import org.springframework.cloud.gateway.filter.GatewayFilterChain;
import org.springframework.cloud.gateway.filter.GlobalFilter;
import org.springframework.core.io.buffer.DataBufferUtils;
import org.springframework.http.HttpStatus;
import org.springframework.http.server.reactive.ServerHttpResponse;
import org.springframework.web.server.ServerWebExchange;
import reactor.core.publisher.Mono;
 
public class CustomGlobalFilter implements GlobalFilter {
 
    @Override
    public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) {
        ServerHttpResponse response = exchange.getResponse();
 
        // 自定义逻辑,例如检查请求头是否包含特定信息
        String headerValue = exchange.getRequest().getHeaders().getFirst("X-My-Header");
        if (headerValue == null || !headerValue.equals("expected-value")) {
            // 如果请求头不匹配,则返回403 Forbidden响应
            response.setStatusCode(HttpStatus.FORBIDDEN);
            return DataBufferUtils.join(response.getBufferFactory())
                    .flatMap(buffer -> {
                        return response.writeWith(Mono.just(buffer));
                    });
        }
 
        // 如果请求头匹配,则继续执行后续过滤器链
        return chain.filter(exchange);
    }
}这段代码定义了一个自定义全局过滤器,用于检查进入网关的请求是否包含特定的请求头和值。如果请求头不匹配,过滤器会直接返回403 Forbidden响应;如果匹配,则继续执行后续的过滤器链。这是一个简单的权限控制示例,可以根据实际需求进行扩展和修改。