使用Servlet Filter做Login checking

1) 建一个Login Servlet: Login.java

package com.my;

import java.io.*;

import javax.servlet.*;

import javax.servlet.http.*;

public class Login extends HttpServlet {

    public Login() {}

    public void doGet(HttpServletRequest req, HttpServletResponse resp) {

        try {

            String strPath = req.getParameter("path");

            if(strPath == null || strPath == "") {

                strPath = req.getServletContext().getContextPath();

            }

            resp.setContentType("text/html;charset=\"UTF-8\"");

            PrintWriter pw = resp.getWriter();

            pw.println("<html>");

            pw.println("<header>");

            pw.println("</header>");

            pw.println("<body>");

            pw.println("<form action=\"login?path=" + java.net.URLEncoder.encode(strPath, "UTF-8") + "\" method=\"POST\">");

            pw.println("UserName:<input type=\"text\" id=\"txtUserName\" name=\"txtUserName\" /><br/>");

            pw.println("Password:<input type=\"password\" id=\"txtPassword\" name=\"txtPassword\" /><br/>");

            pw.println("<input type=\"submit\" value=\"Submit\" />");

            pw.println("</form>");

            pw.println("</body>");

            pw.println("</html>");

        }

        catch(IOException e) {

            e.printStackTrace();

        }

        catch(Exception e) {

            e.printStackTrace();

        }

    }

    public void doPost(HttpServletRequest req, HttpServletResponse resp) throws IOException {

        String strUserName = req.getParameter("txtUserName");

        String strPassword = req.getParameter("txtPassword");

        String strPath = req.getParameter("path");

        if(strPath == null || strPath == "") {

            strPath = req.getServletContext().getContextPath();

        }

        if(strUserName.equals("admin") && strPassword.equals("admin")) {

            HttpSession session = req.getSession(true);

            session.setAttribute("USER", strUserName);

            session.setAttribute("ROLE", "admin");

            resp.sendRedirect(strPath);

        }

        else {

            resp.sendRedirect("login?path=" + java.net.URLEncoder.encode(strPath, "UTF-8"));

        }

    }

}

2) 建一个LoginFilter类：LoginFilter.java

package com.my.filter;

import java.io.*;

import javax.servlet.*;

import javax.servlet.http.*;

import javax.servlet.Filter;

import javax.servlet.FilterChain;

import javax.servlet.FilterConfig;

import java.util.Map;

import java.util.HashMap;

import java.util.Enumeration;

public class LoginFilter implements Filter {

    private Map<String, String> _pathMap = new HashMap<String, String>();

    public LoginFilter() {}

    public void init(FilterConfig config) throws ServletException {

        System.out.println("login filter init...");

        Enumeration enumeration = config.getInitParameterNames();

        while(enumeration.hasMoreElements()){

            String name = (String)enumeration.nextElement();

            String value = config.getInitParameter(name);

            _pathMap.put(name, value);

        }

    }

    public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws IOException, ServletException {

        System.out.println("login filter doFilter...");

        // web-app path, e.x.: /mytest

        String strContextPath = req.getServletContext().getContextPath();

        HttpServletRequest request = (HttpServletRequest)req;

        HttpServletResponse response = (HttpServletResponse)resp;

        // user request Full URL path, e.x.: /mytest/hello/test

        String uri = request.getRequestURI();

        // user request file URL path, e.x.: /hello/test

        uri = uri.substring(strContextPath.length());

        String authPath = null;

        String authRole = null;

        for(String name : _pathMap.keySet()) {

            if(uri.startsWith(name)) {

                authRole = _pathMap.get(name);

                authPath = name;

            }

        }

        if( authPath == null ) {

            chain.doFilter(req, resp);

            return;

        }

        else {

            HttpSession session = request.getSession(false);

            if(authRole.equals("admin") && session != null) {

                String role = (String)session.getAttribute("ROLE");

                if( role != null && role.equals(authRole) ) {

                    chain.doFilter(req, resp);

                }

                else {

                    String strQueryString = (String)request.getQueryString() != null ? "?" + request.getQueryString() : "";

                    response.sendRedirect(strContextPath + "/login" + "?path=" + java.net.URLEncoder.encode(request.getRequestURI() + strQueryString, "UTF-8"));

                }

            }

            else {

                String strQueryString = (String)request.getQueryString() != null ? "?" + request.getQueryString() : "";

                response.sendRedirect(strContextPath + "/login" + "?path=" + java.net.URLEncoder.encode(request.getRequestURI() + strQueryString, "UTF-8"));

            }

            return;

        }

    }

    public void destroy() {

        System.out.println("login filter destroy");

    }

}

web.xml:

<?xml version="1.0" encoding="ISO-8859-1"?>

<!--

  Licensed to the Apache Software Foundation (ASF) under one or more

  contributor license agreements.  See the NOTICE file distributed with

  this work for additional information regarding copyright ownership.

  The ASF licenses this file to You under the Apache License, Version 2.0

  (the "License"); you may not use this file except in compliance with

  the License.  You may obtain a copy of the License at

      http://www.apache.org/licenses/LICENSE-2.0

  Unless required by applicable law or agreed to in writing, software

  distributed under the License is distributed on an "AS IS" BASIS,

  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

  See the License for the specific language governing permissions and

  limitations under the License.

