springmvc sessionfilter 登录过滤器

1.在web.xml中配置

 <!-- sessionfilter -->

 <filter>
     <filter-name>sessionFilter</filter-name>
     <filter-class>com.juin.filter.SessionFilter</filter-class>
 </filter>

 <filter-mapping>
     <filter-name>sessionFilter</filter-name>
     <url-pattern>/*</url-pattern>
 </filter-mapping>

 <!--以上截止sessionfilter -->

2.创建SessionFilter类

 package com.juin.filter;

 import java.io.IOException;
 import javax.servlet.FilterChain;
 import javax.servlet.ServletException;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;

 import org.springframework.http.HttpStatus;
 import org.springframework.web.filter.OncePerRequestFilter;

 public class SessionFilter extends OncePerRequestFilter {
     @Override
     protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
             throws ServletException, IOException {

         // 不过滤的uri
         String[] notFilter = new String[] { "/user/toUser", "/login", "user/toMain" };

         // 请求的uri
         String uri = request.getRequestURI();
         // 是否过滤
         boolean doFilter = true;
         for (String s : notFilter) {
             if (uri.indexOf(s) != -1) {
                 // 如果uri中包含不过滤的uri，则不进行过滤
                 doFilter = false;
                 break;
             }
         }

         if (doFilter) {
             // 执行过滤
             // 从session中获取登录者实体
             Object obj = request.getSession().getAttribute("temp_user");
             if (null == obj) {
                 boolean isAjaxRequest = isAjaxRequest(request);
                 if (isAjaxRequest) {
                     response.setCharacterEncoding("UTF-8");
                     response.sendError(HttpStatus.UNAUTHORIZED.value(), "您已经太长时间没有操作,请刷新页面");
                     return;
                 }
                 response.sendRedirect("../user/toUser");
                 return;
             } else {
                 // 如果session中存在登录者实体，则继续
                 filterChain.doFilter(request, response);
             }
         } else {
             // 如果不执行过滤，则继续
             filterChain.doFilter(request, response);
         }
     }

     /**
      * 判断是否为Ajax请求 <功能详细描述>
      *
      * @param request
      * @return 是true, 否false
      * @see [类、类#方法、类#成员]
      */
     public static boolean isAjaxRequest(HttpServletRequest request) {
         String header = request.getHeader("X-Requested-With");
         if (header != null && "XMLHttpRequest".equals(header))
             return true;
         else
             return false;
     }
 }

3.欢迎大家➕我微信一起探讨，微信号：kj19960106