快捷導(dǎo)航

修改request請求的header請求頭實(shí)現(xiàn)方式

更新時(shí)間：2026年04月28日 09:54:27 作者：我真的不吃辣條

本文介紹了在Spring Cloud Gateway中修改HTTP請求頭的方法,包括直接操作ServerHttpRequest對(duì)象和創(chuàng)建自定義Request請求包裝類兩種方式,此方法可用于替換Authorization請求頭中的token

問題和場景

默認(rèn)http傳輸不能中途修改http內(nèi)容，但是有很多時(shí)候都需要去修改請求頭信息來達(dá)到某些目的，比如我這個(gè)情況：

我需要去修改Authorization請求頭來替換token，我在網(wǎng)上看了好多博客都是HttpServletRequest類的或者是想用反射解決，但是我這里（ServerHttpRequest）并不適用，于是我去求助大佬后得出2個(gè)解決方案，并且ServerHttpRequest和HttpServletRequest都適用。

如果直接set值會(huì)有如下問題：

java.lang.UnsupportedOperationException:null;

at org.springframework.http.ReadOnlyHttpHeaders.set：

解決（ServerHttpRequest）

方案一直接開放權(quán)限

這個(gè)方法主要是為了兼容以前的代碼，因?yàn)檫@個(gè)header到其他方法里面還會(huì)改所以我改了header對(duì)象

 //設(shè)置為可修改的
headers= HttpHeaders.writableHttpHeaders(headers);
//設(shè)置請求頭
headers.set(HttpHeaders.AUTHORIZATION,authorization);

方案二去修改header

這個(gè)是等于重新build對(duì)象，貌似更方便

exchange.getRequest().mutate().header(HttpHeaders.AUTHORIZATION,authorization).build();

上面2種方法都可以實(shí)現(xiàn)這個(gè)效果

修改請求前：

修改請求后：

完整代碼如下：

package org.dromara.soul.bootstrap.filter;

import com.alibaba.nacos.client.utils.StringUtils;
import org.dromara.soul.bootstrap.template.RedisStrTemplate;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.core.annotation.Order;
import org.springframework.http.HttpHeaders;
import org.springframework.http.HttpMethod;
import org.springframework.http.HttpStatus;
import org.springframework.http.server.reactive.ServerHttpRequest;
import org.springframework.stereotype.Component;
import org.springframework.web.server.ServerWebExchange;
import org.springframework.web.server.WebFilter;
import org.springframework.web.server.WebFilterChain;
import reactor.core.publisher.Mono;
import reactor.util.annotation.Nullable;

import javax.xml.soap.MimeHeaders;
import java.lang.reflect.Field;
import java.util.List;

/**
 * @Auther: whhh
 * @Date: 2021/4/1 10:46
 * @Description: token替換
 */

@Order(-98)
@Component
public class GetTokenFilter implements WebFilter {

    @Autowired
    private RedisStrTemplate redisStrTemplate;

    @Override
    public Mono<Void> filter(@Nullable final ServerWebExchange exchange, @Nullable final WebFilterChain chain) {
        ServerHttpRequest request = exchange.getRequest();
        //判斷是否包含認(rèn)證頭
        if (request.getHeaders().containsKey(HttpHeaders.AUTHORIZATION)) {
            HttpHeaders headers = request.getHeaders();
            //獲取認(rèn)證集合
            List<String> keys = headers.get(HttpHeaders.AUTHORIZATION);
            if (keys != null) {
                //多個(gè)認(rèn)證取第一個(gè)不為空的
                for (String token : keys) {
                    if (token != null && !token.equals("")) {
                        //從Redis獲取token
                        String a = (String) redisStrTemplate.get(token);
                        String authorization = a.substring(1,a.length()-1);//
                        //方法一 設(shè)置為可修改的
                        headers= HttpHeaders.writableHttpHeaders(headers);
                        //設(shè)置請求頭
                        headers.set(HttpHeaders.AUTHORIZATION,authorization);



                        //方法二 bulid
//                        exchange.getRequest().mutate().header(HttpHeaders.AUTHORIZATION,authorization).build();

                        if (request.getMethod() == HttpMethod.OPTIONS) {
                            exchange.getResponse().setStatusCode(HttpStatus.OK);
                            return Mono.empty();
                        }

                    }

                }
            }
        }
        return chain.filter(exchange);
    }



}

PS：我這個(gè)filter是soul網(wǎng)關(guān)(shenyu)的哦，可能chain有區(qū)別，你可以參考直接創(chuàng)建一個(gè)filter

解決（HttpServletRequest）

你可以自定義個(gè)RemoteAddrFilter，然后通過覆蓋HttpServletRequestWrapper去替換原有的方法，基于HttpServletRequest 創(chuàng)建SafeboxRequestWrapper對(duì)象，然后把SafeboxRequestWrapper對(duì)象作為HttpServletRequest傳遞下去

代碼如下：

HeaderMapRequestWrapper類

package org.dromara.soul.bootstrap.filter;


import java.util.Collections;
import java.util.Enumeration;
import java.util.HashMap;
import java.util.List;
import java.util.Map;


import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletRequestWrapper;


/**
 * @Auther: whhh
 * @Date: 2021/4/26 19:00
 * @Description:
 */
public class HeaderMapRequestWrapper  extends HttpServletRequestWrapper{
    public HeaderMapRequestWrapper(HttpServletRequest request) {
        super(request);
    }


    private Map<String, String> headerMap = new HashMap<String, String>();

    /**
     * add a header with given name and value
     *
     * @param name
     * @param value
     */
    public void addHeader(String name, String value) {
        headerMap.put(name, value);
    }

    @Override
    public String getHeader(String name) {
        String headerValue = super.getHeader(name);
        if (headerMap.containsKey(name)) {
            headerValue = headerMap.get(name);
        }
        return headerValue;
    }

    /**
     * get the Header names
     */
    @Override
    public Enumeration<String> getHeaderNames() {
        List<String> names = Collections.list(super.getHeaderNames());
        for (String name : headerMap.keySet()) {
            names.add(name);
        }
        return Collections.enumeration(names);
    }

    @Override
    public Enumeration<String> getHeaders(String name) {
        List<String> values = Collections.list(super.getHeaders(name));
        if (headerMap.containsKey(name)) {
            values.add(headerMap.get(name));
        }
        return Collections.enumeration(values);
    }
}

GetTokenFilter類

package org.dromara.soul.bootstrap.filter;

import org.springframework.core.annotation.Order;
import org.springframework.stereotype.Component;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import java.io.IOException;


/**
 * @Auther: whhh
 * @Date: 2021/4/26 18:58
 * @Description:
 */
@Order(-98)
@Component
public class GetTokenFilter implements Filter{

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
    }

    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
        HttpServletRequest req = (HttpServletRequest) request;
        HeaderMapRequestWrapper requestWrapper = new HeaderMapRequestWrapper(req);
        //校驗(yàn)請求request Header中是否有對(duì)應(yīng)值
        String authorization = request.getParameter(HttpHeaders.AUTHORIZATION);
        if (language !=null && !"".equals(authorization)) {
            //如果get請求url中帶有這個(gè)參數(shù)，則request中新增一個(gè)header
            requestWrapper.addHeader(HttpHeaders.AUTHORIZATION, authorization);
            // Goes to default servlet.
            chain.doFilter(requestWrapper, response);
        }
        // Goes to default servlet.
        chain.doFilter(request, response);
    }

    @Override
    public void destroy() {
    }
}