import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.nio.file.Files;
import java.nio.file.Paths;
import java.util.List;
import java.util.Map;
public class RestrictionInterceptor implements HandlerInterceptor {
    private static final String RESTRICTION_FILE_PATH = "/path/to/restriction.json";
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        // Read the restriction JSON file
        String restrictionJson = new String(Files.readAllBytes(Paths.get(RESTRICTION_FILE_PATH)));
        // Parse the JSON into a list of restrictions
        List<Map<String, Object>> restrictions = new ObjectMapper().readValue(restrictionJson, new TypeReference<List<Map<String, Object>>>() {});
        // Get the request URL and parameters
        String requestUrl = request.getRequestURI();
        Map<String, String[]> requestParams = request.getParameterMap();
        // Check if the request matches any restriction
        for (Map<String, Object> restriction : restrictions) {
            String restrictionUrl = (String) restriction.get("url");
            Map<String, Object> restrictionParams = (Map<String, Object>) restriction.get("params");
            // Check if the request URL matches the restriction URL
            if (requestUrl.equals(restrictionUrl)) {
                // Check if the request parameters match the restriction parameters
                boolean paramsMatch = true;
                for (Map.Entry<String, Object> paramEntry : restrictionParams.entrySet()) {
                    String paramName = paramEntry.getKey();
                    Object paramValue = paramEntry.getValue();
                    if (!requestParams.containsKey(paramName) || !requestParams.get(paramName)[0].equals(paramValue)) {
                        paramsMatch = false;
                        break;
                    }
                }
                // If both URL and parameters match, allow the request
                if (paramsMatch) {
                    return true;
                }
            }
        }
        // If no restriction match found, reject the request
        response.sendError(HttpServletResponse.SC_FORBIDDEN, "Access denied");
        return false;
    }
    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
        // This method is called after the handler is executed
    }
    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
        // This method is called after the complete request is finished
    }
}

import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
@Configuration
public class WebConfig extends WebMvcConfigurerAdapter {
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(new RestrictionInterceptor()).addPathPatterns("/**");
    }
}