filter 登陆验证 java ee

在登入验证的servlet中
如果用户输入正确的账号密码，就跳转 ，并且把用户名以"userName"放进session

request.getSession().setAttribute("userName", name);

通过filter实现登录验证

package filter;
 
import java.io.IOException;
import java.text.SimpleDateFormat;
import java.util.Date;
 
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
 
public class AuthFilter implements Filter {
 
    @Override
    public void destroy() {
 
    }
 
    @Override
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain)
            throws IOException, ServletException {
        HttpServletRequest request = (HttpServletRequest) req;
        HttpServletResponse response = (HttpServletResponse) res;
 
        String uri = request.getRequestURI();//获取uri
        
        if (uri.endsWith("login.html")) {
            chain.doFilter(request, response);
            return;
        }
         //首先判断是否是访问的login.html
         //因为这两个页面就是在还没有登陆之前就需要访问的
         
        String userName = (String) request.getSession().getAttribute("userName");
        if (null == userName) {
            response.sendRedirect("login.html");
            return;
        }
        //从Session中获取userName，如果没有，就表示不曾登陆过，跳转到登陆页面。
        chain.doFilter(request, response);
    }
 
    @Override
    public void init(FilterConfig arg0) throws ServletException {
 
    }
 
}