使用过滤器实现权限设置

最新推荐文章于 2024-05-16 00:36:32 发布

Amazing66

最新推荐文章于 2024-05-16 00:36:32 发布

阅读量1k

点赞数 1

分类专栏：知识总结文章标签：过滤器

本文链接：https://blog.csdn.net/Amazing66/article/details/117934970

版权

知识总结专栏收录该内容

44 篇文章 0 订阅

订阅专栏

思路

设置一个登录页面当我们信息输入正确时，可以进去主页

当我们信息输入错误时，进入错误界面

当我们注销时，就不能再进到主页（通过过滤器来实现）

首先编写 login界面、success界面、error界面

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>success</title>
</head>
<body>
<div align="center"   >
    <h1>主页</h1>

</div>
<div align="right"><a href="/servlet/logout" > 注销</a></div>

</body>
</html>





<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>errow</title>
</head>
<body>
<div align="center"   >
    <h1>账号或密码输入错误</h1>

</div>
<div align="right"><a href="login.jsp"> 返回登陆</a></div>
</body>
</html>



<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>login</title>
</head>
<body>
<div align="center"   >
    <h1>登录界面</h1>


<form action="/servlet/login" method="post">
   账号 <input type="text" name="username" value="${username}">
    <input type="submit" name="提交">
</form>
</div>
</body>
</html>

然后我们编写servletl 来处理登录和注销事务

处理登录

import com.llf.pojo.Contant;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class servletLogin extends HttpServlet {
    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        String username = req.getParameter("username");
        /**
         *  判断输入的信息是否与admin相等 如果相等 重定向到成功界面
         *  如果失败 重定向到错误界面
         */
        if (username.equals("admin")){
            //登陆成功
            req.getSession().setAttribute(Contant.user1,req.getSession().getId());
            resp.sendRedirect("/sys/success.jsp");
        }else {
            //登录失败
            resp.sendRedirect("/errow.jsp");
        }
    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
       doGet(req, resp);
    }
}

处理注销

import com.llf.pojo.Contant;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class servletLoginOut  extends HttpServlet {
    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        Object attribute = req.getSession().getAttribute(Contant.user1);
        /**
         * 判断是否为空，然后注销后重定向到登录界面
         */
        if (attribute!=null){
            req.getSession().removeAttribute(Contant.user1);
            resp.sendRedirect("/login.jsp");
        }else {
            resp.sendRedirect("/login.jsp");
        }
    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doGet(req, resp);
    }
}

在这里方面我们后期的更新、修改我们将获得的Attribute值设置为变量并创建一个实体类用来对其初始化

最后创建过滤器来实现注销后不能进入主页的功能

import com.llf.pojo.Contant;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import java.io.IOException;

public class SysFilter implements Filter {

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    @Override
    public void doFilter(ServletRequest req, ServletResponse resp, FilterChain Chain) throws IOException, ServletException {

        /**
         * 因为过滤器中的ServletRequest、ServletResponse不能得到Session的值，
         * 所以我们需要对其进行强制转换，转换成子类HttpServletRequest、 HttpServletResponse
         */
        HttpServletRequest req1 = (HttpServletRequest) req;
        HttpServletResponse resp1 = (HttpServletResponse) resp;
       
        // 判断Attribute的值是否为空 空值的话就转到错误页面
        if (req1.getSession().getAttribute(Contant.user1)==null){
            resp1.sendRedirect("errow.jsp");
        }
        Chain.doFilter(req,resp);
    }

    @Override
    public void destroy() {

    }
}

所有工作完成后开始写servlet注册和映射，这里需要注意映射路径一定要和jsp中的链接路径一致，否则页面跳转就会报500的错误

<servlet>
    <servlet-name>servletLogin</servlet-name>
    <servlet-class>com.llf.Servlet.servletLogin</servlet-class>
</servlet>
    <servlet-mapping>
        <servlet-name>servletLogin</servlet-name>
        <url-pattern>/servlet/login</url-pattern>
    </servlet-mapping>
    <servlet>
        <servlet-name>servletLoginOut</servlet-name>
        <servlet-class>com.llf.Servlet.servletLoginOut</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>servletLoginOut</servlet-name>
        <url-pattern>/servlet/logout</url-pattern>
    </servlet-mapping>
    <filter>
        <filter-name>SysFilter</filter-name>
        <filter-class>com.llf.Filter.SysFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>SysFilter</filter-name>
        <url-pattern>/sys/*</url-pattern>
    </filter-mapping>

最后演示成果