嗯,我忘了的原則,關注點分離... 對我的困境的解決方案是建立在春季啓動Web服務器的過濾器,是這樣的:
public class AllowedIpFilter implements Filter {
@Value("${my.allowed.ip-address}")
private String allowedIpAddress;
@Override
public void init(FilterConfig filterConfig) throws ServletException {}
@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException,
ServletException {
if(!request.getRemoteAddr().equals(allowedIpAddress)){
System.out.println(request.getRemoteAddr() + " is forbidden");
PrintWriter out = response.getWriter();
out.println("Not authorized");
out.flush();
} else {
chain.doFilter(request, response);
}
}
@Override
public void destroy() {}
}