Java for Web学习笔记（四三）：Filter（5）用于认证

最新推荐文章于 2021-06-03 11:48:47 发布

恺风

最新推荐文章于 2021-06-03 11:48:47 发布

阅读量1k

点赞数

分类专栏： JAVA 读书笔记愷风（Wei）之Java for Web学习笔记

本文链接：https://blog.csdn.net/flowingflying/article/details/60960296

版权

读书笔记同时被 3 个专栏收录

256 篇文章 10 订阅

订阅专栏

JAVA

150 篇文章 2 订阅

订阅专栏

愷风（Wei）之Java for Web学习笔记

143 篇文章 193 订阅

订阅专栏

一个简单的认证Filter

简单的Filter，登录界面为/login，如果登录成功，session中带有username。

public class AuthenticationFilter implements Filter {

	public void init(FilterConfig fConfig) throws ServletException { }

	public void destroy() {	}

	public void doFilter(ServletRequest request,ServletResponse response,FilterChain chain) throws IOException,ServletException{
		HttpSession session = ((HttpServletRequest)request).getSession(false);
		if(session == null || session.getAttribute("username") == null){
			System.out.println("redirect to /login ... ");
			((HttpServletResponse)response).sendRedirect("/login");
		}else{
			System.out.println("username = "  + session.getAttribute("username"));
			chain.doFilter(request, response);
		}		
	}
}

定义Filter

采用代码设置方式，对/sessions，/tickets的url要求经过认证的filter。

public class Configurator implements ServletContextListener {

    public void contextDestroyed(ServletContextEvent sce)  { 
    }

    public void contextInitialized(ServletContextEvent sce)  { 
         ServletContext context = sce.getServletContext();
         FilterRegistration.Dynamic registration = context.addFilter("AuthenticationFilter", AuthenticationFilter.class);
         //registration.setAsyncSupported(true);
         registration.addMappingForUrlPatterns(null, false, "/sessions","/tickets");
    }	
}