力所能及之拦截过滤登陆

 最近看了网上的登陆拦截，本来准备用struts2自定义拦截器做的，后来发现一个问题，struts2自定义拦截器只能拦截action动作类，所以我们还是采用最基本的自定义filter吧

工程目录

我们一个一个来。

LoginAction.java

package zcy.struts.login;

import qh.Log;
import zcy.struts.utils.Constants;

import com.opensymphony.xwork2.ActionContext;
import com.opensymphony.xwork2.ActionSupport;

@SuppressWarnings("serial")
public class LoginAction extends ActionSupport {

	
	private String username;
	private String password;
	public String getUsername() {
		return username;
	}
	public void setUsername(String username) {
		this.username = username;
	}
	public String getPassword() {
		return password;
	}
	public void setPassword(String password) {
		this.password = password;
	}
	
	
	public boolean isInvaild(String value){
		return (value==null||value.length()==0);
	}
	
	@Override
	public String execute() throws Exception {
		// TODO Auto-generated method stub
		Log.getLog().info("LoginAction  *****************execute() ");
		Log.getLog().info("username="+username);  
        Log.getLog().info("password="+password);  
          
         if (isInvaild(getUsername()))     
                return INPUT;     
        
            if (isInvaild(getPassword()))     
                return INPUT;     
        
  
    if(this.getUsername().equals("admin")&& this.getPassword().equals("admin")){  
        ActionContext.getContext().getSession().put(Constants.USER_SESSION,getUsername());  
        ActionContext.getContext().getSession().put(Constants.PASS,getPassword());  
        return "success";  
    }  
    return "error";  
	}
}

LoginFormAction.java

package zcy.struts.login;

import qh.Log;

import com.opensymphony.xwork2.ActionSupport;

@SuppressWarnings("serial")
public class LoginFormAction extends ActionSupport {

	@Override
	public String execute() throws Exception {
		// TODO Auto-generated method stub
		Log.getLog().info("LoginFormAction  *****************execute() ");
		return SUCCESS;
	}
}

ShowAction.java

package zcy.struts.login;

import qh.Log;

import com.opensymphony.xwork2.ActionSupport;

@SuppressWarnings("serial")
public class ShowAction extends ActionSupport {

	@Override
	public String execute() throws Exception {
		// TODO Auto-generated method stub
		Log.getLog().info("ShowAction ********** execute()");
		return SUCCESS;
	}
}

LoginFilter.java

package zcy.struts.login.Filter;

import java.io.IOException;
import java.util.ArrayList;
import java.util.List;
import java.util.StringTokenizer;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import qh.Log;

public class LoginFilter implements Filter {
    public static String checkSessionKey=null;
    public static String redirectURL=null;

    public static List<String> notCheckURLList=new ArrayList<String>();
	public void destroy() {
		// TODO Auto-generated method stub
		notCheckURLList.clear();
	}

	public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,
			FilterChain filterChain) throws IOException, ServletException {
		// TODO Auto-generated method stub

		  HttpServletRequest request = (HttpServletRequest) servletRequest;
		  HttpServletResponse response = (HttpServletResponse) servletResponse;

		  HttpSession session = request.getSession();
	
		  if(checkSessionKey == null)
		  {
			   filterChain.doFilter(request, response);
			   return;
		  }
		  if((!checkRequestURIIntNotFilterList(request))&& session.getAttribute(checkSessionKey) == null)
		  {
			 
			   response.sendRedirect(request.getContextPath() + redirectURL);
			   return;
		  }
		  filterChain.doFilter(servletRequest, servletResponse); 
	}

	public void init(FilterConfig filterConfig) throws ServletException {
		// TODO Auto-generated method stub
        checkSessionKey=filterConfig.getInitParameter("checkSessionKey");
        redirectURL=filterConfig.getInitParameter("redirectURL");
        
        String notCheckURLListStr=filterConfig.getInitParameter("notCheckURLList");
        if(notCheckURLListStr != null)
		  {
			   StringTokenizer st = new StringTokenizer(notCheckURLListStr, ";");
			   notCheckURLList.clear();
			   while(st.hasMoreTokens())
			   {
				   notCheckURLList.add(st.nextToken());
			   }
			   
		  } 
	}
	private boolean checkRequestURIIntNotFilterList(HttpServletRequest request)
	{
		  String uri = request.getServletPath() + (request.getPathInfo() == null ? "" : request.getPathInfo());
		  Log.getLog().info("uri="+uri);
		  return notCheckURLList.contains(uri);
	} 

}

LoginInterceptor.java

package zcy.struts.login.Interceptor;

import java.util.Map;

import qh.Log;
import zcy.struts.utils.Constants;

import com.opensymphony.xwork2.Action;
import com.opensymphony.xwork2.ActionContext;
import com.opensymphony.xwork2.ActionInvocation;
import com.opensymphony.xwork2.interceptor.AbstractInterceptor;

public class LoginInterceptor extends AbstractInterceptor {

	@Override
	public String intercept(ActionInvocation invocation) throws Exception {
		// TODO Auto-generated method stub
		Log.getLog().info("LoginInterceptor");
		// 取得请求相关的ActionContext实例  
        ActionContext ctx = invocation.getInvocationContext();  
        Map session = ctx.getSession();  
        String user = (String) session.get(Constants.USER_SESSION);  
  
