过滤器常见应用——实现登陆注销

最新推荐文章于 2022-10-04 14:38:34 发布

GodAiro

最新推荐文章于 2022-10-04 14:38:34 发布

阅读量498

点赞数

分类专栏： Servlet学习文章标签：服务器运维

本文链接：https://blog.csdn.net/qq_44706176/article/details/122792850

版权

Servlet学习专栏收录该内容

18 篇文章 0 订阅

订阅专栏

用户登陆之后才能进入主页！用户注销后就不能进入主页了

用户登陆之后，向Session中放入用户的数据
进入主页的时候要判断用户是否已经登陆；要求：在过滤器中实现

这个小项目，用到的JSP页面有：登陆界面，首页，异常界面，登陆成功

登陆成功界面我是放在web下面的sys文件夹中

用到的Servlet有：LoginServlet、LogoutServlet

LoginServlet.java

package com.godairo.servlet;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class LoginServlet extends HttpServlet {

		@Override
		protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
				//获取前端请求的参数
				String username = req.getParameter("username");

				if (username.equals("admin")){ //登陆成功
						req.getSession().setAttribute("USER_SESSION",req.getSession().getId());
						resp.sendRedirect("/sys/success.jsp");
				}else {//登陆失败
						resp.sendRedirect("/error.jsp");
				}
		}

		@Override
		protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
				doGet(req, resp);
		}
}

LogoutServlet.java

package com.godairo.servlet;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class LogoutServlet extends HttpServlet {
		@Override
		protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
				Object user_session = request.getSession().getAttribute("USER_SESSION");
				
				if (user_session!=null){
						request.getSession().removeAttribute("USER_SESSION");
						response.sendRedirect("/Login.jsp");
				}else{
						response.sendRedirect("/Login.jsp");
				}
		}

		@Override
		protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
				doGet(req, resp);
		}
}

Login.jsp

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>Title</title>
</head>
<body>
    
    <h1>登陆</h1>
    
    <form action="/servlet/login" method="post">
        <input type="text" name="username">
        <input type="submit">
    </form>
    
</body>
</html>

index.jsp

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
  <head>
    <title>$Title$</title>
  </head>
  <body>
      <h1>当前有<span><%=this.getServletConfig().getServletContext().getAttribute("OnlineCount")%></span>人在线</h1>
  </body>
</html>

error.jsp

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>Title</title>
</head>
<body>
    <h1>错误页面！</h1>
    <h3>没有权限，用户名错误</h3>

    <p><a href="/Login.jsp">返回登陆页面</a></p>
    
</body>
</html>

success.jsp

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>Title</title>
</head>
<body>
    
    <h1>主页</h1>
    
    <p><a href="/servlet/logout">注销</a></p>
    
</body>
</html>

web.xml

<servlet>
                <servlet-name>LoginServlet</servlet-name>
                <servlet-class>com.godairo.servlet.LoginServlet</servlet-class>
        </servlet>

        <servlet-mapping>
                <servlet-name>LoginServlet</servlet-name>
                <url-pattern>/servlet/login</url-pattern>
        </servlet-mapping>

        <servlet>
                <servlet-name>LogoutServlet</servlet-name>
                <servlet-class>com.godairo.servlet.LogoutServlet</servlet-class>
        </servlet>

        <servlet-mapping>
                <servlet-name>LogoutServlet</servlet-name>
                <url-pattern>/servlet/logout</url-pattern>
        </servlet-mapping>

首次运行测试

到这里，进行的很成功，但是存在一个问题，我们注销后，返回到登陆界面，我们把登陆成功的路径复制到地址栏去运行，还是会进入登陆成功界面，这就说明，还没进行登陆就可以直接进入到登陆成功界面，这下我们需要进行拦截。

SysFilter.java

package com.godairo.filter;

import com.godairo.util.Constant;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class SysFilter implements Filter {
		public void init(FilterConfig filterConfig) throws ServletException {
				
		}

		public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
				HttpServletRequest request1 = (HttpServletRequest) request;
				HttpServletResponse response1 = (HttpServletResponse) response;
				if (request1.getSession().getAttribute(Constant.USER_SESSION)==null){
						response1.sendRedirect("/error.jsp");
				}


				chain.doFilter(request,response);
		}

		public void destroy() {

		}
}