RestyGWT - 自定义调度程序不调用已注册的过滤器

Question

我正在尝试为 resty gwt 编写我的自定义调度程序。

我的调度程序RestyDispatcher将包含两个筛选器：

• BasicAuthHeaderDispatcherFilter(将添加到每个请求安全令牌(，
• ForbiddenDispatcherFilter(将包含回调ForbiddenDispatcherCallback(- 如果用户未登录，他的工作是重定向到登录页面。

我有问题，我的过滤器是由 gwt/restygwt 注册的，不幸的是它们不起作用。

这是代码：

杜松子酒客户端模块

public class ClientModule extends AbstractPresenterModule {
    @Override
    protected void configure() {
    install(new DefaultModule.Builder().defaultPlace(Routing.PAGE.url).errorPlace(Routing.PAGE.url).unauthorizedPlace(Routing.LOGIN.url).tokenFormatter(RouteTokenFormatter.class).build());
    install(new AppModule());
    bind(CurrentUser.class).in(Singleton.class);
    bind(UserLoginGatekeeper.class).in(Singleton.class);
    // Load and inject CSS resources
    bind(ResourceLoader.class).asEagerSingleton();
    bind(RestyGwtConfig.class).asEagerSingleton();
    }
}

RestyGwtConfig

public class RestyGwtConfig {
    public RestyGwtConfig() {
    final Dispatcher dispatcher = new RestyDispatcher();
    GWT.log("--> RestyGwtConfig -> setDispatcher");
    Defaults.setDispatcher(dispatcher);
    UserCredentials.INSTANCE.setUserName("ronan");
    UserCredentials.INSTANCE.setPassword("password");
    }
    static {
    GWT.log("--> RestyGwtConfig -> setServiceRoot");
    Defaults.setServiceRoot(new Resource(GWT.getModuleBaseURL()).resolve("../../cms/services").getUri());
    }
}

雷斯蒂调度员

public class RestyDispatcher extends DefaultFilterawareDispatcher {
    public RestyDispatcher() {
    addFilter(new ForbiddenDispatcherFilter());
    GWT.log("--> RestyDispatcher -> RestyDispatcher -> addFilter -> ForbiddenDispatcherFilter");
    addFilter(new BasicAuthHeaderDispatcherFilter());
    GWT.log("--> RestyDispatcher -> RestyDispatcher -> addFilter -> BasicAuthHeaderDispatcherFilter");
    }
    @Override
    public Request send(Method method, RequestBuilder builder) throws RequestException {
    GWT.log("SimpleDispatcher.Request.send.start");
    Request send = builder.send();
    GWT.log("SimpleDispatcher.Request.send.done");
    return send;
    }
}

禁止访问调度程序筛选器

public class ForbiddenDispatcherFilter implements DispatcherFilter {
    @Override
    public boolean filter(Method method, RequestBuilder builder) {
    GWT.log("--> ForbiddenDispatcherFilter -> filter -> setCallback");
    builder.setCallback(new ForbiddenDispatcherCallback(method));
    return true;
    }
}

ForbiddenDispatcher回调

public class ForbiddenDispatcherCallback implements RequestCallback {
    protected RequestCallback requestCallback;
    public ForbiddenDispatcherCallback(Method method) {
    GWT.log("_________> ForbiddenDispatcherCallback " + method.toString());
    this.requestCallback = method.builder.getCallback();
    }
    @Override
    public void onResponseReceived(Request request, Response response) {
    GWT.log("_________> ForbiddenDispatcherCallback -> onResponseReceived");
    GWT.log(response.getStatusText() + response.getStatusCode());
    if (response.getStatusCode() == Response.SC_FORBIDDEN || response.getStatusCode() == Response.SC_UNAUTHORIZED) {
        // make a hard redirect to login page
        Window.Location.assign("#/login");
    } else {
        requestCallback.onResponseReceived(request, response);
    }
    }
    @Override
    public void onError(Request request, Throwable exception) {
    GWT.log("_________> ForbiddenDispatcherCallback -> onError");
    requestCallback.onError(request, exception);
    }
}

BasicAuthHeaderDispatcherFilter

final class BasicAuthHeaderDispatcherFilter implements DispatcherFilter {
    public static final String AUTHORIZATION_HEADER = "Authorization";
    @Override
    public boolean filter(Method method, RequestBuilder builder) {
    String basicAuthHeaderValue = createBasicAuthHeader(UserCredentials.INSTANCE.getUserName(), UserCredentials.INSTANCE.getPassword());
    builder.setHeader(AUTHORIZATION_HEADER, basicAuthHeaderValue);
    return true;
    }
    private String createBasicAuthHeader(String userName, String password) {
    String credentials = userName + ":" + password;
    String encodedCredentials = credentials;
    return AUTHORIZATION_HEADER + ": Basic " + encodedCredentials;
    }
}

