<String, String> filterChain = new HashMap<>();
  filterChain.put("/favicon.ico", "anon");
  filterChain.put("/login", "anon");
  filterChain.put("/logout", "logout");
  filterChain.put("/**", "authc");
  factoryBean.setFilterChainDefinitionMap(filterChain);

  return factoryBean;
}