Spring切面获取不到request的参数值

绝地灬酷狼 2022-05-12 14:56 366阅读 0赞

## 问题 ##

请求方式 POST ， 传参方式 form-data

在 Controller 中通过 request.getParameter(“name”); 获取到数据，在切面里 相同方式获取不到数据

切面获取 request 的方法为

HttpServletRequest request = ((ServletRequestAttributes) RequestContextHolder.getRequestAttributes()).getRequest();

## 解决方法 ##

通过如下方法可以获取到数据

MultipartResolver resolver = new CommonsMultipartResolver(request.getSession().getServletContext());
    MultipartHttpServletRequest multipartRequest = resolver.resolveMultipart(request);
    MultipartFile file = multipartRequest.getFile("file");
    String key = multipartRequest.getParameter("key");

## 原因 ##

在如下过滤器中，上传文件中的content-type:multipart/form-data使用获取request.getParameter(key)无法获取相应的值。需要借助Spring框架中的CommonsMultipartResolver.resolveMultipart(HttpServletRequest request)将request转为MultipartHttpServletRequest，从而使用getParameter(key)方法获取指定的值；

## 引发了新的问题 ##

在切面里添加如上代码后，在 Spring Controller 中获取不到参数

在 web.xml 中发现 xxsFilter 过滤

需要将上述代码加到 Filter 中

@Override
        public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
            HttpServletRequest httpRequest = (HttpServletRequest) request;
            String contentType = httpRequest.getContentType();
            if (contentType != null && contentType.contains("multipart/form-data")) {
                MultipartResolver resolver = new CommonsMultipartResolver(httpRequest.getSession().getServletContext());
                MultipartHttpServletRequest multipartRequest = resolver.resolveMultipart(httpRequest);
                // 将转化后的 request 放入过滤链中
                request = multipartRequest;
            }
            chain.doFilter(request, response);
        }

## 参考链接 ##

[spring的multipartResolver和java后端获取的MultipartHttpServletRequest方法对比 （附：遇到的坑）][spring_multipartResolver_java_MultipartHttpServletRequest_]

[web过滤器中获取请求的参数(content-type:multipart/form-data)][web_content-type_multipart_form-data]

[request.getParameter()获取不到数据][request.getParameter]

[XSS过滤JAVA过滤器filter 防止常见SQL注入][XSS_JAVA_filter _SQL]

[过滤器 与拦截器 与 切面的区别][_ _]

[spring_multipartResolver_java_MultipartHttpServletRequest_]: https://blog.csdn.net/u012373815/article/details/72724084
[web_content-type_multipart_form-data]: https://www.cnblogs.com/springlight/p/6208908.html
[request.getParameter]: https://blog.csdn.net/u013813491/article/details/80347377
[XSS_JAVA_filter _SQL]: https://www.cnblogs.com/hero123/p/9091625.html
[_ _]: https://blog.csdn.net/qq_34531925/article/details/81184740