filter 防止绕过登录页面

public class UrlFilter extends HttpServlet implements javax.servlet.Filter {

 private static final long serialVersionUID = 1L;
    public void destroy() {
     
    }

    public void doFilter(ServletRequest request, ServletResponse response,
            FilterChain chain) {     
        HttpServletResponse rpo = (HttpServletResponse) response;
        HttpServletRequest req = (HttpServletRequest) request;
        //HttpServletResponse rpo = (HttpServletResponse) response;
        javax.servlet.http.HttpSession sess = req.getSession();

     
     try {
          SessionManager session = (SessionManager)sess.getServletContext().getAttribute("session");
       
          if(req.getRequestURI().endsWith("/login.jsf")){
           chain.doFilter(request, response);
           return ;
          }
          else if(session == null||session.getUser() == null){                  
      rpo.sendRedirect("login.jsf");
      return ;
       }else{
        chain.doFilter(request, response);
        return ;
       }
     }
     catch (IOException e) {
   // TODO Auto-generated catch block
   e.printStackTrace();
  } catch (ServletException e) {
   // TODO Auto-generated catch block
   e.printStackTrace();
  }
    }

    public void init(FilterConfig filterConfig) {
      
    }    
}