spring-boot-starter-aop围绕注释接口的方法不会建议我的方面

Question

public interface BusinessResource {

    @RequiresAuthorization
    public ResponseEnvelope getResource(ParamObj param);
}

@Component
public class BusinessResourceImpl implements BusinessResource {

    @Autowired
    public Response getResource(ParamObj param) {
        return Response.ok().build();
    }
}

import org.aspectj.lang.ProceedingJoinPoint;
import org.aspectj.lang.annotation.Around;
import org.aspectj.lang.annotation.Aspect;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;

@Aspect
@Component
public class AuthorizerAspect {

    protected static final Logger LOGGER =
                      LoggerFactory.getLogger(AuthorizerAspect.class);

    @Autowired
    public AuthorizerAspect() {
        LOGGER.info("Break point works here..." +
        "so spring is creating the aspect as a component...");
    }

    @Around(value="@annotation(annotation)")
    public Object intercept(ProceedingJoinPoint jp,
                            RequiresAuthorization annotation) throws Throwable {
        LOGGER.info("BEGIN");
        jp.proceed();
        LOGGER.info("END");
    }
}

注意：在接口级别的注释中，甚至不会创建代理，而在实现级别的注释将为资源创建代理。

问题是：是否有一种方法来通知注释只出现在接口上的对象？

Answer 1

对于那些像我一样发现没有通过代理对Spring AOP上的限制进行排序的直接方法的人来说，这个替代方案可能会有用：

public interface BusinessResource {

    @RequiresAuthorization
    public ResponseEnvelope getResource(ParamObj param);
}

和

@Component
public class BusinessResourceImpl implements BusinessResource {

    @Autowired
    public Response getResource(ParamObj param) {
        return Response.ok().build();
    }
}

和

import import org.aopalliance.intercept.MethodInvocation;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Configuration;

@Configuration
public class AuthorizerAspect {

    protected static final Logger LOGGER =
                      LoggerFactory.getLogger(AuthorizerAspect.class);

    @Autowired
    public AuthorizerAspect() {
        LOGGER.info("Break point works here..." +
        "so spring is creating the aspect as a component...");
    }

    public Object invoke(MethodInvocation invocation) throws Throwable {
        LOGGER.info("BEGIN");
        invocation.proceed();
        LOGGER.info("END");
    }

    @Bean
    public DefaultAdvisorAutoProxyCreator defaultAdvisorAutoProxyCreator() {
        return new DefaultAdvisorAutoProxyCreator();
    }

    @Bean("requiresAuthorizationPointcut")
    public AbstractPointcutAdvisor createPointcut() {
        return new AbstractPointcutAdvisor() {

            private static final long serialVersionUID = 4733447191475535406L;

            @Override
            public Advice getAdvice() {
                return AuthorizerAspect.this;
            }

            @Override
            public Pointcut getPointcut() {
                return  new StaticMethodMatcherPointcut() {
                    @Override
                    public boolean matches(Method method, Class<?> targetClass) {
                        if (method.isAnnotationPresent(RequiresAuthorization.class)) {
                            return true;
                        }
                        if (method.getDeclaringClass().isInterface()) {
                            String methodName = method.getName();
                            try {
                                Method targetMethod = targetClass.getMethod(methodName, method.getParameterTypes());
                                return targetMethod != null && targetMethod.isAnnotationPresent(RequiresAuthorization.class);
                            } catch (NoSuchMethodException |
                                     SecurityException e) {
                                LOGGER.debug("FAILURE LOG HERE",
                                             e.getMessage());
                                return false;
                            }
                        }
                        return method.isAnnotationPresent(RequiresAuthorization.class);
                    }
                };
            }
        };
    }
}