httpgetheader 取头信息

最新推荐文章于 2023-09-07 10:15:00 发布

weixin_30824599

最新推荐文章于 2023-09-07 10:15:00 发布

阅读量137

点赞数

原文链接：http://www.cnblogs.com/zhuzhuxuan/p/5593705.html

版权

import java.util.Enumeration;
import java.util.HashMap;
import java.util.Map;
import javax.servlet.http.HttpServletRequest; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.PathVariable; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMethod; import org.springframework.web.servlet.ModelAndView; @Controller @RequestMapping("/site") public class SiteController {     @Autowired     private HttpServletRequest request;     @RequestMapping(value = "/{input:.+}", method = RequestMethod.GET)     public ModelAndView getDomain(@PathVariable("input") String input) {         ModelAndView modelandView = new ModelAndView("result");         modelandView.addObject("user-agent", getUserAgent());         modelandView.addObject("headers", getHeadersInfo());         return modelandView;     }     //get user agent     private String getUserAgent() {         return request.getHeader("user-agent");     }     //get request headers     private Map<String, String> getHeadersInfo() {         Map<String, String> map = new HashMap<String, String>();         Enumeration headerNames = request.getHeaderNames();         while (headerNames.hasMoreElements()) {             String key = (String) headerNames.nextElement();             String value = request.getHeader(key);             map.put(key, value);         }         return map;     } }

也许有人会说，Http Header 是可以模拟的，那么自己可以构造一个用来欺骗这些系统，是的，的确是这样，所以在用Http Header 来传值得时候，一定要记得，所有的请求都必须经过 portal 来处理，然后 forward 到各子系统，就不会出现这个问题了。因为portal 首先拦截用户发起的所有的请求，如果是构造的用户，在portal 的sessiion 也是没有记录的，仍然会跳转到登录页面，如果在protal 的 session 中记录，而且 Http Header 中也有记录，那么在子系统就是合法的用户，然后自己可以根据一些要求处理业务逻辑了

JSP/Java获取HTTP header信息(request)例子

<%
//header.jsp
out.println("Protocol: " + request.getProtocol() + " ");
out.println("Scheme: " + request.getScheme() + " ");
out.println("Server Name: " + request.getServerName() + " " );
out.println("Server Port: " + request.getServerPort() + " ");
out.println("Protocol: " + request.getProtocol() + " ");
out.println("Server Info: " + getServletConfig().getServletContext().getServerInfo() + " ");
out.println("Remote Addr: " + request.getRemoteAddr() + " ");
out.println("Remote Host: " + request.getRemoteHost() + " ");
out.println("Character Encoding: " + request.getCharacterEncoding() + " ");
out.println("Content Length: " + request.getContentLength() + " ");
out.println("Content Type: "+ request.getContentType() + " ");
out.println("Auth Type: " + request.getAuthType() + " ");
out.println("HTTP Method: " + request.getMethod() + " ");
out.println("Path Info: " + request.getPathInfo() + " ");
out.println("Path Trans: " + request.getPathTranslated() + " ");
out.println("Query String: " + request.getQueryString() + " ");
out.println("Remote User: " + request.getRemoteUser() + " ");
out.println("Session Id: " + request.getRequestedSessionId() + " ");
out.println("Request URL: " + request.getRequestURL() + " ");
out.println("Request URI: " + request.getRequestURI() + " ");
out.println("Servlet Path: " + request.getServletPath() + " ");
out.println("Created : " + session.getCreationTime() + " ");
out.println("LastAccessed : " + session.getLastAccessedTime() + " ");

out.println("Accept: " + request.getHeader("Accept") + " ");
out.println("Host: " + request.getHeader("Host") + " ");
out.println("Referer : " + request.getHeader("Referer") + " ");
out.println("Accept-Language : " + request.getHeader("Accept-Language") + " ");
out.println("Accept-Encoding : " + request.getHeader("Accept-Encoding") + " ");
out.println("User-Agent : " + request.getHeader("User-Agent") + " ");
out.println("Connection : " + request.getHeader("Connection") + " ");
out.println("Cookie : " + request.getHeader("Cookie") + " ");
%>

转载于:https://www.cnblogs.com/zhuzhuxuan/p/5593705.html