java 获取HttpRequest Header 的几种方法

 

再加一个方法

 

Spring mvc中的@RequestHeader

  •   @RequestHeader 注解,可以把Request请求header部分的值绑定到方法的参数上。 

例子如下: 

Java代码  收藏代码

  1. @RequestMapping(value = "/example", method = RequestMethod.GET)  
  2.    public String  getHello(@RequestHeader ("host") String hostName,  
  3.         @RequestHeader ("Accept") String acceptType,  
  4.         @RequestHeader ("Accept-Language") String acceptLang,  
  5.         @RequestHeader ("Accept-Encoding") String acceptEnc,  
  6.         @RequestHeader ("Cache-Control") String cacheCon,  
  7.         @RequestHeader ("Cookie") String cookie,  
  8.         @RequestHeader ("User-Agent") String userAgent)  
  9.    {  
  10.     System.out.println("Host : " + hostName);  
  11.     System.out.println("Accept : " + acceptType);  
  12.     System.out.println("Accept Language : " + acceptLang);  
  13.     System.out.println("Accept Encoding : " + acceptEnc);  
  14.     System.out.println("Cache-Control : " + cacheCon);  
  15.     System.out.println("Cookie : " + cookie);  
  16.     System.out.println("User-Agent : " + userAgent);  
  17.        return "example";  
  18.    } 

 

 

在开发应用程序的过程中,如果有多个应用,通常会通过一个portal 门户来集成,这个portal  是所有应用程序的入口,用户一旦在portal 登录之后,进入另外一个系统,就需要类似的单点登录(SSO). 进入各个子系统的时候,就不需要再次登录, 当然类似的功能,你可以通过专业的单点登录软件来实现,也可以自己写数据库token 等方式来实现。其实还有一个比较简单的方法,就是通过 portal 封装已经登录过的用户的消息,写到http header 之中,然后把请求forward 到各个子系统中去,而各子系统从 http header 中获取用户名,作为是否登录过的校验或者合法的校验。总结了几种处理http Header 的方法:


利用 HttpServletRequest


import javax.servlet.http.HttpServletRequest;
  //...
  private HttpServletRequest request;
  //get request headers
  private Map<String, String> getHeadersInfo() {
    Map<String, String> map = new HashMap<String, String>();
    Enumeration headerNames = request.getHeaderNames();
    while (headerNames.hasMoreElements()) {
        String key = (String) headerNames.nextElement();
        String value = request.getHeader(key);
        map.put(key, value);
    }
    return map;
  }
一个典型的例子如下:


"headers" : {
    "Host" : "yihaomen.com",
    "Accept-Encoding" : "gzip,deflate",
    "X-Forwarded-For" : "66.249.x.x",
    "X-Forwarded-Proto" : "http",
    "User-Agent" : "Mozilla/5.0 (compatible; Googlebot/2.1; +
http://www.google.com/bot.html
)",
    "X-Request-Start" : "1389158003923",
    "Accept" : "*/*",
    "Connection" : "close",
    "X-Forwarded-Port" : "80",
    "From" : "googlebot(at)googlebot.com"
}
获取 user-agent


import javax.servlet.http.HttpServletRequest;
  //...
  private HttpServletRequest request;
  private String getUserAgent() {
    return request.getHeader("user-agent");
  }




一个典型的例子如下:


Mozilla/5.0 (compatible; Googlebot/2.1; +
http://www.google.com/bot.html
)
利用 spring mvc 获取  HttpRequest Header 的例子 




