Java使用validation拦截非法提交的数据的方法实现

 <dependency>
    <groupId>org.springframework.boot</groupId>
     <artifactId>spring-boot-starter-validation</artifactId>
 </dependency>

import lombok.Data;
import org.hibernate.validator.constraints.URL;

import javax.validation.constraints.NotBlank;
import javax.validation.constraints.NotNull;

/**
 * @author: 
 * @Desc:
 * @create: 2025-04-14 10:32
 **/
@Data
public class StoreDeviceDTO {

    @NotNull(message = "storeId不能为空")
    private Long storeId;

    @NotBlank(message = "设备名称不能为空")
    private String deviceName;

    @NotBlank(message = "设备图片不能为空")
    @URL(message = "设备图片必须是一个合法的URL地址")
    private String deviceImage;
}

@PostMapping("/addApply")
public AjaxResult add(@Valid @RequestBody StoreApplyDTO storeApplyDTO)
{
	storeApplyService.saveStoreApply(storeApplyDTO);
	return AjaxResult.success();
}

@RestController
@Validated
public class StoreDeviceController {
    @Autowired
    private IStoreDeviceService storeDevicesService;

   
    @PostMapping("/saveDevices")
    public AjaxResult saveDevices(@RequestBody @Validated List<@Valid StoreDeviceDTO> deviceDTOList) {
        storeDevicesService.saveDevices(deviceDTOList);
        return AjaxResult.success();
    }

}

import org.springframework.validation.annotation.Validated;
import javax.validation.Valid;

@RestControllerAdvice
public class GlobalExceptionHandler
{
   /**
     * 自定义验证异常
     */
    @ExceptionHandler(MethodArgumentNotValidException.class)
    public Object handleMethodArgumentNotValidException(MethodArgumentNotValidException e)
    {
        //log.error(e.getMessage(), e);
        String message = e.getBindingResult().getFieldError().getDefaultMessage();
        return AjaxResult.error(message);
    }
}

{
    "msg": "门店id不能为空",
    "code": 500
}

{
    "msg": "saveDevices.deviceDTOList[0].deviceName: 设备名称不能为空, saveDevices.deviceDTOList[0].deviceImage: 设备图片必须是一个合法的URL地址",
    "code": 500
}

//新增
public interface AddGroup {
}
//修改
public interface UpdateGroup {
}

import com.bbc.validate.group.AddGroup;
import com.bbc.validate.group.UpdateGroup;
import io.swagger.annotations.ApiModel;
import io.swagger.annotations.ApiModelProperty;
import lombok.Data;

import javax.validation.constraints.*;
import java.util.List;

/**
 * @author: 
 * @Desc:
 * @create: 2025-03-22 14:34
 **/
@Data
@ApiModel(description = "认证项目请求体")
public class CertificateDTO {

    @ApiModelProperty("申请认证ID")
    @NotNull(message = "申请认证ID不能为空",groups ={UpdateGroup.class})
    private Long id;

    @NotNull(message = "storeId不能为空",groups ={AddGroup.class,UpdateGroup.class})
    private Long storeId;

    @NotBlank(message = "认证项目不能为空",groups ={AddGroup.class,UpdateGroup.class})
    @ApiModelProperty("认证项目")
    private String project;

    @NotNull(message = "请上传证书材料", groups = {AddGroup.class})
    @Size(min = 1, max = 9, message = "请上传1-9张证书材料图片", groups = {AddGroup.class, UpdateGroup.class})
    @ApiModelProperty("认证项目材料图片(1-9张)")
    private List<String> certificateMaterials;

    @Size(max = 200, message = "认证说明最多200个字符")
    @ApiModelProperty("认证说明/备注(最多200字)")
    private String instructions;
}

@ApiOperation("新增认证管理")
@Log(title = "认证管理", businessType = BusinessType.INSERT)
@PostMapping("/saveProject")
@RepeatSubmit(interval = 5000, message = "不允许重复提交，请稍候再试")
public AjaxResult add(@Validated(AddGroup.class) @RequestBody CertificateDTO certificateDTO)
{
	certificateService.saveCertificateProject(certificateDTO);
	return AjaxResult.success();
}

/**
 * 修改认证管理
 */
@ApiOperation("修改认证管理")
@Log(title = "认证管理", businessType = BusinessType.UPDATE)
@PutMapping("/editProject")
public AjaxResult edit(@Validated(UpdateGroup.class) @RequestBody CertificateDTO certicateDTO)
{
	certificateService.updateCertificateProject(certicateDTO);
	return AjaxResult.success();
}

public class CertificateDTO {
    @NotEmpty(message = "证书材料不能为空", groups = {AddGroup.class})  // 有分组
    private List<String> certificateMaterials;
    
    @Size(max = 200)  // 无分组
    private String instructions;
}

@PostMapping
public void save(@RequestBody @Valid StoreCertificateDTO dto) {
    // 只会校验instructions字段
    // certificateMaterials不会被校验，因为未指定AddGroup分组
}

@RestController
@Validated(AddGroup.class)  // 指定默认分组
public class CertificateController {
    @PostMapping
    public void save(@RequestBody @Valid CertificateDTO dto) {
        // 现在会校验AddGroup分组和没有分组的约束
    }
}

@PostMapping
public void save(@RequestBody @Validated(AddGroup.class) StoreCertificateDTO dto) {
    // 明确指定校验分组
}

@RestController
@Validated  // 类级别启用校验
public class CertificateController {
    @PostMapping("/add")
    public void add(@RequestBody @Validated(AddGroup.class) StoreCertificateDTO dto) {
        // 添加操作使用AddGroup分组
    }
    
    @PostMapping("/update")
    public void update(@RequestBody @Validated(UpdateGroup.class) StoreCertificateDTO dto) {
        // 更新操作使用UpdateGroup分组
    }
}