-->

<web-app xmlns="http://java.sun.com/xml/ns/javaee"

  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

  xsi:schemaLocation="http://java.sun.com/xml/ns/javaee

                      http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"

  version="3.0"

  metadata-complete="true">

    <description>

      My Test WebSite

    </description>

    <display-name>My Test WebSite</display-name>

    <servlet>

      <servlet-name>hello</servlet-name>

      <servlet-class>com.my.Hello</servlet-class>

    </servlet>

    <servlet>

      <servlet-name>login</servlet-name>

      <servlet-class>com.my.Login</servlet-class>

    </servlet>

    <servlet-mapping>

        <servlet-name>hello</servlet-name>

        <url-pattern>/hello</url-pattern>

    </servlet-mapping>

    <servlet-mapping>

        <servlet-name>login</servlet-name>

        <url-pattern>/login</url-pattern>

    </servlet-mapping>

    <filter>

        <filter-name>loginFilter</filter-name>

        <filter-class>com.my.filter.LoginFilter</filter-class>

        <init-param>

            <param-name>/admin</param-name>

            <param-value>admin</param-value>

        </init-param>

        <init-param>

            <param-name>/hello</param-name>

            <param-value>admin</param-value>

        </init-param>

    </filter>

    <filter>

        <filter-name>helloFilter</filter-name>

        <filter-class>com.my.filter.HelloFilter</filter-class>

    </filter>

    <filter-mapping>

        <filter-name>loginFilter</filter-name>

        <url-pattern>/*</url-pattern>

    </filter-mapping>

    <filter-mapping>

        <filter-name>helloFilter</filter-name>

        <url-pattern>/hello</url-pattern>

    </filter-mapping>

    <listener>

        <listener-class>com.my.ServletListener</listener-class>

    </listener>

</web-app>

可以对应不同的角色设置不同的路径访问权限。

使用Servlet Filter做Login checking的更多相关文章

Servlet Filter 2
10.Filter常见应用 )统一全站字符编码的过滤器通过配置参数encoding指明使用何种字符编码,以处理Html Form请求参数的中文问题案例:编写jsp 输入用户名,在Servlet中获 ...
Java Servlet Filter(转)
做web开发的人对于Filter应该不会陌生,一直在很简单的使用,但是一直没有系统的总结一下,随着年纪的慢慢长大,喜欢总结一些事情,下面说说我对Filter的理解,官方给出的Filter的定义是在请求 ...
Servlet/Filter发布后与其他页面的相对路径
1.Servlet 3个文件 E:\web.workspace\mldndemo\WebContent\ch14\regist.html E:\web.workspace\mldndemo\WebCo ...
Java Servlet Filter
做web开发的人对于Filter应该不会陌生,一直在很简单的使用,但是一直没有系统的总结一下,随着年纪的慢慢长大,喜欢总结一些事情,下面说说我对Filter的理解,官方给出的Filter的定义是在请求 ...
servlet/filter/listener/interceptor区别与联系
转自:http://www.cnblogs.com/doit8791/p/4209442.html servlet.filter.listener是配置到web.xml中(web.xml 的加载顺序是 ...
【转】servlet/filter/listener/interceptor区别与联系
原文:https://www.cnblogs.com/doit8791/p/4209442.html 一.概念: 1.servlet:servlet是一种运行服务器端的java应用程序,具有独立于平台 ...
java Servlet Filter 拦截Ajax请求，统一处理session超时的问题
后台增加filter,注意不要把druid也屏蔽了 import java.io.IOException; import javax.servlet.Filter; import javax.serv ...
Spring boot中使用servlet filter
Spring boot中使用servlet filter liuyuhang原创,未经允许请勿转载! 在web项目中经常需要一些场景,如参数过滤防止sql注入,防止页面攻击,空参数矫正等, 也可以做成 ...

随机推荐

matlab 字符分割
http://blog.csdn.net/gotomic/article/details/7898307 注意到以'.'分割时,写成'\.'.前者代表其他含义.可通过help regexp来查询. 例 ...
DataTableToExcel
public static string CreateExcel(DataTable dt, string FileName, string path, string columns) ...
nginx+tomcat集群配置(1)---根目录设定和多后端分发配置
前言: 对于javaer而言, nginx+tomcat集群配置, 已然成了web应用部署的主流. 大公司如此, 小公司亦然. 对于个人开发者而言, 资源有限, 往往多个web应用混部于一台服务器(云 ...
Scrum第一天任务认领情况
在团队项目“广商百货”的SCRUM项目中我认领的任务是对登录注册界面进行完善.具体功能还没有实现,还在学习中...
bsgrid
网址:http://bsgrid.oschina.mopaasapp.com/ var total = gridObj.options.totalRows; jquery必须放在bsgrid的前面根 ...
PHP设置图片文件上传大小的具体实现方法
PHP默认的上传限定是最大2M,想上传超过此设定的文件,需要调整PHP.apache等的一些参数我们简要介绍一下PHP文件上传涉及到的一些参数: •file_uploads :是否允许通过HTTP上 ...
救援行动(save) (BFS)
时间限制: 1 Sec 内存限制: 64 MB提交: 42 解决: 9[提交][状态][讨论版] 题目描述 Angel被人抓住关在一个迷宫了!迷宫的长.宽均不超过200,迷宫中有不可以越过的墙以及 ...
HDU-5785 Interesting（Manacher算法+区间处理）
题目大意:给一个字符串,求所有相邻两回文子串的外侧下标之积的和题目分析:另L[i]为所有以 i 为右端点的回文字串的左端点之和,同理,另R[i]表示所有以 i 为左端点的回文子串的右端点之和.显然, ...
PHP迭代
计算1到10的和: <?php function f($n) { $before_1 = 1; $before_2 = 1; for( $i = 3;$i <= $n;++$i ) { $ ...
caffe: train error: Serializing 25 layers--- Check failed: proto.SerializeToOstream(&output)
I0221 21:47:41.826748 6797 solver.cpp:259] Train net output #0: loss = 0.00413362 (* 1 = 0.0041 ...

使用Servlet Filter做Login checking

使用Servlet Filter做Login checking的更多相关文章

随机推荐

热门专题