Filter实现权限拦截

最新推荐文章于 2024-01-31 15:52:58 发布

荭色海湾

最新推荐文章于 2024-01-31 15:52:58 发布

阅读量112

点赞数 1

分类专栏： javaweb 文章标签： servlet java html

本文链接：https://blog.csdn.net/qq_53374893/article/details/130438091

版权

javaweb 专栏收录该内容

33 篇文章 0 订阅

订阅专栏

登录成功实现重定向

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>Title</title>
</head>
<body>
<h1>登录</h1>
<form action="/servlet/login">
    <input type="text" name="username">
    <input type="submit" value="登录 ">


</form>
</body>
</html>

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>Title</title>
</head>
<body>
<h1>用户名错误，失败</h1>
</body>
</html>

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>Title</title>
</head>
<body>
<h1>主页</h1>
</body>
</html>

package com.kuang.servlet;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class ServletLogin extends HttpServlet {
    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        String username = req.getParameter("username");
        if (username.equals("admin")){
            req.getSession().setAttribute("USER_SESSION",req.getSession().getId());
            resp.sendRedirect("/sys/succsess.jsp");
        }else{
            resp.sendRedirect("/error.jsp");
        }
    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doGet(req, resp);
    }
}

<servlet>
    <servlet-name>ServletLogin</servlet-name>
    <servlet-class>com.kuang.servlet.ServletLogin</servlet-class>
</servlet>
    <servlet-mapping>
        <servlet-name>ServletLogin</servlet-name>
        <url-pattern>/servlet/login</url-pattern>
    </servlet-mapping>

通常不会注销Session

而是把Session里的键值对删掉

package com.kuang.servlet;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class ServletLoginOut extends HttpServlet {
    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        Object user_session = req.getSession().getAttribute("USER_SESSION");
        if (user_session!=null){
            req.getSession().removeAttribute("USER_SESSION");
            resp.sendRedirect("/Login.jsp");
        }
    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doGet(req, resp);
    }
}

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
    <title>Title</title>
</head>
<body>
<h1>主页</h1>
<p><a href="/servlet/loginout">注销</a></p>
</body>
</html>

    <servlet>
        <servlet-name>ServletLoginout</servlet-name>
        <servlet-class>com.kuang.servlet.ServletLoginOut</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>ServletLoginout</servlet-name>
        <url-pattern>/servlet/loginout</url-pattern>
    </servlet-mapping>

过滤器实现权限拦截

是通过获取session的Attribute里的键值对，如果为空代表没有登录，则重定向至错误页面

package com.kuang.filter;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class SysFilter implements Filter {
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    @Override
    public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws IOException, ServletException {
        HttpServletRequest request = (HttpServletRequest) req;
        HttpServletResponse response = (HttpServletResponse) resp;
        if(request.getSession().getAttribute("USER_SESSION")==null){
            response.sendRedirect("/error.jsp");
        }
        chain.doFilter(request,response);
    }

    @Override
    public void destroy() {

    }
}

    <filter>
        <filter-name>SysFilter</filter-name>
        <filter-class>com.kuang.filter.SysFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>SysFilter</filter-name>
        <!--只要是/sys的任何请求，会经过这个过滤器-->
        <url-pattern>/sys/*</url-pattern>
    </filter-mapping>