public enum AuthorityType {

  // 登錄和權(quán)限都驗證 默認(rèn)
  Validate,

  // 不驗證
  NoValidate,

  // 不驗證權(quán)限
  NoAuthority;
}

import java.lang.annotation.Documented;
import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;

@Retention(RetentionPolicy.RUNTIME) 
@Target(ElementType.METHOD)
@Documented
public @interface Authority { 
  // 默認(rèn)驗證
  AuthorityType value() default AuthorityType.Validate;

} 

/**
 * 權(quán)限認(rèn)證攔截器
 *
 */
public class AuthorityAnnotationInterceptor extends HandlerInterceptorAdapter {
  @Override
  public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
    throws Exception {

  if (handler instanceof HandlerMethod) {
    HandlerMethod hm = (HandlerMethod) handler;

    Class<?> clazz = hm.getBeanType();
    Method m = hm.getMethod();
    try {
      if (clazz != null && m != null) {
        boolean isClzAnnotation = clazz.isAnnotationPresent(Authority.class);
        boolean isMethondAnnotation = m.isAnnotationPresent(Authority.class);
        Authority authority = null;
        // 如果方法和類聲明中同時存在這個注解，那么方法中的會覆蓋類中的設(shè)定。
        if (isMethondAnnotation) {
          authority = m.getAnnotation(Authority.class);
        } else if (isClzAnnotation) {
          authority = clazz.getAnnotation(Authority.class);
        }
        int code = -1;
        String msg = "";
        if (authority != null) {
          if (AuthorityType.NoValidate == authority.value()) {
            // 標(biāo)記為不驗證,放行
            return true;
          } else if (AuthorityType.NoAuthority == authority.value()) {
            // 不驗證權(quán)限，驗證是否登錄
            // TODO:
            return true;
          } else {
            // 驗證登錄及權(quán)限
            // TODO:

            code = 1;
            msg = "驗證成功！";
            return true;
          }
        }

        // //跳轉(zhuǎn)
        // String url = "";
        // response.getWriter().write("<script>top.location.href='"
        // + url + "'</script>");
        // return false;

        // 未通過驗證，返回提示json
        Map<String, Object> responseMap = new HashMap<String, Object>();
        responseMap.put("code", code);
        responseMap.put("msg", msg);
        responseMap.put("params", "");
        responseMap.put("rows", "");
        String json = new Gson().toJson(responseMap);
        response.setCharacterEncoding("UTF-8");
        response.setContentType("application/json; charset=utf-8");
        response.getWriter().write(json);
        return false;
      }
    } catch (Exception e) {
    }
  }
  return false;
  }  
}

<mvc:interceptors>
  <!-- 權(quán)限認(rèn)證攔截器 -->
  <mvc:interceptor>
    <mvc:mapping path="/**"/>
    <bean class="cn.mayongfa.interceptor.AuthorityAnnotationInterceptor"></bean>
  </mvc:interceptor>
</mvc:interceptors>