\u89c6\u9891\u770b\u4e86\u51e0\u767e\u5c0f\u65f6\u8fd8\u8ff7\u7cca？\u5173\u6ce8\u6211，\u51e0\u5206\u949f\u8ba9\u4f60\u79d2\u61c2！<\/p>\n
\u7528\u6237\u5728\u4ee5\u4e0b\u573a\u666f\u5bb9\u6613\u591a\u6b21\u70b9\u51fb：<\/p>\n
\u540e\u679c\u5f88\u4e25\u91cd：<\/p>\n
\u2705 \u76ee\u6807：\u540c\u4e00\u4e2a\u7528\u6237，\u5728\u77ed\u65f6\u95f4\u5185，\u5bf9\u540c\u4e00\u63a5\u53e3\u53ea\u80fd\u63d0\u4ea4\u4e00\u6b21！<\/p>\n
\u6211\u4eec\u91c7\u7528 \u201c\u8bf7\u6c42\u552f\u4e00\u6807\u8bc6 + \u5206\u5e03\u5f0f\u9501\u201d \u65b9\u6848：<\/p>\n
💡 \u4e3a\u4ec0\u4e48\u4e0d\u7528 IP + URL + \u53c2\u6570\u505a key？<\/p>\n
<dependency>
\n <groupId>org.springframework.boot<\/groupId>
\n <artifactId>spring-boot-starter-web<\/artifactId>
\n<\/dependency>
\n<dependency>
\n <groupId>org.springframework.boot<\/groupId>
\n <artifactId>spring-boot-starter-data-redis<\/artifactId>
\n<\/dependency>
\n<dependency>
\n <groupId>org.apache.commons<\/groupId>
\n <artifactId>commons-pool2<\/artifactId> <!– \u8fde\u63a5\u6c60 –>
\n<\/dependency><\/p>\n
import java.lang.annotation.ElementType;
\nimport java.lang.annotation.Retention;
\nimport java.lang.annotation.RetentionPolicy;
\nimport java.lang.annotation.Target;<\/p>\n
@Target(ElementType.METHOD)
\n@Retention(RetentionPolicy.RUNTIME)
\npublic @interface PreventDuplicateSubmit {
\n \/**
\n * \u6709\u6548\u671f（\u79d2），\u9ed8\u8ba4 10 \u79d2
\n *\/
\n int expire() default 10;
\n}<\/p>\n
public class DuplicateSubmitException extends RuntimeException {
\n public DuplicateSubmitException(String message) {
\n super(message);
\n }
\n}<\/p>\n
import org.aspectj.lang.ProceedingJoinPoint;
\nimport org.aspectj.lang.annotation.Around;
\nimport org.aspectj.lang.annotation.Aspect;
\nimport org.springframework.beans.factory.annotation.Autowired;
\nimport org.springframework.data.redis.core.StringRedisTemplate;
\nimport org.springframework.stereotype.Component;
\nimport org.springframework.web.context.request.RequestContextHolder;
\nimport org.springframework.web.context.request.ServletRequestAttributes;<\/p>\n
import javax.servlet.http.HttpServletRequest;
\nimport java.util.concurrent.TimeUnit;<\/p>\n
@Aspect
\n@Component
\npublic class PreventDuplicateSubmitAspect {<\/p>\n
@Autowired
\n private StringRedisTemplate redisTemplate;<\/p>\n
@Around("@annotation(prevent)")
\n public Object around(ProceedingJoinPoint joinPoint, PreventDuplicateSubmit prevent) throws Throwable {
\n HttpServletRequest request = ((ServletRequestAttributes) RequestContextHolder.currentRequestAttributes()).getRequest();<\/p>\n
\/\/ 1. \u4ece header \u6216\u53c2\u6570\u4e2d\u83b7\u53d6 token
\n String token = request.getHeader("X-Submit-Token");
\n if (token == null || token.trim().isEmpty()) {
\n throw new DuplicateSubmitException("\u7f3a\u5c11\u9632\u91cd\u63d0\u4ea4\u4ee4\u724c");
\n }<\/p>\n
\/\/ 2. \u6784\u5efa Redis Key（\u5efa\u8bae\u52a0\u4e0a\u7528\u6237\u6807\u8bc6，\u9632\u6b62\u8de8\u7528\u6237\u653b\u51fb）
\n String userId = getCurrentUserId(request); \/\/ \u4f2a\u4ee3\u7801，\u5b9e\u9645\u4ece token\/session \u83b7\u53d6
\n String redisKey = "submit:token:" + userId + ":" + token;<\/p>\n
\/\/ 3. \u5c1d\u8bd5\u83b7\u53d6\u5e76\u5220\u9664 token（\u539f\u5b50\u64cd\u4f5c）
\n Boolean exists = redisTemplate.opsForValue().setIfAbsent(redisKey, "used", prevent.expire(), TimeUnit.SECONDS);
\n if (Boolean.FALSE.equals(exists)) {
\n \/\/ token \u4e0d\u5b58\u5728\u6216\u5df2\u4f7f\u7528
\n throw new DuplicateSubmitException("\u8bf7\u52ff\u91cd\u590d\u63d0\u4ea4");
