（工作经验）优雅实现接口权限校验控制：基于自定义注解、AOP与@ConditionalOnProperty配置开关的通用解决方案

@Target(ElementType.METHOD)
@Retention(RetentionPolicy.RUNTIME)
public @interface HasRole {
    String key();
}

/**
 * @Description:
 * @return:
 * @Author: codelinghu
 * @Date: 2024/3/27
 */
@Component
@Aspect
@ConditionalOnProperty(prefix = "permission_switch", name = "enable", havingValue = "true")
public class AopConfig {
    //定义一个切点（通过注解）
    @Pointcut("@annotation(com.tongda.tdjobcard.config.annotation.HasPermission))")
    public void pointcut(){}
    private final Map<String, BaseXClient> connectMap;
    public AopConfig(Map<String, BaseXClient> connectMap) {
        this.connectMap = connectMap;
    }
    //前置通知,判断权限
    @Before("pointcut()")
    public void before(JoinPoint joinPoint){
        //获取到HttpServletRequest，ThreadLocal
        RequestAttributes requestAttributes = RequestContextHolder.getRequestAttributes();
        ServletRequestAttributes servletRequestAttributes = (ServletRequestAttributes) requestAttributes;
        HttpServletRequest request = servletRequestAttributes.getRequest();
        //获取用户请求的userID
        String userid = request.getHeader("userID");
        //获取当前请求的方法上的注解HasPermission中设置的角色
        MethodSignature signature = (MethodSignature)joinPoint.getSignature();
//        System.out.println("key="+signature.getName());
        BaseXClient client = connectMap.get("adminUser");
        if (client == null) {
            throw new BusinessException(ResultVoEnum.ACCOUNT_ERROR, null);
        }
        String s= PermissionDao.hasPermission(client, TdCalcConfig.DEFAULT_DBNAME,userid,signature.getName());
        //开始判断true or false
        // true放行，false拦住抛出异常
        if (!"true".equals(s)){
            throw new BusinessException(ResultVoEnum.NO_PERMISSION, null);
        }
    }
   
    }
}

@ConditionalOnProperty(prefix = "permission_switch", name = "enable", havingValue = "true")