需求描述：需要根据用户的请求路径拦截做权限控制：

但是这样做全局异常无法捕获

解决方案：

在filter当中引入HandlerExceptionResolver类，通过该类的resolveException方法抛出自定义异常：

 

public class OpenInvokeFilter extends OncePerRequestFilter {@Autowiredprivate GaioAuthorizedProperties gaioAuthorizedProperties;@Autowired@Qualifier("handlerExceptionResolver")private HandlerExceptionResolver resolver;@Overrideprotected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain)throws ServletException, IOException {boolean containsUri = request.getRequestURI().contains("/open/invoke");if (containsUri) {String paasid = request.getHeader("x-tif-paasid");String serviceId = request.getHeader("x-smp-serviceid");if (StringUtils.isNotBlank(paasid)) {// 从yml获取匹配数据，判断当前paasId是否有权限调用指定的serviceId，无权限则拦截处理。AccessProperties accessProperties = gaioAuthorizedProperties.getType().get("ebus");Map<String, String[]> passServiceMap = accessProperties.getPassServiceMap();String[] serviceIds = passServiceMap.get(paasid);if (serviceIds == null) {resolver.resolveException(request, response,null, new GaioBizException(RESOURCE_NOT_FOUND_ERROR));return;}boolean match = Arrays.stream(serviceIds).anyMatch(item -> item.equals(serviceId));if (!match) {resolver.resolveException(request, response,null, new GaioBizException(RESOURCE_NOT_FOUND_ERROR));return;}}}chain.doFilter(request, response);}}