[Spring] 인터셉터 활용하기 3 권한 체크

1. 인터셉터 클래스 만들기

public class ForbiddenInterceptor implements HandlerInterceptor {
    
    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
        HttpSession session = request.getSession();
        User sessionUser = (User) session.getAttribute("sessionUser");
        Board board = (Board) request.getAttribute("board");
        if (sessionUser.getId()!=board.getUser().getId()){
            throw new Exception403("권한이 없습니다");
        }
    }
}

2. Configuration 만들기

@Configuration // ioc 등록
public class WebMvcConfig implements WebMvcConfigurer {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
									    // 인증 체크
            registry.addInterceptor(new LoginInterceptor())
                    .addPathPatterns("/board/**","/user/**")
                    .excludePathPatterns("/board/{id:\\d+}");
		                  // 권한 체크
            registry.addInterceptor(new ForbiddenInterceptor())
                    .addPathPatterns("/board/{id:\\d+}/**")
                    .excludePathPatterns("/board/{id:\\d+}");
    }


}