PermissionHelper

Author: coderElijah

ReadMe.md

@@ -0,0 +1 @@
+项目利用mybatis拦截器原理，实现基于threadlocal的sql条件拼接

pom.xml

@@ -0,0 +1,68 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <parent>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-starter-parent</artifactId>
+        <version>2.2.2.RELEASE</version>
+        <relativePath/> <!-- lookup parent from repository -->
+    </parent>
+    <groupId>com.elijah</groupId>
+    <artifactId>permissionhelper</artifactId>
+    <version>0.0.1-SNAPSHOT</version>
+    <name>permissionhelper</name>
+    <description>Demo project for Spring Boot</description>
+
+    <properties>
+        <java.version>1.8</java.version>
+    </properties>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.mybatis.spring.boot</groupId>
+            <artifactId>mybatis-spring-boot-starter</artifactId>
+            <version>2.1.1</version>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-jdbc</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>mysql</groupId>
+            <artifactId>mysql-connector-java</artifactId>
+            <scope>runtime</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.projectlombok</groupId>
+            <artifactId>lombok</artifactId>
+            <optional>true</optional>
+        </dependency>
+        <dependency>
+            <groupId>com.github.jsqlparser</groupId>
+            <artifactId>jsqlparser</artifactId>
+            <version>3.1</version>
+        </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-test</artifactId>
+            <scope>test</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.junit.vintage</groupId>
+                    <artifactId>junit-vintage-engine</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.springframework.boot</groupId>
+                <artifactId>spring-boot-maven-plugin</artifactId>
+            </plugin>
+        </plugins>
+    </build>
+
+</project>

src/main/java/com/elijah/permissionhelper/EhrNewbornDao.java

@@ -0,0 +1,24 @@
+package com.elijah.permissionhelper;
+
+import org.apache.ibatis.annotations.Mapper;
+import org.apache.ibatis.annotations.Select;
+import org.mybatis.spring.annotation.MapperScan;
+
+import java.util.Map;
+
+/**
+ * Description:
+ *
+ * @author elijahliu
+ * @Note Talk is cheap,just show me ur code.- -!
+ * ProjectName:permissionhelper
+ * PackageName: com.elijah.permissionhelper
+ * Date: 2019/12/9 11:13
+ */
+@Mapper
+public interface EhrNewbornDao {
+
+    @Select("select * from ehr_newborn a ,ehr_newborn_result b where a.sampleid=b.sampleid and a.enable=1 limit 1;")
+    Map selectOne();
+
+}

src/main/java/com/elijah/permissionhelper/PermissionHelper.java

@@ -0,0 +1,35 @@
+package com.elijah.permissionhelper;
+
+import java.security.Permission;
+
+/**
+ * Description:
+ *
+ * @author elijahliu
+ * @Note Talk is cheap,just show me ur code.- -!
+ * ProjectName:permissionhelper
+ * PackageName: com.elijah.permissionhelper
+ * Date: 2019/12/9 15:36
+ */
+public class PermissionHelper {
+    private static final ThreadLocal<PermissionObject> permissionObjectThreadLocal = new ThreadLocal<>();
+
+    public static void doPermissionCheck(Object permissionKey,Object permissionValue){
+        PermissionObject permissionObject = new PermissionObject();
+        permissionObject.setPermissionKey(permissionKey);
+        permissionObject.setPermissionValue(permissionValue);
+        permissionObject.setPermission(Boolean.TRUE);
+        permissionObjectThreadLocal.set(permissionObject);
+    }
+
+    public static PermissionObject getLocalPermission() {
+        if (permissionObjectThreadLocal.get() == null) {
+            permissionObjectThreadLocal.set(new PermissionObject());
+        }
+        return permissionObjectThreadLocal.get();
+    }
+    public static void reset(){
+        permissionObjectThreadLocal.set(null);
+    }
+
+}