import java.util.Enumeration;
import java.util.HashMap;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.servlet.ModelAndView;
@Controller
@RequestMapping("/site")
public class SiteController {
    @Autowired
    private HttpServletRequest request;
    @RequestMapping(value = "/{input:.+}", method = RequestMethod.GET)
    public ModelAndView getDomain(@PathVariable("input") String input) {
        ModelAndView modelandView = new ModelAndView("result");
        modelandView.addObject("user-agent", getUserAgent());
        modelandView.addObject("headers", getHeadersInfo());
        return modelandView;
    }
    //get user agent
    private String getUserAgent() {
        return request.getHeader("user-agent");
    }
    //get request headers
    private Map<String, String> getHeadersInfo() {
        Map<String, String> map = new HashMap<String, String>();
        Enumeration headerNames = request.getHeaderNames();
        while (headerNames.hasMoreElements()) {
            String key = (String) headerNames.nextElement();
            String value = request.getHeader(key);
            map.put(key, value);
        }
        return map;
    }
}
也许有人会说,Http Header  是可以模拟的,那么自己可以构造一个用来欺骗这些系统, 是的,的确是这样,所以在用Http Header 来传值得时候,一定要记得,所有的请求都必须经过 portal 来处理,然后 forward 到各子系统,就不会出现这个问题了。因为portal 首先拦截用户发起的所有的请求,如果是构造的用户,在portal 的sessiion 也是没有记录的,仍然会跳转到登录页面,如果在protal 的 session 中记录,而且  Http Header 中也有记录,那么在子系统就是合法的用户,然后自己可以根据一些要求处理业务逻辑了






JSP/Java获取HTTP header信息(request)例子


<%
//header.jsp
out.println("Protocol: " + request.getProtocol() + "<br>");
out.println("Scheme: " + request.getScheme() + "<br>");
out.println("Server Name: " + request.getServerName() + "<br>" );
out.println("Server Port: " + request.getServerPort() + "<br>");
out.println("Protocol: " + request.getProtocol() + "<br>");
out.println("Server Info: " + getServletConfig().getServletContext().getServerInfo() + "<br>");
out.println("Remote Addr: " + request.getRemoteAddr() + "<br>");
out.println("Remote Host: " + request.getRemoteHost() + "<br>");
out.println("Character Encoding: " + request.getCharacterEncoding() + "<br>");
out.println("Content Length: " + request.getContentLength() + "<br>");
out.println("Content Type: "+ request.getContentType() + "<br>");
out.println("Auth Type: " + request.getAuthType() + "<br>");
out.println("HTTP Method: " + request.getMethod() + "<br>");
out.println("Path Info: " + request.getPathInfo() + "<br>");
out.println("Path Trans: " + request.getPathTranslated() + "<br>");
out.println("Query String: " + request.getQueryString() + "<br>");
out.println("Remote User: " + request.getRemoteUser() + "<br>");
out.println("Session Id: " + request.getRequestedSessionId() + "<br>");
out.println("Request URL: " + request.getRequestURL() + "<br>");
out.println("Request URI: " + request.getRequestURI() + "<br>");
out.println("Servlet Path: " + request.getServletPath() + "<br>");
out.println("Created : " + session.getCreationTime() + "<br>");
out.println("LastAccessed : " + session.getLastAccessedTime() + "<br>");


out.println("Accept: " + request.getHeader("Accept") + "<br>");
out.println("Host: " + request.getHeader("Host") + "<br>");
out.println("Referer : " + request.getHeader("Referer") + "<br>");
out.println("Accept-Language : " + request.getHeader("Accept-Language") + "<br>");
out.println("Accept-Encoding : " + request.getHeader("Accept-Encoding") + "<br>");
out.println("User-Agent : " + request.getHeader("User-Agent") + "<br>");
out.println("Connection : " + request.getHeader("Connection") + "<br>");
out.println("Cookie : " + request.getHeader("Cookie") + "<br>");
%>


关于request.getHeader("Referer")的说明


  request.getHeader("Referer")获取来访者地址。只有通过链接访问当前页的时候,才能获取上一页的地址;否则request.getHeader("Referer")的值为Null,通过window.open打开当前页或者直接输入地址,也为Null。

相关推荐
©️2020 CSDN 皮肤主题: 技术黑板 设计师:CSDN官方博客 返回首页