SpringMVC拦截器实现登录验证

最新推荐文章于 2022-10-19 00:43:57 发布

_源

最新推荐文章于 2022-10-19 00:43:57 发布

阅读量2.5k

点赞数 2

分类专栏： Spring-MVC 文章标签： spring mvc 拦截器登录验证

本文链接：https://blog.csdn.net/source_yuan/article/details/77933396

版权

Spring-MVC 专栏收录该内容

4 篇文章 0 订阅

订阅专栏

Spring拦截器说明：

拦截器通过统一拦截从浏览器发往服务器的请求，进行相应的处理，完成功能增强
SpringMVC拦截器是可插拔式设计，使用时，直接在配置文件中应用该拦截器即可
使用场景：解决浏览器请求的共性问题（如：用户权限验证，乱码等）
SpringMVC中的拦截器类通过实现HandlerInterceptor接口完成，
HandlerInterceptor接口中定义了如下三个方法：
- boolean preHandle(HttpServletRequest request,HttpServletRepsonse repsonse,Object handler). 该方法在请求处理之前被调用，可以在此方法中进行一些初始化操作，也可以进行一些判断来决定请求是否继续执行。（若返回值为true,则正常往下执行，若为false，其余两个方法不会执行，且后边的Interceptor和Controller不再执行）
- boolean postHandle(HttpServletRequest request,HttpServletRepsonse repsonse,Object handler,ModelAndView mv). 该方法在请求被Controller处理之后，返回dispatcherServlet进行视图渲染之前执行，因此我们能操作Controller处理后的ModelAndView对象。
- void afterCompletion(HttpServletRequest request,HttpServletRepsonse repsonse,Object handler,Exception exception) 该方法在整个请求结束之后执行，主要进行资源清理等。

登录验证实现：

控制器：
InterceptorController.java

import javax.servlet.http.HttpSession;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.servlet.ModelAndView;
import com.zpc.entity.User;

@Controller
public class InterceptorController {

    private static final Log logger = LogFactory.getLog(InterceptorController.class);

    @RequestMapping(value="/{formName}")
    public String loginForm(@PathVariable String formName) {
        //动态页面跳转
        return formName;
    }

    @RequestMapping(value="/loginForm",method=RequestMethod.POST)
    public ModelAndView login(String username,String password,ModelAndView mv,HttpSession session) {
        if(username.equals("zpc") && username != null && password.equals("123456") && password != null) {
            User user = new User();
            user.setUsername(username);
            user.setPassword(password);
            logger.info(user);
            session.setAttribute("user", user);
            mv.setViewName("redirect:index");
        }else {
            mv.addObject("error","用户名或密码错误");
            mv.setViewName("login");
        }
        return mv;
    }
}

bookController.java

import java.util.ArrayList;
import java.util.List;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.servlet.ModelAndView;

import com.zpc.entity.Book;

public class bookController {

    @RequestMapping(value="/index")
    public ModelAndView book(ModelAndView mv) {

        List<Book> books = new ArrayList<Book>();
        books.add(new Book(10001,"JavaScript从入门到精通","明日科技"));
        books.add(new Book(10002,"Ajax从入门到精通","强锋科技"));
        books.add(new Book(10003,"Spring+MyBatista企业应用实战","疯狂软件"));
        mv.addObject(books);
        mv.setViewName("index");
        return mv;
    }
}

拦截器类：
MyInterceptor.java

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import com.zpc.entity.User;

public class MyInterceptor implements HandlerInterceptor {

    private static final String[] IGNORE_URI = {"/login"};

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception exception)
            throws Exception {

        System.out.println("afterCompletion方法执行了...");
    }

    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView mv)
            throws Exception {

        System.out.println("postHandle方法执行了...");
    }

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

        System.out.println("preHandle方法执行了...");
        boolean flag = false;
        String servletPath = request.getServletPath();
        for(String s : IGNORE_URI) {
            if(servletPath.contains(s)) {
                flag = true;
                break;
            }
        }
        if(flag == false) {
            User user  = (User) request.getSession().getAttribute("user");
            if(user == null) {
                request.setAttribute("error", "您还没有登录，请登录！");
                request.getRequestDispatcher("login").forward(request, response);
            }else {
                flag = true;
            }
        }
        return flag;
    }
}