src/main/java/com/elijah/permissionhelper/PermissionInterceptor.java

@@ -0,0 +1,90 @@
+package com.elijah.permissionhelper;
+
+import net.sf.jsqlparser.expression.Expression;
+import net.sf.jsqlparser.expression.StringValue;
+import net.sf.jsqlparser.expression.WhenClause;
+import net.sf.jsqlparser.expression.operators.arithmetic.Addition;
+import net.sf.jsqlparser.expression.operators.conditional.AndExpression;
+import net.sf.jsqlparser.expression.operators.relational.EqualsTo;
+import net.sf.jsqlparser.parser.CCJSqlParserUtil;
+import net.sf.jsqlparser.schema.Column;
+import net.sf.jsqlparser.statement.select.PlainSelect;
+import net.sf.jsqlparser.statement.select.Select;
+import net.sf.jsqlparser.util.SelectUtils;
+import org.apache.ibatis.executor.statement.StatementHandler;
+import org.apache.ibatis.mapping.MappedStatement;
+import org.apache.ibatis.plugin.*;
+import org.apache.ibatis.reflection.MetaObject;
+import org.apache.ibatis.reflection.SystemMetaObject;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.stereotype.Component;
+
+import java.sql.Connection;
+import java.util.Properties;
+
+/**
+ * Description:
+ *
+ * @author elijahliu
+ * @Note Talk is cheap,just show me ur code.- -!
+ * ProjectName:permissionhelper
+ * PackageName: com.elijah.permissionhelper
+ * Date: 2019/12/9 12:21
+ */
+@Component
+@Intercepts({@Signature(type = StatementHandler.class, method = "prepare", args = {Connection.class, Integer.class})})
+public class PermissionInterceptor implements Interceptor {
+    private static final Logger logger = LoggerFactory.getLogger(PermissionInterceptor.class);
+
+    @Override
+    public Object intercept(Invocation invocation) throws Throwable {
+        PermissionObject permissionObject = PermissionHelper.getLocalPermission();
+        if (!permissionObject.getPermission()) {
+            logger.info("current thread no need to check permission thread:{} permission:{}", Thread.currentThread().getName(), permissionObject);
+            return invocation.proceed();
+        } else {
+            PermissionHelper.reset();
+        }
+        StatementHandler statementHandler = (StatementHandler) invocation.getTarget();
+        MetaObject metaObject = SystemMetaObject.forObject(statementHandler);
+        String sql = (String) metaObject.getValue("delegate.boundSql.sql");
+        Select select = (Select) CCJSqlParserUtil.parse(sql);
+        PlainSelect selectBody = (PlainSelect) select.getSelectBody();
+        Expression whereExpression = selectBody.getWhere();
+        StringBuilder tableName;
+        Boolean hasTableAlias = Boolean.FALSE;
+        if (selectBody.getFromItem().getAlias() != null) {
+            hasTableAlias = Boolean.TRUE;
+            tableName = new StringBuilder(selectBody.getFromItem().getAlias().getName());
+        } else {
+            tableName = new StringBuilder(selectBody.getFromItem().toString());
+        }
+        EqualsTo equalsTo = new EqualsTo();
+        if (hasTableAlias) {
+            equalsTo.setLeftExpression(new Column(tableName.append(".").append(permissionObject.getPermissionKey()).toString()));
+        } else {
+            equalsTo.setLeftExpression(new Column(permissionObject.getPermissionKey().toString()));
+        }
+        equalsTo.setRightExpression(new StringValue(permissionObject.getPermissionValue().toString()));
+        if (whereExpression != null) {
+            AndExpression andExpression = new AndExpression(whereExpression, equalsTo);
+            whereExpression = andExpression;
+        } else {
+            whereExpression = equalsTo;
+        }
+        selectBody.setWhere(whereExpression);
+        metaObject.setValue("delegate.boundSql.sql", select.toString());
+        return invocation.proceed();
+    }
+
+    @Override
+    public Object plugin(Object target) {
+        return Plugin.wrap(target, this);
+    }
+
+    @Override
+    public void setProperties(Properties properties) {
+
+    }
+}

src/main/java/com/elijah/permissionhelper/PermissionObject.java

@@ -0,0 +1,45 @@
+package com.elijah.permissionhelper;
+
+/**
+ * Description:
+ *
+ * @author elijahliu
+ * @Note Talk is cheap,just show me ur code.- -!
+ * ProjectName:permissionhelper
+ * PackageName: com.elijah.permissionhelper
+ * Date: 2019/12/9 15:39
+ */
+public class PermissionObject {
+    public PermissionObject(){
+        this.isPermission = Boolean.FALSE;
+        this.permissionKey = null;
+        this.permissionValue = null;
+    }
+    private Object permissionKey;
+    private Object permissionValue;
+    private Boolean isPermission;
+
+    public Object getPermissionKey() {
+        return permissionKey;
+    }
+
+    public void setPermissionKey(Object permissionKey) {
+        this.permissionKey = permissionKey;
+    }
+
+    public Object getPermissionValue() {
+        return permissionValue;
+    }
+
+    public void setPermissionValue(Object permissionValue) {
+        this.permissionValue = permissionValue;
+    }
+
+    public Boolean getPermission() {
+        return isPermission;
+    }
+
+    public void setPermission(Boolean permission) {
+        isPermission = permission;
+    }
+}

src/main/java/com/elijah/permissionhelper/PermissionhelperApplication.java

@@ -0,0 +1,13 @@
+package com.elijah.permissionhelper;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+public class PermissionhelperApplication {
+
+    public static void main(String[] args) {
+        SpringApplication.run(PermissionhelperApplication.class, args);
+    }
+
+}

src/main/resources/application.yml

@@ -0,0 +1,12 @@
+spring:
+  datasource:
+    url: jdbc:mysql://172.16.10.23:3306/acme?characterEncoding=UTF-8&autoReconnect=true&zeroDateTimeBehavior=convertToNull&useUnicode=true&allowMultiQueries=true
+    driver-class-name: com.mysql.jdbc.Driver
+    username: root
+    password: biosan#17
+
+logging:
+  com:
+    elijah:
+      permissionhelper:
+        level: debug

src/test/java/com/elijah/permissionhelper/PermissionhelperApplicationTests.java

@@ -0,0 +1,41 @@
+package com.elijah.permissionhelper;
+
+import org.junit.jupiter.api.Test;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+
+import java.util.Map;
+import java.util.concurrent.Callable;
+import java.util.concurrent.ExecutionException;
+import java.util.concurrent.FutureTask;
+
+@SpringBootTest
+class PermissionhelperApplicationTests {
+
+    private static final Logger logger = LoggerFactory.getLogger(PermissionhelperApplicationTests.class);
+    @Autowired
+    EhrNewbornDao ehrNewbornDao;
+
+
+    @Test
+    void contextLoads() {
+    }
+
+    @Test
+    public void testSelectOne() throws ExecutionException, InterruptedException {
+        FutureTask futureTask1 = new FutureTask(() -> {
+            PermissionHelper.doPermissionCheck("centerid","bb717701-10de-47ee-b49e-693261c6df22");
+            logger.info("frist time invoke:{}",ehrNewbornDao.selectOne().toString());
+            logger.info("second time invoke:{}",ehrNewbornDao.selectOne().toString());
+            return null;
+        });
+        FutureTask<Map> futureTask2 = new FutureTask(() -> ehrNewbornDao.selectOne());
+        new Thread(futureTask1).start();
+        new Thread(futureTask2).start();
+        Object res1 = futureTask1.get();
+        Object res2 = futureTask2.get();
+        logger.info("res1:{}\nres2:{}", res1, res2);
+    }
+}