教你一步步做 Restful程序（5）

教你一步步做 Restful程序（5）

2012年12月28日

  加入简单的安全控制：

  写一个过滤器，对非法用户进行过滤

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26

/** * @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain) */ public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { HttpServletRequest req = (HttpServletRequest)request; String path = req.getRequestURI(); System.out.println("你访问的资源路径是：" + req.getRequestURI()); if (req.getSession().getAttribute("session_key") != null) { chain.doFilter(request, response); return; } else { if (path.indexOf("/userManager/") != -1) { HttpServletResponse resp = (HttpServletResponse)response; resp.sendRedirect(req.getContextPath() + "/error.html"); return; } chain.doFilter(request, response); } }

  并在web.xml中添加：

web.xml

1 2 3 4 5 6 7 8 9

<filter> <display-name>AuthFilter</display-name> <filter-name>AuthFilter</filter-name> <filter-class>com.my.jxc.filter.AuthFilter</filter-class> </filter> <filter-mapping> <filter-name>AuthFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping>

本文转载于：http://yanyaner.com/blog/2012/12/28/restful5/

刘江华的博客