init

springboot-backend/src/main/java/com/admin/common/aop/RoleAspect.java

@@ -0,0 +1,49 @@
+package com.admin.common.aop;
+
+import com.admin.common.annotation.RequireRole;
+import com.admin.common.lang.R;
+import com.admin.common.utils.JwtUtil;
+import org.aspectj.lang.ProceedingJoinPoint;
+import org.aspectj.lang.annotation.Around;
+import org.aspectj.lang.annotation.Aspect;
+import org.springframework.stereotype.Component;
+import org.springframework.web.context.request.RequestContextHolder;
+import org.springframework.web.context.request.ServletRequestAttributes;
+
+import javax.servlet.http.HttpServletRequest;
+
+/**
+ * 权限控制切面
+ * 处理 @RequireRole 注解，检查管理员权限（role_id = 0）
+ * 注意：JWT拦截器已经验证了token的有效性，这里只需要检查权限
+ */
+@Aspect
+@Component
+public class RoleAspect {
+
+    @Around("@annotation(requireRole)")
+    public Object checkRole(ProceedingJoinPoint joinPoint, RequireRole requireRole) throws Throwable {
+        // 获取当前请求
+        ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
+        if (attributes == null) {
+            return R.err(500, "无法获取请求信息");
+        }
+        
+        HttpServletRequest request = attributes.getRequest();
+        String token = request.getHeader("Authorization");
+        
+        // JWT拦截器已经验证过token存在且有效，这里直接获取role_id
+        Integer roleId = JwtUtil.getRoleIdFromToken(token);
+        if (roleId == null) {
+            return R.err(401, "无法获取用户权限信息");
+        }
+        
+        // 检查是否为管理员（role_id = 0）
+        if (roleId != 0) {
+            return R.err(403, "权限不足，仅管理员可操作");
+        }
+        
+        // 权限检查通过，执行原方法
+        return joinPoint.proceed();
+    }
+}