Spring Boot：注入自定义上下文路径

Question

我正在运行一个带有嵌入式Tomcat的Spring Boot1.2.3应用程序。

示例：

@Component @Order(Ordered.HIGHEST_PRECEDENCE)
public class MultiTenancyFilter implements Filter {
    private final static Pattern pattern = Pattern.compile("^/(?<contextpath>[^/]+).*$");

    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
        final HttpServletRequest req = (HttpServletRequest) request;
        final String requestURI = req.getRequestURI();

        Matcher matcher = pattern.matcher(requestURI);
        if(matcher.matches()) {
            chain.doFilter(new HttpServletRequestWrapper(req) {
                @Override
                public String getContextPath() {
                    return "/"+matcher.group("contextpath");
                }
            }, response);
        }
    }

    @Override public void init(FilterConfig filterConfig) throws ServletException {}
    @Override public void destroy() {}
}

但是Spring@Controller@RequestMapping和Spring Security的antMatchers（“/”）似乎并不尊重它。两者仍然可以像contextpath=“”一样工作。

Answer 1

起作用了！

Spring Security文档（http://docs.Spring.io/spring-security/site/docs/3.1.x/reference/security-filter-chain.html）说：“Spring Security只对保护应用程序中的路径感兴趣，因此忽略了contextPath。不幸的是，servlet规范没有确切定义servletPath和pathInfo的值对于特定请求URI将包含什么。[...]该策略在类AntPathRequestMatcher中实现，它使用Spring的AntPathMatcher对串联的servletPath和pathInfo执行模式的不区分大小写的匹配，忽略了QueryString。”

所以我只是覆盖了ServletPath和ContextPath（即使Spring Security没有使用它）。此外，我还添加了一些小的重定向，因为通常在点击http://localhost:8080/mycontext时，会被重定向到http://localhost:8080/mycontext/，而Spring Securities Ant Matcher不喜欢缺少尾随斜杠。

下面是我的MultiTenancyFilter代码：

@Component @Order(Ordered.HIGHEST_PRECEDENCE)
public class MultiTenancyFilter extends OncePerRequestFilter {
    private final static Pattern pattern = Pattern.compile("^(?<contextPath>/[^/]+)(?<servletPath>.*)$");

    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
        Matcher matcher = pattern.matcher(request.getServletPath());
        if(matcher.matches()) {
            final String contextPath = matcher.group("contextPath");
            final String servletPath = matcher.group("servletPath");

            if(servletPath.trim().isEmpty()) {
                response.sendRedirect(contextPath+"/");
                return;
            }

            filterChain.doFilter(new HttpServletRequestWrapper(request) {
                @Override
                public String getContextPath() {
                    return contextPath;
                }
                @Override
                public String getServletPath() {
                    return servletPath;
                }
            }, response);
        } else {
            filterChain.doFilter(request, response);
        }
    }

    @Override
    protected String getAlreadyFilteredAttributeName() {
        return "multiTenancyFilter" + OncePerRequestFilter.ALREADY_FILTERED_SUFFIX;
    }
}

它只是使用下面提到的URL模式提取contextPath和servletPath：https://theholyjava.wordpress.com/2014/03/24/HttpServletRequest-RequestUriRequestUrlContextPathServletPathPathInfoQueryString/