Write annotation and a request interceptor

annotation.java

/**
 * Annotation to mark a controller handler as requiring secure token checking
 */
@Target({ElementType.METHOD, ElementType.TYPE})
@Retention(RetentionPolicy.RUNTIME)
public @interface SecureToken {
    String TOKEN_PARAMETER_NAME = "secureToken";

    String value();
}