Examples with BlockAttackInnerInterceptor com.baomidou.mybatisplus.extension.plugins.inner.BlockAttackInnerInterceptor used on opensource projects

Example 6 with BlockAttackInnerInterceptor

use of com.baomidou.mybatisplus.extension.plugins.inner.BlockAttackInnerInterceptor in project xuxiaowei-cloud by xuxiaowei-cloud.

the class MybatisPlusConfiguration method mybatisPlusInterceptor.

/**
 * 新的分页插件、攻击 SQL 阻断解析器，防止全表更新与删除
 * <p>
 * 一缓和二缓遵循mybatis的规则
 * <p>
 * 需要设置 {@link MybatisConfiguration#setConfigurationFactory(Class)} = false 避免缓存出现问题(该属性会在旧插件移除后一同移除)
 */
@Bean
public MybatisPlusInterceptor mybatisPlusInterceptor() {
    MybatisPlusInterceptor interceptor = new MybatisPlusInterceptor();
    // 分页拦截器
    interceptor.addInnerInterceptor(new PaginationInnerInterceptor());
    // 攻击 SQL 阻断解析器,防止全表更新与删除
    interceptor.addInnerInterceptor(new BlockAttackInnerInterceptor());
    return interceptor;
}

Example 7 with BlockAttackInnerInterceptor

use of com.baomidou.mybatisplus.extension.plugins.inner.BlockAttackInnerInterceptor in project herodotus-engine by herodotus-cloud.

the class MybatisPlusConfiguration method blockAttackInnerInterceptor.

@Bean
public BlockAttackInnerInterceptor blockAttackInnerInterceptor() {
    BlockAttackInnerInterceptor blockAttackInnerInterceptor = new BlockAttackInnerInterceptor();
    log.trace("[Herodotus] |- Bean [Block Attack Inner Interceptor] Auto Configure.");
    return blockAttackInnerInterceptor;
}

Example 8 with BlockAttackInnerInterceptor

use of com.baomidou.mybatisplus.extension.plugins.inner.BlockAttackInnerInterceptor in project helio-starters by uncarbon97.

the class HelioMybatisPlusAutoConfiguration method mybatisPlusInterceptor.

@Bean
@ConditionalOnMissingBean
public MybatisPlusInterceptor mybatisPlusInterceptor(TenantSupport tenantSupport) {
    MybatisPlusInterceptor interceptor = new MybatisPlusInterceptor();
    /*
        https://baomidou.com/pages/2976a3/#%E5%B1%9E%E6%80%A7
        使用多个功能需要注意顺序关系,建议使用如下顺序

        多租户,动态表名
        分页,乐观锁
        sql性能规范,防止全表更新与删除
         */
    if (Boolean.TRUE.equals(helioProperties.getTenant().getEnabled())) {
        // 配置文件中启用了多租户功能，注入对应支持 bean
        tenantSupport.support(helioProperties, interceptor);
    }
    /*
        分页插件
         */
    PaginationInnerInterceptor paginationInnerInterceptor = new PaginationInnerInterceptor();
    // 设置sql的limit为无限制
    paginationInnerInterceptor.setMaxLimit(-1L);
    interceptor.addInnerInterceptor(paginationInnerInterceptor);
    /*
        乐观锁
         */
    if (Boolean.TRUE.equals(helioProperties.getCrud().getOptimisticLock().getEnabled())) {
        interceptor.addInnerInterceptor(new OptimisticLockerInnerInterceptor());
    }
    /*
        防止全表更新与删除
         */
    interceptor.addInnerInterceptor(new BlockAttackInnerInterceptor());
    return interceptor;
}

Example 9 with BlockAttackInnerInterceptor

use of com.baomidou.mybatisplus.extension.plugins.inner.BlockAttackInnerInterceptor in project albedo by somowhere.

the class BaseMybatisConfiguration method mybatisPlusInterceptor.

