## 自定义过滤器 模拟一个登录的校验。基本逻辑：如果请求中有access-token参数，则认为请求有效，放行。 ~~~ package com.like.filter; import com.netflix.zuul.ZuulFilter; import com.netflix.zuul.context.RequestContext; import com.netflix.zuul.exception.ZuulException; import org.apache.commons.lang.StringUtils; import org.springframework.cloud.netflix.zuul.filters.support.FilterConstants; import org.springframework.http.HttpStatus; import org.springframework.stereotype.Component; import javax.servlet.http.HttpServletRequest; @Component public class LoginFilter extends ZuulFilter { @Override public String filterType() { return FilterConstants.PRE_TYPE; //定义为前置过滤器 } @Override public int filterOrder() { return FilterConstants.PRE_DECORATION_FILTER_ORDER - 1; //在处理请求头之前进行拦截 } @Override public boolean shouldFilter() { return true; //开启过滤器 } @Override public Object run() throws ZuulException { //获取请求上下文,此作用域范围:从请求到达zuul一直到路由结束后返回给客户端这个完整流程.但是它不会存在微服务内,只存在zuul中 RequestContext context = RequestContext.getCurrentContext(); //获取request HttpServletRequest request = context.getRequest(); //获取请求参数 String token = request.getParameter("access-token"); //判断是否存在 if (StringUtils.isBlank(token)) { //不存在,未登录,进行拦截 context.setSendZuulResponse(false); context.setResponseStatusCode(HttpStatus.FORBIDDEN.value()); } return null; } } ~~~ ## 测试 不带access-token参数:  携带access-token参数: