java filter 不过滤器_Java 过滤器Filter，Java Filter 不拦截某些请求 Java 过滤器支持Ajax请求...

================================

©copyright 蕃薯耀 2020-01-10

一、java权限过滤器，如登录过滤

增加了配置文件，配置不拦截的请求，可以自定义不拦截的规则，有三种：

1、不拦截包含/service/的请求(*/service/*)

2、不拦截以aaa/bbb/开头的请求(aaa/bbb/*)

3、不拦截以/ccc/aa.action结尾的请求(*/ccc/aa.action)

过滤器代码如下：

import java.io.bufferedreader;

import java.io.ioexception;

import java.io.inputstream;

import java.io.inputstreamreader;

import java.util.hashset;

import java.util.set;

import javax.servlet.filter;

import javax.servlet.filterchain;

import javax.servlet.filterconfig;

import javax.servlet.servletexception;

import javax.servlet.servletrequest;

import javax.servlet.servletresponse;

import javax.servlet.http.httpservletrequest;

import javax.servlet.http.httpservletresponse;

import org.apache.commons.lang.stringutils;

import org.apache.commons.logging.log;

import org.apache.commons.logging.logfactory;

public class sessionfilter implements filter {

protected final log logger = logfactory.getlog(sessionfilter.class);

private set unfilterset = new hashset();

@override

public void init(filterconfig config) throws servletexception {

inputstream in = null;

bufferedreader reader = null;

try {

in = sessionfilter.class.getclassloader().getresourceasstream("sessionunfilter.properties");

if(in != null){

reader = new bufferedreader(new inputstreamreader(in));

string linetext = null;

logger.info("=====不拦截的匹配规则有：");

while((linetext = reader.readline()) != null){

if(!stringutils.isblank(linetext) && (!linetext.trim().startswith("#"))){//过滤掉空行和注释行

logger.info("=====" + linetext);

unfilterset.add(linetext);

}

}

}

} catch (exception e) {

e.printstacktrace();

} finally{

if(reader != null){

try {

reader.close();

} catch (ioexception e) {

e.printstacktrace();

}

}

if(in != null){

try {

in.close();

} catch (ioexception e) {

e.printstacktrace();

}

}

}

logger.info("sessionfilter init()");

}

@override

public void destroy() {

logger.info("sessionfilter destroy()");

}

/**

* 如果请求链接符合不拦截的匹配，返回true

* @param unfilterset

* @param requesturi

* @return

*/

public boolean ispass(set unfilterset, string requesturi){

logger.info("=====requesturi = "+requesturi);

if(unfilterset != null && unfilterset.size() > 0){

for (string unfilteruri : unfilterset) {

if(!stringutils.isblank(unfilteruri)){

unfilteruri = unfilteruri.trim();

if(unfilteruri.equals(requesturi)){

return true;

}else if(unfilteruri.startswith("*") && unfilteruri.length() > 1 && unfilteruri.endswith("*")){

string text = unfilteruri.substring(1, (unfilteruri.length() - 1));

//logger.info("=====contains text = " + text);

if(requesturi.contains(text)){

return true;

}

}else if(unfilteruri.startswith("*") && !unfilteruri.endswith("*")){

string text = unfilteruri.substring(1, (unfilteruri.length()));

//logger.info("=====endswith text = " + text);

if(requesturi.endswith(text)){

return true;

}

}else if(!unfilteruri.startswith("*") && unfilteruri.endswith("*")){

string text = unfilteruri.substring(0, (unfilteruri.length() - 1));

//logger.info("=====startswith text = " + text);

if(requesturi.startswith(text)){

return true;

}

}

}

}

}

return false;

}

@override

public void dofilter(servletrequest servletrequest, servletresponse servletresponse,

filterchain chain) throws ioexception, servletexception {

httpservletrequest req = (httpservletrequest) servletrequest;

httpservletresponse res = (httpservletresponse) servletresponse;

boolean isajaxrequest = false;//判断是否ajax请求

if(!stringutils.isblank(req.getheader("x-requested-with")) && req.getheader("x-requested-with").equalsignorecase("xmlhttprequest")){

isajaxrequest = true;

}

userinfo userinfo = null;

try {

userinfo = securityextapi.getuserinfo(req);

} catch (generalfailureexception e) {

e.printstacktrace();

}

if(userinfo != null && !stringutils.isblank(userinfo.getuserid())){

chain.dofilter(req, res);

}else{

string requesturi = req.getrequesturi();

//logger.info("=====requesturi = "+requesturi);

if(requesturi.endswith(".js") || requesturi.endswith(".css") || requesturi.endswith(".png")

|| requesturi.endswith(".jpg") || requesturi.endswith(".jpeg") || requesturi.endswith(".gif")

|| requesturi.endswith(".ico")){

chain.dofilter(req, res);

return;

}else if(ispass(unfilterset, requesturi)){

chain.dofilter(req, res);

return;

}else{

string msg = "登录已失效，请刷新页面或重新登录";

logger.info("=====" + msg);

if(isajaxrequest){//ajax请求结果处理

res.setcontenttype("application/json;charset=gbk");

res.setcharacterencoding("gbk");

res.setheader("error_code", "-999");

res.setheader("error_msg", "the login is timeout, please login again!");

throw new runtimeexception(msg);//需要增加ajax异常处理js全局配置文件ajax.config.js

}else{

res.sendredirect("/");

}

}

}

}

}

不拦截请求配置文件(sessionunfilter.properties)如下：

#配置说明：

#*/services/* ：不拦截包含/services/路径的

#/aa/startwith/* ：不拦截以/aa/startwith/开头的

#*/endwith/end.jsp ：不拦截以/endwith/end.jsp结尾的

/pro_name/aaa/login_local.jsp

/pro_name/bbb/ccc.action

*/services/*

ajax请求处理需要增加一个js的全局处理配置文件

$(document).ajaxerror(function(event,xhr){

var error_code = xhr.getresponseheader("error_code");

var error_msg = xhr.getresponseheader("error_msg");

if(error_code != null && error_code != undefined){

if("-999" == error_code){

error_msg = "异常信息：登录已失效，请重新登录或刷新页面";

}else{

error_msg = "异常信息："+ error_msg;

}

error_code = "异常代码："+error_code;

var error_tip = error_code +"

" + error_msg;

top.$.messager.alert('异常提示：',error_tip,'error');

}

});

(如果你觉得文章对你有帮助，欢迎捐赠，^_^，谢谢！)

================================

©copyright 蕃薯耀 2020-01-10

如您对本文有疑问或者有任何想说的，请点击进行留言回复，万千网友为您解惑！