您可以使用过滤器。

public class MyFilter extends OncePerRequestFilter {
    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
        if (request.getRequestURI().contains("secret") && env.getProperty("environment").equals("Production"))
            response.sendError(HttpStatus.UNAUTHORIZED.value(), "Unauthorized!");
        else
            filterChain.doFilter(request, response);
    }
}