当我运行应用程序时，我在 Web 浏览器控制台中收到以下日志：

--> RestyGwtConfig -> setServiceRoot
SuperDevModeLogger.java:71--> RestyDispatcher -> RestyDispatcher -> addFilter -> ForbiddenDispatcherFilter
SuperDevModeLogger.java:71--> RestyDispatcher -> RestyDispatcher -> addFilter -> BasicAuthHeaderDispatcherFilter
SuperDevModeLogger.java:71--> RestyGwtConfig -> setDispatcher

所以我假设我的调度程序，有 2 个过滤器被正确注册。不幸的是，我没有看到ForbiddenDispatcherFilter日志说它将我的回调设置为ForbiddenDispatcherCallback.我也没有看到上述回调的任何日志。

当我执行任何 resty 服务时，我收到日志条目：

SimpleDispatcher.Request.send.start SuperDevModeLogger.java:71

SimpleDispatcher.Request.send.done XMLHttpRequest.java:305

POST http://localhost:8080/cms/services/authenticated/testService/setInfo 401 (Unauthorized)

因为我在文档中没有找到太多关于它的信息，为了实现这一点，我基于这些示例：

• ARS-Codia博客
• 罗南基勒弗博客

但这些都不够具体。请帮忙。

Answer 1

我在类中手动覆盖send方法RestyDispatcher所以我的实现必须手动执行super.send(method, builder)。或者我根本不应该覆盖send方法。

所以RestyDispatcher它应该看起来像这样：

public class RestyDispatcher extends DefaultFilterawareDispatcher {
    public RestyDispatcher() {
        addFilter(new ForbiddenDispatcherFilter());
        addFilter(new BasicAuthHeaderDispatcherFilter());
    }
    @Override
    public Request send(Method method, RequestBuilder builder) throws RequestException {
         return super.send(method, builder);
    }
}

或

public class RestyDispatcher extends DefaultFilterawareDispatcher {
    public RestyDispatcher() {
    addFilter(new ForbiddenDispatcherFilter());
    addFilter(new BasicAuthHeaderDispatcherFilter());
    }
}

Answer 2

我的解决方案是手动执行filter方法。我不知道这是不是好的解决方案。我假设这是一个错误，因为该方法应该由 RestyGWT 调用filter因为它在 interface DispatcherFilter 中声明并在DefaultFilterawareDispatcher类中实现，如下所示：

package org.fusesource.restygwt.client.dispatcher;
public class DefaultFilterawareDispatcher implements FilterawareDispatcher {
   @Override
    public Request send(Method method, RequestBuilder builder) throws RequestException {
        for (DispatcherFilter f : dispatcherFilters) {
            if (!f.filter(method, builder)) {
                // filter returned false, no continue
                if (GWT.isClient() && LogConfiguration.loggingIsEnabled()) {
                    Logger.getLogger(DefaultFilterawareDispatcher.class.getName())
                            .fine(f.getClass() + " told me not to continue filtering for: "
                                    + builder.getHTTPMethod() + " " + builder.getUrl());
                }
                return null;
            }
        }
        return builder.send();
    }
}

这是我的代码实现：

public class ClientModule extends AbstractPresenterModule {
    @Override
    protected void configure() {
        bind(RestyGwtConfig.class).asEagerSingleton();
        install(new DefaultModule.Builder().defaultPlace(Routing.PAGE.url).errorPlace(Routing.PAGE.url).unauthorizedPlace(Routing.LOGIN.url).tokenFormatter(RouteTokenFormatter.class).build());
        install(new AppModule());
        bind(CurrentUser.class).in(Singleton.class);
        bind(IsAdminGatekeeper.class).in(Singleton.class);
        bind(UserLoginGatekeeper.class).in(Singleton.class);
    }
}

---

public class RestyGwtConfig {
    static {
        Defaults.setDispatcher(new RestyDispatcher());
        Defaults.setServiceRoot(new Resource(GWT.getModuleBaseURL()).resolve("../../cms/services").getUri());
    }
}

---

public class RestyDispatcher extends DefaultFilterawareDispatcher {
    public RestyDispatcher() {
        addFilter(new ForbiddenDispatcherFilter());
        addFilter(new BasicAuthHeaderDispatcherFilter());
    }
    @Override
    public Request send(Method method, RequestBuilder builder) throws RequestException {
        for (DispatcherFilter e : this.dispatcherFilters) {
            e.filter(method, builder);
        }
    return builder.send();
    }
}

如果我错了，请纠正我。