Filter实现权限拦截

Massimo_ycw

已于 2022-07-09 14:02:51 修改

阅读量190

点赞数

分类专栏： JavaWeb 文章标签：过滤器 Filter java

于 2022-07-06 17:18:05 首次发布

本文链接：https://blog.csdn.net/Massimo__JAVA/article/details/125643731

版权

JavaWeb 专栏收录该内容

22 篇文章 2 订阅

订阅专栏

一、要求

用户登录之后才能进入主页！用户注销后就不能进入主页了！

1.1、登录页面

在web新建login.jsp:

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>Title</title>
</head>
<body>
    <h1>登录</h1>

    <form action="servlet/login" method="post">
        <input type="text" name="username">
        <input type="submit">
    </form>
</body>
</html>

1.2、编写LoginServlet处理登录请求

package com.massimo.test;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class LoginServlet extends HttpServlet {
    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        //获取前端请求的参数
        String userName = req.getParameter("username");

        if (userName.equals("Massimo")){//登录成功
            req.getSession().setAttribute("USER_SESSION",req.getSession().getId());
            resp.sendRedirect("/sys/success.jsp");
        }else {//登录失败
            resp.sendRedirect("/error.jsp");
        }
    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doGet(req, resp);
    }
}


    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doGet(req, resp);
    }
}

1.3、在web.xml中注册

<servlet>
        <servlet-name>loginServlet</servlet-name>
        <servlet-class>com.massimo.test.LoginServlet</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>loginServlet</servlet-name>
        <url-pattern>/servlet/login</url-pattern>
    </servlet-mapping>

二、编写登录成功页面

2.1、在web下新建sys目录，然后再sys中新建success.jsp:

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title></title>
</head>
<body>
    <h1>主页</h1>

    <a href="/servlet/logout">注销</a>
</body>
</html>

2.2、编写LogoutServlet处理注销

package com.massimo.test;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class LogoutServlet extends HttpServlet {
    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        Object user_session = req.getSession().getAttribute("USER_SESSION");
        if (user_session != null){
            req.getSession().removeAttribute("USER_SESSION");
            resp.sendRedirect("/login.jsp");
        }
    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doGet(req, resp);
    }
}

2.3、再web.xml中注册

 <servlet>
        <servlet-name>logoutServlet</servlet-name>
        <servlet-class>com.massimo.test.LogoutServlet</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>logoutServlet</servlet-name>
        <url-pattern>/servlet/logout</url-pattern>
    </servlet-mapping>

三、编写错误页面

3.1、再web下新建error.jsp:

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>Title</title>
</head>
<body>
    <h1>错误</h1>
    <h3>没有权限，或用户名错误</h3>

    <a href="/login.jsp">返回登录页面</a>
</body>
</html>

四、编写系统过滤器

4.1、代码

package com.massimo.filter;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class SysFilter implements Filter {
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        //ServletRequest  HttpServletRequest
        HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;

        if (request.getSession().getAttribute("USER_SESSION") == null){
            response.sendRedirect("/error.jsp");
        }
        filterChain.doFilter(request,response);

    }

    public void destroy() {

    }
}

4.2、在web.xml中注册

<filter>
        <filter-name>SysFilter</filter-name>
        <filter-class>com.massimo.filter.SysFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>SysFilter</filter-name>
        <url-pattern>/sys/*</url-pattern>
    </filter-mapping>