快捷導(dǎo)航

Springboot使用token防止重復(fù)提交表單問(wèn)題

更新時(shí)間：2026年05月20日 10:52:17 作者：學(xué)習(xí)不易

文章主要描述了一個(gè)關(guān)于用戶登錄測(cè)試的過(guò)程,涉及到了DuplicateSubmitToken、DuplicateSubmitExceptionTextConstants和DuplicateSubmitAspect等術(shù)語(yǔ),這些可能是在測(cè)試過(guò)程中用于防止重復(fù)提交的功能或注解

DuplicateSubmitToken

package jyuxuan.openpose.config;

import java.lang.annotation.*;

/**
 * 防止表單重復(fù)提交注解
 */
@Retention(RetentionPolicy.RUNTIME)
@Target(ElementType.METHOD)
@Documented
public @interface DuplicateSubmitToken {
    // 一次請(qǐng)求完成之前防止重復(fù)提交
    public static final int REQUEST = 1;

    // 一次會(huì)話中防止重復(fù)提交
    public static final int SESSION = 2;

    // 保存重復(fù)提交標(biāo)記 默認(rèn)為需要保存
    boolean save() default true;

    // 防止重復(fù)提交類型，默認(rèn)：一次請(qǐng)求完成之前防止重復(fù)提交
    int type() default REQUEST;
}

DuplicateSubmitException

package jyuxuan.openpose.config;

/**
 * 自定義異常
 */
public class DuplicateSubmitException extends Exception {

    public DuplicateSubmitException(String msg){
        super(msg);
    }
}

TextConstants

package jyuxuan.openpose.config;

public class TextConstants {
    public static final String REQUEST_REPEAT = "========this is a duplicate submit exception=====";
}

DuplicateSubmitAspect

package jyuxuan.openpose.config;

import lombok.extern.slf4j.Slf4j;
import org.aspectj.lang.JoinPoint;
import org.aspectj.lang.annotation.*;
import org.springframework.stereotype.Component;
import org.springframework.web.context.request.RequestContextHolder;
import org.springframework.web.context.request.ServletRequestAttributes;

import javax.servlet.http.HttpServletRequest;
import java.util.UUID;

/**
 * 防止表單重復(fù)提交攔截器
 */
@Aspect
@Component
@Slf4j
public class DuplicateSubmitAspect {
    public static final String DUPLICATE_TOKEN_KEY = "duplicate_token_key";

    @Pointcut("execution(public * jyuxuan.openpose.controller..*(..))")

    public void webLog() {
    }

    @Before("webLog() && @annotation(token)")
    public void before(final JoinPoint joinPoint, DuplicateSubmitToken token) throws DuplicateSubmitException {
        if (token != null) {
            ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
            HttpServletRequest request = attributes.getRequest();

            boolean isSaveSession = token.save();
            if (isSaveSession) {
                String key = getDuplicateTokenKey(joinPoint);
                Object t = request.getSession().getAttribute(key);
                if (null == t) {
                    String uuid = UUID.randomUUID().toString();
                    request.getSession().setAttribute(key.toString(), uuid);
                    log.info("token-key=" + key);
                    log.info("token-value=" + uuid.toString());
                } else {
                    throw new DuplicateSubmitException(TextConstants.REQUEST_REPEAT);
                }
            }

        }
    }

    /**
     * 獲取重復(fù)提交key
     * @param joinPoint
     * @return
     */
    public String getDuplicateTokenKey(JoinPoint joinPoint) {
        String methodName = joinPoint.getSignature().getName();
        StringBuilder key = new StringBuilder(DUPLICATE_TOKEN_KEY);
        key.append(",").append(methodName);
        return key.toString();
    }

    @AfterReturning("webLog() && @annotation(token)")
    public void doAfterReturning(JoinPoint joinPoint, DuplicateSubmitToken token) {
        // 處理完請(qǐng)求，返回內(nèi)容
        log.info("出方法：");
        if (token != null) {
            ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
            HttpServletRequest request = attributes.getRequest();
            boolean isSaveSession = token.save();
            if (isSaveSession) {
                String key = getDuplicateTokenKey(joinPoint);
                Object t = request.getSession().getAttribute(key);
                if (null != t && token.type() == DuplicateSubmitToken.REQUEST) {
                    request.getSession(false).removeAttribute(key);
                }
            }
        }
    }

    /**
     * 異常
     * @param joinPoint
     * @param e
     * @param token
     */
    @AfterThrowing(pointcut = "webLog()&& @annotation(token)", throwing = "e")
    public void doAfterThrowing(JoinPoint joinPoint, Throwable e, DuplicateSubmitToken token) {
        if (null != token
                && e instanceof DuplicateSubmitException == false) {
            //處理處理重復(fù)提交本身之外的異常
            ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
            HttpServletRequest request = attributes.getRequest();
            boolean isSaveSession = token.save();
            //獲得方法名稱
            if (isSaveSession) {
                String key = getDuplicateTokenKey(joinPoint);
                Object t = request.getSession().getAttribute(key);
                if (null != t) {
                    //方法執(zhí)行完畢移除請(qǐng)求重復(fù)標(biāo)記
                    request.getSession(false).removeAttribute(key);
                    log.info("異常情況--移除標(biāo)記！");
                }
            }
        }
    }
}

用戶登錄測(cè)試

/**
 * 用戶登錄
 *
 * @param request
 * @param model
 * @return
 */
@DuplicateSubmitToken(type = DuplicateSubmitToken.SESSION)
@RequestMapping(value = "userLogin", method = RequestMethod.GET)
public String userLogin_(HttpServletRequest request, Model model) {
    String username = request.getParameter("username");
    String password = request.getParameter("password");
    String pwd = userService.userLogin(username);
    String msg;
    if (pwd == null || pwd.equals(""))
        msg = "該用戶未注冊(cè)";
    else if (pwd.equals(password))
        msg = "密碼正確";
    else
        msg = "密碼錯(cuò)誤";
    return "index";
}