        // 如果没有登陆，或者登陆所有的用户名不是admin，都返回重新登陆  
  
        if (user != null && user.equals("admin")) {  
            System.out.println("test");  
            return invocation.invoke();  
        }  
  
        ctx.put("tip", "你还没有登录");  
        return Action.LOGIN;  
	}

}

Constants.java

package zcy.struts.utils;

public class Constants {

	public static String USER_SESSION="username";
	public static String PASS="password";
}

stryts

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE struts PUBLIC
	"-//Apache Software Foundation//DTD Struts Configuration 2.3//EN"
	"http://struts.apache.org/dtds/struts-2.3.dtd">
	
	<struts>
	    <constant name="struts.action.extension" value="love"></constant>
	    <constant name="struts.devMode" value="true"></constant>

	    <include file="struts-login.xml"></include>
	</struts>

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE struts PUBLIC
	"-//Apache Software Foundation//DTD Struts Configuration 2.3//EN"
	"http://struts.apache.org/dtds/struts-2.3.dtd">
	
	<struts>
	    <package name="login" namespace="/login" extends="struts-default">
	       <!-- 定义一个拦截器 -->  
        <interceptors>  
            <interceptor name="login"  
                class="zcy.struts.login.Interceptor.LoginInterceptor"> 
              
            </interceptor>  
            <!-- 拦截器栈 -->  
            <interceptor-stack name="mydefault">  
                <interceptor-ref name="defaultStack" />  
                <interceptor-ref name="login" />  
            </interceptor-stack>  
        </interceptors>  
        <default-interceptor-ref name="mydefault"></default-interceptor-ref>
        <!-- 定义全局Result -->  
        <global-results>  
            <!-- 当返回login视图名时，转入/login.jsp页面 -->  
            <result name="login">login.jsp</result>  
        </global-results>  
  
        <action name="loginform"  
            class="zcy.struts.login.LoginFormAction">  
            <result name="success">login.jsp</result>  
        </action>  
          
        <action name="login" class="zcy.struts.login.LoginAction">  
            <result name="success">welcome.jsp</result>  
            <result name="error">login.jsp</result>  
            <result name="input">login.jsp</result>  
        </action>  
  
        <action name="show" class="zcy.struts.login.ShowAction">  
            <result name="success">show.jsp</result>  
            <!-- 使用此拦截器 -->  
              
        </action>  
	    
	    
	    </package>

	
	</struts>

login.jsp

<%@ page language="java" import="java.util.*" pageEncoding="utf-8"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <title>登陆测试</title>
	
  </head>
  
  <body>
    <form action="login.love" method="post">
       User:<input type="text" name="username"><br/>
     Password:<input type="password" name="password"><br/>
    <input type="submit" value="submit">
    </form>
  </body>
</html>

show.jsp

<%@ page language="java" import="java.util.*" pageEncoding="utf-8"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <title>登录成功后显示此页面</title>
	
  </head>
  
  <body>
       Show This Page   
        登录后执行此页面<br>
  </body>
</html>

welcome.jsp

<%@ page language="java" import="java.util.*" pageEncoding="utf-8"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <title>登录成功后显示此页面</title>
	
  </head>
  
  <body>
    <h1>登录成功后显示此页面</h1>
    <a href="show.love" mce_href="show.love">show</a>
  </body>
</html>

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" 
	xmlns="http://java.sun.com/xml/ns/javaee" 
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
	http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
  <welcome-file-list>
    <welcome-file>index.jsp</welcome-file>
  </welcome-file-list>
  
  <filter>  
     <filter-name>LoginFilter</filter-name>
     <filter-class>zcy.struts.login.Filter.LoginFilter</filter-class>
     <init-param>
         <param-name>checkSessionKey</param-name>
         <param-value>user</param-value>
     </init-param>
     <init-param>
         <param-name>redirectURL</param-name>
         <param-value>/login/login.jsp</param-value>
     </init-param>
     <init-param>
          <param-name>notCheckURLList</param-name>
          <param-value>/login/login.jsp;/login/login.love</param-value>
     </init-param>
  </filter>
  <filter-mapping>
     <filter-name>LoginFilter</filter-name>
     <url-pattern>/*</url-pattern>
  </filter-mapping>
  <filter>
     <filter-name>struts</filter-name>
     <filter-class>org.apache.struts2.dispatcher.ng.filter.StrutsPrepareAndExecuteFilter</filter-class>
  </filter>
  <filter-mapping>
     <filter-name>struts</filter-name>
     <url-pattern>*.love</url-pattern>
     <url-pattern>*.jsp</url-pattern>
  </filter-mapping>
  
  
</web-app>

就是这样，我们的登陆功能就ok了，嘿嘿，小狼知道这个项目有点复杂，不过还是很清晰的