@Validated 属性安全验证

在接口处进行属性的安全校验时，使用@Validated  【import org.springframework.validation.annotation.Validated;】时，需要以下步骤：

1.引入pom依赖

<!-- springboot validation -->
<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-validation</artifactId>
</dependency>

2.构建全局异常捕获类

@ControllerAdvice
@Slf4j
public class GlobalExceptionHandler {

    @ResponseBody
    @ExceptionHandler(Exception.class)
    public ResponseDTO execeptionHandler(Exception e){
        log.error("error:",e);
        // http 请求方式错误
        if (e instanceof HttpRequestMethodNotSupportedException) {
            return ResponseDTO.wrap(ResponseCodeConst.REQUEST_METHOD_ERROR);
        }
        // 参数类型错误
        if (e instanceof TypeMismatchException) {
            return ResponseDTO.wrap(ResponseCodeConst.ERROR_PARAM);
        }
        // json 格式错误
        if (e instanceof HttpMessageNotReadableException) {
            return ResponseDTO.wrap(ResponseCodeConst.JSON_FORMAT_ERROR);
        }
        // 参数校验未通过
        if (e instanceof MethodArgumentNotValidException) {
            List<FieldError> fieldErrors = ((MethodArgumentNotValidException) e).getBindingResult().getFieldErrors();
            List<String> msgList = fieldErrors.stream().map(FieldError :: getDefaultMessage).collect(Collectors.toList());
            return ResponseDTO.wrap(ResponseCodeConst.ERROR_PARAM, String.join(",", msgList));
        }
        if (e instanceof BusinessException) {
            return ResponseDTO.wrap(ResponseCodeConst.SYSTEM_ERROR,e.getMessage());
        }
        return ResponseDTO.wrap(ResponseCodeConst.SYSTEM_ERROR);
    }
}

3.dto对象中进行设置安全校验规则

javax.validation.constraints
eg:

@ApiModelProperty("手机号")
@NotBlank(message = "手机号不能为空")
private String phone;

4.接口处使用

 @Validated进行校验

@PostMapping("/sys/user/register")
@ApiOperation(value = "用户注册")
public ResponseDTO register(@RequestBody @Validated UserRegisterDTO dto){
    System.out.println(dto);
    return ResponseDTO.succ();
}
5.实验截图