登陆过滤器控制登陆

最近在工作中老大让给项目用过滤器加登陆的认证跳转，就做了一个简单的过滤，新人菜鸟第一次写这个，如有错误请多多指正。

1.web.xml的配置

<filter>
  <description>登录过滤器</description>
  <filter-name>loginFilter</filter-name>
  <filter-class>com.fms.util.LoginInterceptor</filter-class>
  <init-param>
    <param-name>passURL</param-name>
    <param-value>index.z,manager.z,manager,css,image,javascript,font</param-value>
  </init-param>
  <init-param>
    <param-name>redirectURL</param-name>
    <param-value>index.z</param-value>
  </init-param>
</filter>
<filter-mapping>
  <filter-name>loginFilter</filter-name>
  <url-pattern>/*</url-pattern>
</filter-mapping>

这里主要设置可访问认证通过可访问的url以及认证失败重定向的url

2.Java代码中初始化过滤器

package com.fms.util;


import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.IOException;
import java.util.ArrayList;
import java.util.List;

/**
 * Created by xiaobai on 2018/12/13.
 */
public class LoginInterceptor implements Filter{

    /**
     * 保存不拦截的url
     */
    private static List<String> passUrls = new ArrayList<>();

    /**
     * 上下文
     */
    private String ctxPath = null;

    /**
     * 重定向url
     */
    private static String redirectUrl = "";


    /**
     * 过滤器初始化方法
     *
     * @param filterConfig
     * @throws ServletException
     */
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {

        // 获取WEB.XML中的初始化参数
        String ignoreURL = filterConfig.getInitParameter("passURL");
        redirectUrl = filterConfig.getInitParameter("redirectURL");

        // 保存不拦截的url
        String[] ignoreURLArray = ignoreURL.split(",");
        for (String url : ignoreURLArray) {
        //url.trim()方法是用来去掉String中的前后空格的
            passUrls.add(url.trim());
        }
        ctxPath = filterConfig.getServletContext().getContextPath();
        System.out.println("ctx = " + ctxPath);
    }

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {

        HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;

        // 请求的url
        String url = request.getRequestURI();
        // 相对路径
        String subUrl = url.substring(ctxPath.length() + 1);

        for (String urlStr : passUrls) {
            // 如果匹配, 则放行
            if (subUrl.indexOf(urlStr) > -1) {
                filterChain.doFilter(request, response);
                return;
            }
        }

        // 获得session
        HttpSession session = request.getSession();
        // 从session中获取SessionKey对应值,若值不存在,则重定向到redirectUrl
        Object user = session.getAttribute("user");
        if (user != null) {
            filterChain.doFilter(request, response);
        } else {
            response.sendRedirect(ctxPath + "/" + redirectUrl);
        }
    }

    @Override
    public void destroy() {

    }
}

下来我们就可以写登陆验证的接口了，验证成功后，我们只要把需要的用户信息存入session中就ok了