\n }<\/p>\n
\/\/ 4. \u653e\u884c
\n return joinPoint.proceed();
\n }<\/p>\n
\/\/ \u4f2a\u4ee3\u7801：\u83b7\u53d6\u5f53\u524d\u7528\u6237 ID（\u6839\u636e\u4f60\u7684\u8ba4\u8bc1\u4f53\u7cfb\u8c03\u6574）
\n private String getCurrentUserId(HttpServletRequest request) {
\n \/\/ \u793a\u4f8b：\u4ece JWT \u6216 Session \u4e2d\u83b7\u53d6
\n \/\/ return (String) request.getSession().getAttribute("userId");
\n return "user_123"; \/\/ \u4ec5\u7528\u4e8e\u6f14\u793a
\n }
\n}<\/p>\n
🔑 \u5173\u952e\u70b9：<\/p>\n
\/\/ \u9875\u9762\u52a0\u8f7d\u65f6
\nfetch('\/api\/submit-token')
\n .then(res => res.json())
\n .then(data => {
\n localStorage.setItem('submitToken', data.token);
\n });<\/p>\n
const token = localStorage.getItem('submitToken');
\nfetch('\/api\/order\/create', {
\n method: 'POST',
\n headers: {
\n 'Content-Type': 'application\/json',
\n 'X-Submit-Token': token \/\/ 👈 \u5173\u952e！
\n },
\n body: JSON.stringify(orderData)
\n})
\n.then(res => {
\n if (res.ok) {
\n \/\/ \u6210\u529f\u540e\u6e05\u7a7a token，\u9632\u6b62\u518d\u6b21\u4f7f\u7528
\n localStorage.removeItem('submitToken');
\n }
\n});<\/p>\n
@RestController
\n@RequestMapping("\/api")
\npublic class SubmitTokenController {<\/p>\n
@Autowired
\n private StringRedisTemplate redisTemplate;<\/p>\n
@GetMapping("\/submit-token")
\n public Map<String, String> getSubmitToken() {
\n String token = java.util.UUID.randomUUID().toString().replace("-", "");
\n \/\/ \u53ef\u9009：\u9884\u5b58 token（\u975e\u5fc5\u987b，\u56e0\u4e3a AOP \u4f1a setIfAbsent）
\n \/\/ redisTemplate.opsForValue().set("submit:prepare:" + token, "1", 60, TimeUnit.SECONDS);
\n return Map.of("token", token);
\n }
\n}<\/p>\n
💡 token \u65e0\u9700\u63d0\u524d\u5b58\u5165 Redis！AOP \u4e2d\u7684 setIfAbsent \u4f1a\u81ea\u52a8\u521b\u5efa\u3002<\/p>\n
\/\/ \u274c \u5355\u673a\u53ef\u7528，\u96c6\u7fa4\u73af\u5883\u4e0b session \u4e0d\u5171\u4eab！
\nsession.setAttribute("submitted", true);<\/p>\n
\u2705 \u6b63\u786e：\u5fc5\u987b\u7528 Redis \u7b49\u5206\u5e03\u5f0f\u5b58\u50a8\u3002<\/p>\n
\/\/ \u274c token 10 \u79d2\u5185\u53ef\u65e0\u9650\u6b21\u4f7f\u7528！
\nif (redis.hasKey(token)) {
\n return error;
\n}<\/p>\n
\u2705 \u6b63\u786e：\u4f7f\u7528\u5373\u5931\u6548（\u901a\u8fc7 setIfAbsent \u539f\u5b50\u64cd\u4f5c\u5b9e\u73b0）\u3002<\/p>\n
String redisKey = "submit:token:" + token; \/\/ \u274c \u4efb\u4f55\u4eba\u90fd\u80fd\u7528\u8fd9\u4e2a token！<\/p>\n
💥 \u98ce\u9669：\u6076\u610f\u7528\u6237\u83b7\u53d6 token \u540e，\u53ef\u963b\u6b62\u5176\u4ed6\u7528\u6237\u63d0\u4ea4！<\/p>\n
\u2705 \u6b63\u786e：key \u5fc5\u987b\u5305\u542b\u7528\u6237\u552f\u4e00\u6807\u8bc6\u3002<\/p>\n
| Token \u6cc4\u9732<\/td>\n | HTTPS \u4f20\u8f93，header \u4e0d\u8981\u5b58\u654f\u611f\u4fe1\u606f<\/td>\n<\/tr>\n |
| \u7528\u6237\u4f53\u9a8c<\/td>\n | \u524d\u7aef\u63d0\u4ea4\u540e\u7981\u7528\u6309\u94ae，\u907f\u514d\u7528\u6237\u72c2\u70b9<\/td>\n<\/tr>\n |
| \u9ad8\u5e76\u53d1<\/td>\n | Redis \u672c\u8eab\u652f\u6301\u9ad8\u5e76\u53d1，SETNX \u662f\u539f\u5b50\u64cd\u4f5c<\/td>\n<\/tr>\n |
| \u964d\u7ea7\u65b9\u6848<\/td>\n | Redis \u5b95\u673a\u65f6，\u53ef\u4e34\u65f6\u5173\u95ed\u9632\u91cd（\u8bb0\u5f55\u65e5\u5fd7\u544a\u8b66）<\/td>\n<\/tr>\n |
| \u76d1\u63a7<\/td>\n | \u7edf\u8ba1\u201c\u91cd\u590d\u63d0\u4ea4\u201d\u6b21\u6570，\u53d1\u73b0\u5f02\u5e38\u884c\u4e3a<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \n 🎯 \u516b\u3001\u603b\u7ed3：\u9632\u91cd\u63d0\u4ea4\u6838\u5fc3\u6d41\u7a0b<\/h3>\n\u524d\u7aef \u540e\u7aef \u2705 \u4f18\u70b9：<\/p>\n
|