SpringMVC配置文件（主要看 定义SpringMVC拦截器）：
dispatcher-config.xml

<?xml version="1.0" encoding="UTF-8"?> 
<beans xmlns="http://www.springframework.org/schema/beans"     
       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
       xmlns:p="http://www.springframework.org/schema/p"     
       xmlns:context="http://www.springframework.org/schema/context"  
       xmlns:mvc="http://www.springframework.org/schema/mvc"    
       xsi:schemaLocation="http://www.springframework.org/schema/beans
       http://www.springframework.org/schema/beans/spring-beans-4.3.xsd   
       http://www.springframework.org/schema/aop 
       http://www.springframework.org/schema/aop/spring-aop-4.3.xsd   
       http://www.springframework.org/schema/tx 
       http://www.springframework.org/schema/tx/spring-tx-4.3.xsd  
       http://www.springframework.org/schema/mvc
       http://www.springframework.org/schema/mvc/spring-mvc-4.3.xsd 
       http://www.springframework.org/schema/context 
       http://www.springframework.org/schema/context/spring-context-4.3.xsd">     

      <!-- 启用Spring关于annotation的DI，以便在Spring-MVC中使用Spring强大的功能。激活@Required @Autowired @Resource 等标注 -->
      <context:annotation-config/>

      <!-- 1.扩充了注解驱动，可以将请求参数绑定到控制器参数
           2.自动注册了RequestMappingHandlerMapping和RequestMappingHandlerAdapter两个bean
           3.@NumberFormatannotation支持
           4.@DateTimeFormat支持
           5.@Valid支持
           6.读写XML文件的支持(JAXB)
           7.读写JSON的支持 
      -->
      <mvc:annotation-driven/>

     <!-- 定义SpringMVC拦截器 -->
      <mvc:interceptors>
        <mvc:interceptor>
        <!-- 拦截所有请求 -->
            <mvc:mapping path="/*"/>
            <bean class="com.zpc.interceptor.MyInterceptor"/>
        </mvc:interceptor>
      </mvc:interceptors>   

      <!-- 使用默认的Servlet响应静态文件。如js，css，image等 -->
      <mvc:default-servlet-handler/>

      <!-- 只管理Controller类型的bean，忽略其它类型的bean，如@Service -->     
      <context:component-scan base-package="com.zpc.controller" >    
        <context:include-filter type="annotation" expression="org.springframework.stereotype.Controller"/> 
      </context:component-scan>     

      <!-- 对模型视图名称的解析，即在模型视图名称添加前后缀 -->     
      <bean id="viewResolver" class="org.springframework.web.servlet.view.InternalResourceViewResolver"/>    
 </beans>

登录页面：
login.jsp

<%@ page language="java" contentType="text/html; charset=utf-8"
    pageEncoding="utf-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>login</title>
</head>
<body>
    <form action="loginForm" method="POST">
        <font color="red">${requestScope.error}</font>
        用户名：<input type="text" name="username"/><br/>
        密&nbsp;&nbsp;&nbsp;&nbsp;码：<input type="text" name="password"/><br/>
        <input type="submit" value="登录"/>
    </form>
</body>
</html>

结果页：
index.jsp

<%@ page language="java" contentType="text/html; charset=utf-8"
    pageEncoding="utf-8"%>
<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>index</title>
</head>
<body>
    <h4>欢迎[${sessionScope.user.username}]访问</h4><br/>
    <table>
        <tr> 
            <th>编号</th><th>书名</th><th>作者</th>
        </tr>
        <c:forEach items="${requestScope.books}" var="book">
            <tr>
                <td>${book.bookId}</td>
                <td>${book.bookName}</td>
                <td>${book.author}</td>
            </tr>
        </c:forEach>
    </table>
</body>
</html>