java filter url匹配规则_java – @WebFilter排除url-pattern

我使用过滤器来检查登录用户的URL模式.

但是我需要过滤许多URL模式.

{ "/table/*", "/user/*", "/contact/*", "/run/*", "/conf/*", ..., ..., ...}

它变得不可维护.排除以下内容会更简单:

{ "/", "/login", "/logout", "/register" }

我怎样才能做到这一点?

@WebFilter(urlPatterns = { "/table/*","/user/*", "/contact/*","/run/*","/conf/*"})

public class SessionTimeoutRedirect implements Filter {

protected final Logger logger = LoggerFactory.getLogger("SessionFilter");

@Override

public void doFilter(ServletRequest req, ServletResponse res,

FilterChain chain) throws IOException, ServletException {

HttpServletRequest request = (HttpServletRequest) req;

HttpServletResponse response = (HttpServletResponse) res;

if (request.getSession().getAttribute("Id") != null) {

chain.doFilter(req, res);

} else {

logger.debug("session is null:"+request.getRequestURL());

response.sendRedirect(request.getContextPath()+"/login");

}

}

@Override

public void init(FilterConfig arg0) throws ServletException {

}

@Override

public void destroy() {

}

}

解决方法:

servlet API不支持“排除”URL模式.

@WebFilter("/*")

public class LoginFilter implements Filter {

private static final Set ALLOWED_PATHS = Collections.unmodifiableSet(new HashSet<>(

Arrays.asList("", "/login", "/logout", "/register")));

@Override

public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {

HttpServletRequest request = (HttpServletRequest) req;

HttpServletResponse response = (HttpServletResponse) res;

HttpSession session = request.getSession(false);

String path = request.getRequestURI().substring(request.getContextPath().length()).replaceAll("[/]+$", "");

boolean loggedIn = (session != null && session.getAttribute("Id") != null);

boolean allowedPath = ALLOWED_PATHS.contains(path);

if (loggedIn || allowedPath) {

chain.doFilter(req, res);

}

else {

response.sendRedirect(request.getContextPath() + "/login");

}

}

// ...

}

标签:url-pattern,java,servlets,servlet-filters

来源: https://codeday.me/bug/20191004/1852663.html

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值