Java实现对ip白名单的限制

有些项目的接口是需要权限访问，比如限制IP、做权限控制，等等方案，本文是限制ip权限设置访问策略。

先看测试效果：

测试：

注意访问需要输入：<a data-token="62fb0901bdca31b1fd408c3f369c456b" href="http://127.0.0.1:8981/" rel="nofollow">http://127.0.0.1:8981/</a>

在配置文件加上本地的ip 10.9.160.135

<img alt="" class="blockcode" height="116" src="https://201907.oss-cn-shanghai.aliyuncs.com/cs/5606289-fad546b450b69a0ecc53a7dc9dd6ade2.png" width="336">

去掉本地ip 10.9.160.135 提示非法字符

<img alt="" class="blockcode" height="209" src="https://201907.oss-cn-shanghai.aliyuncs.com/cs/5606289-44d586271caf4cc0e0aafd2ded39488b.png" width="734">

看一下项目结构，新建一个创建IPLimitInterceptor类，在springmvc配置文件配置、新建一个ip校验工具类 IPWhiteListUtil、ip配置文件: ipwhite.properties。

<img alt="" class="blockcode" height="338" src="https://201907.oss-cn-shanghai.aliyuncs.com/cs/5606289-757eff46f565c152cf6629013e6ea51c.png" width="330">

再看代码实现

创建IPLimitInterceptor类

IPLimitInterceptor继承HandlerInterceptorAdapter父类

import java.net.InetAddress;

import java.util.Properties;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import org.springframework.core.io.support.PropertiesLoaderUtils;

import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;



public class IPLimitInterceptor extends HandlerInterceptorAdapter {



 @Override

 public boolean preHandle(HttpServletRequest request,

 HttpServletResponse response, Object handler) throws Exception {

 String ip = getIpAddress(request);

 //读取ip白名单配置文件ipwhite.properties

 Properties properties = PropertiesLoaderUtils.loadAllProperties("ipwhite.properties");

 String ipWhilte = properties.getProperty("ipWhilte");

 System.out.println(ipWhilte);

 //判断请求ip地址是否在白名单呢

 if(IPWhiteListUtil.checkLoginIP(ip,ipWhilte)) {

 return super.preHandle(request, response, handler);

 }

 throw new Exception("IP非法访问!");



 }

 //获取配置请求的ip地址

 private String getIpAddress(HttpServletRequest request) {

 String ip = request.getHeader("x-forwarded-for");

 if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {

 ip = request.getHeader("Proxy-Client-IP");

 }

 if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {

 ip = request.getHeader("WL-Proxy-Client-IP");

 }

 if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {

 ip = request.getHeader("HTTP_CLIENT_IP");

<p style="mar

Java实现 对ip白名单的限制

Java实现对ip白名单的限制