一站式网上办事大厅

import org.springframework.web.bind.annotation.*;

import org.springframework.beans.factory.annotation.Autowired;

import java.util.List;

@RestController

@RequestMapping("/api/manual")

public class ManualController {

@Autowired

private ManualService manualService;

@GetMapping("/{userId}")

public List getManuals(@PathVariable String userId) {

return manualService.getManualsByUserId(userId);

}

}

@Service

public class ManualService {

@Autowired

private ManualRepository manualRepository;

public List getManualsByUserId(String userId) {

return manualRepository.findByUserId(userId);

}

}

public interface ManualRepository extends JpaRepository {

List findByUserId(String userId);

}

@Component

public class JwtFilter extends OncePerRequestFilter {

@Override

protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)

throws ServletException, IOException {

String token = request.getHeader("Authorization");

if (token != null && token.startsWith("Bearer ")) {

token = token.substring(7);

try {

Claims claims = Jwts.parser().setSigningKey("secret-key").parseClaimsJws(token).getBody();

String userId = claims.getSubject();

// 这里可以进一步校验用户权限

request.setAttribute("userId", userId);

} catch (JwtException e) {

response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Invalid token");

return;

}

}

filterChain.doFilter(request, response);

}

}