/**
 * 新的分页插件,一缓和二缓遵循mybatis的规则,需要设置 MybatisConfiguration#useDeprecatedExecutor = false 避免缓存出现问题(该属性会在旧插件移除后一同移除)
 * <p>
 * 注意:
 * 如果内部插件都是使用,需要注意顺序关系,建议使用如下顺序
 * 多租户插件,动态表名插件
 * 分页插件,乐观锁插件
 * sql性能规范插件,防止全表更新与删除插件
 * 总结: 对sql进行单次改造的优先放入,不对sql进行改造的最后放入
 * <p>
 * 参考：
 * https://mybatis.plus/guide/interceptor.html#%E4%BD%BF%E7%94%A8%E6%96%B9%E5%BC%8F-%E4%BB%A5%E5%88%86%E9%A1%B5%E6%8F%92%E4%BB%B6%E4%B8%BE%E4%BE%8B
 */
@Bean
@Order(5)
@ConditionalOnMissingBean
public MybatisPlusInterceptor mybatisPlusInterceptor() {
    MybatisPlusInterceptor interceptor = new MybatisPlusInterceptor();
    log.info("detected application.database.multiTenantType={}，{} mode enabled", databaseProperties.getMultiTenantType().name(), databaseProperties.getMultiTenantType().getDescribe());
    if (StrUtil.equalsAny(databaseProperties.getMultiTenantType().name(), MultiTenantType.SCHEMA.name(), MultiTenantType.SCHEMA_COLUMN.name())) {
        // SCHEMA 动态表名插件
        SchemaInterceptor schemaInterceptor = new SchemaInterceptor(databaseProperties.getTenantDatabasePrefix());
        interceptor.addInnerInterceptor(schemaInterceptor);
    }
    if (StrUtil.equalsAny(databaseProperties.getMultiTenantType().name(), MultiTenantType.COLUMN.name(), MultiTenantType.SCHEMA_COLUMN.name(), MultiTenantType.DATASOURCE_COLUMN.name())) {
        // COLUMN 模式 多租户插件
        TenantLineInnerInterceptor tli = new TenantLineInnerInterceptor();
        tli.setTenantLineHandler(new TenantLineHandler() {

            @Override
            public String getTenantIdColumn() {
                return databaseProperties.getTenantIdColumn();
            }

            @Override
            public boolean ignoreTable(String tableName) {
                return databaseProperties.getIgnoreTables() != null && databaseProperties.getIgnoreTables().contains(tableName);
            }

            @Override
            public boolean ignoreMapId(String mapperId) {
                return databaseProperties.getIgnoreMapperIds() != null && databaseProperties.getIgnoreMapperIds().contains(mapperId);
            }

            @Override
            public Expression getTenantId() {
                return new StringValue(ContextUtil.getTenant());
            }
        });
        interceptor.addInnerInterceptor(tli);
    }
    List<InnerInterceptor> beforeInnerInterceptor = getPaginationBeforeInnerInterceptor();
    if (!beforeInnerInterceptor.isEmpty()) {
        beforeInnerInterceptor.forEach(interceptor::addInnerInterceptor);
    }
    // 分页插件
    PaginationInnerInterceptor paginationInterceptor = new PaginationInnerInterceptor();
    // 单页分页条数限制
    paginationInterceptor.setMaxLimit(databaseProperties.getMaxLimit());
    // 数据库类型
    paginationInterceptor.setDbType(databaseProperties.getDbType());
    // 溢出总页数后是否进行处理
    paginationInterceptor.setOverflow(databaseProperties.getOverflow());
    // 生成 countSql 优化掉 join 现在只支持 left join
    paginationInterceptor.setOptimizeJoin(databaseProperties.getOptimizeJoin());
    interceptor.addInnerInterceptor(paginationInterceptor);
    List<InnerInterceptor> afterInnerInterceptor = getPaginationAfterInnerInterceptor();
    if (!afterInnerInterceptor.isEmpty()) {
        afterInnerInterceptor.forEach(interceptor::addInnerInterceptor);
    }
    // 防止全表更新与删除插件
    if (databaseProperties.getIsBlockAttack()) {
        interceptor.addInnerInterceptor(new BlockAttackInnerInterceptor());
    }
    // sql性能规范插件
    if (databaseProperties.getIsIllegalSql()) {
        interceptor.addInnerInterceptor(new IllegalSQLInnerInterceptor());
    }
    return interceptor;
}

Example 10 with BlockAttackInnerInterceptor

use of com.baomidou.mybatisplus.extension.plugins.inner.BlockAttackInnerInterceptor in project boot-admin by hb0730.

the class MybatisPlusConfig method mybatisPlusInterceptor.

/**
 * 注册MybatisPlusInterceptor
 *
 * @return MybatisPlusInterceptor
 */
@Bean
public MybatisPlusInterceptor mybatisPlusInterceptor() {
    MybatisPlusInterceptor interceptor = new MybatisPlusInterceptor();
    interceptor.addInnerInterceptor(paginationInnerInterceptor());
    // 乐观锁
    interceptor.addInnerInterceptor(new OptimisticLockerInnerInterceptor());
    // 击 SQL 阻断解析器,防止全表更新与删除
    interceptor.addInnerInterceptor(new BlockAttackInnerInterceptor());
    return interceptor;
}