Java过滤器验证登录用户

1.首先写一个权限过滤filter类,实现Filter接口

/*首先写一个权限过滤filter*/
import javax.servlet.Filter;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.FilterChain;
import java.io.IOException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import javax.servlet.http.HttpServletResponse;

public class RightFilter
    implements Filter {
public void init(FilterConfig filterConfig) throws ServletException {
}

public void doFilter(ServletRequest request, ServletResponse response,
                       FilterChain chain) throws IOException, ServletException {
    HttpServletRequest req = (HttpServletRequest) request;
    HttpServletResponse res = (HttpServletResponse) response;
   
    HttpSession session = req.getSession(true);
    String path = req.getRequestURI();

    //从session里取的用户名信息
    String username = (String) session.getAttribute("username");

for (int i = 0; i < Constants.NoFilter_Pages.length; i++) {

   if (path.indexOf(Constants.NoFilter_Pages[i]) > -1) {
    chain.doFilter(req, res);
    return;
   }
}
   
    //判断如果没有取到用户信息,就跳转到登陆页面
    if (username == null || "".equals(username)) {
      //跳转到登陆页面
      res.sendRedirect(" http://"+req.getHeader("Host")+"/login.jsp ");//这里是返回域名的根目录地址，若直接返回当前的目录下的文件，则用res.sendRedirect("/login.jsp")
    }
    else {
      //已经登陆,继续此次请求
      chain.doFilter(request,response);
    }
}

public void destroy() {
}
}

2.创建类Constants.java，里面写的是无需过滤的页面

public class Constants {

public Constants() {
   }

//无需过滤的页面
    public static String[] NoFilter_Pages = {
       "/index.jsp",
       "/login.jsp",
       
   };
  
}

3.然后在web.xml里配置需要登陆权限验证的JSP文件:
     a.如果是某个具体的JSP文件(如a.jsp)需要登陆验证
<web-app>
...
<filter>
    <filter-name>right</filter-name>
    <filter-class>com.taihuatalk.taihua.common.RightFilter</filter-class>
</filter>

<filter-mapping>
    <filter-name>right</filter-name>
    <url-pattern>/a.jsp</url-pattern>
</filter-mapping>
...
</web-app>
    b.如果是某一个目录(如a/目录)整个目录下的文件都需要登陆验证:
<web-app>
...
<filter>
    <filter-name>right</filter-name>
    <filter-class>com.taihuatalk.taihua.common.RightFilter</filter-class>
</filter>

<filter-mapping>
    <filter-name>right</filter-name>
    <url-pattern>/a/*</url-pattern>
</filter-mapping>
...
</web-app>

 

 

 

 

 

 

 

package com.zfsoft.zfsdc.servlet.filter;

import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

public class HasSessionFilter implements Filter {

public void init(FilterConfig config) throws ServletException {

}

public void doFilter(ServletRequest request, ServletResponse response,
    FilterChain chain) throws IOException, ServletException {
   HttpServletRequest req = (HttpServletRequest) request;

   HttpSession session = req.getSession(false);
   try {
    request.setCharacterEncoding("GBK");

    if (session != null) { // 暂时只过滤登陆名
     chain.doFilter(request, response);
    } else {
     request.getRequestDispatcher("login.jsp").forward(request,
       response);
    }
   } catch (Exception ex) {
    ex.printStackTrace();
   }
}

public void destroy() {

}

public void setFilterConfig(final FilterConfig filterConfig) {

}
}

 

web.xml

<filter>
   <filter-name>hasSession</filter-name>
   <filter-class>
    com.zfsoft.zfsdc.servlet.filter.HasSessionFilter
   </filter-class>
</filter>
<filter-mapping>
   <filter-name>hasSession</filter-name>
   <url-pattern>/*</url-pattern>
</filter-mapping>