码迷,mamicode.com
首页 > 其他好文 > 详细

Stringboot 拦截器Filter实现登录认证

时间:2018-08-10 15:47:18      阅读:479      评论:0      收藏:0      [点我收藏+]

标签:clu   ret   package   auto   cte   min   ssi   getc   situation   

一.首先新建一个SessionFilter类,实现Filter 。需要注意,如果使用iframe。跳转到登录页面时需要拼接html,使其跳转到父页面。

package com.insurance.filter;
import java.io.IOException;
import java.io.PrintWriter;
import java.util.ArrayList;
import java.util.List;
import java.util.regex.Matcher;
import java.util.regex.Pattern;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Value;

@WebFilter(filterName = "sessionFilter",urlPatterns = {"/*"})
public class SessionFilter implements Filter {

    private static final org.slf4j.Logger logger = LoggerFactory.getLogger(SessionFilter.class);

    @Value("$(serverurl)")
    private String serverurl;
    /**
     * 封装,不需要过滤的list列表
     */
    protected static List<Pattern> patterns = new ArrayList<Pattern>();
    
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
        //patterns.add(Pattern.compile("login/index.html"));
        patterns.add(Pattern.compile("login.html"));
        patterns.add(Pattern.compile("login"));
        //patterns.add(Pattern.compile("main/autoFillty_rj_situation.*"));
       // patterns.add(Pattern.compile("main/post.*"));
        patterns.add(Pattern.compile(".*[(\\.js)||(\\.css)||(\\.png)]"));
    }

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain chain) throws IOException, ServletException {
        HttpServletRequest httpRequest = (HttpServletRequest) servletRequest;
        HttpServletResponse httpResponse = (HttpServletResponse) servletResponse;
        String url = httpRequest.getRequestURI().substring(httpRequest.getContextPath().length());
        if (url.startsWith("/") && url.length() > 1) {
            url = url.substring(1);
        }
        if (isInclude(url)){
            chain.doFilter(httpRequest, httpResponse);
            return;
        } else {
            HttpSession session = httpRequest.getSession();
            if (session.getAttribute("admin") != null){
                // session存在
                chain.doFilter(httpRequest, httpResponse);
                return;
            } else {
                // session不存在 准备跳转     如果管理系统使用了html使用了iframe  需要拼接html代码跳转到父页面  如果没有使用iframe将使用httpResponse.sendRedirect("/login.html")直接跳转
                
                //httpResponse.sendRedirect("/login.html");
                PrintWriter out = httpResponse.getWriter();
                out.println("<html>");    
                out.println("<script>");    
                out.println("window.open (‘"+httpRequest.getContextPath()+"/login.html‘,‘_top‘)");    
                out.println("</script>");    
                out.println("</html>"); 
            }
        }
    }

    @Override
    public void destroy() {

    }

    /**
     * 是否需要过滤
     * @param url
     * @return
     */
    private boolean isInclude(String url) {
        for (Pattern pattern : patterns) {
            Matcher matcher = pattern.matcher(url);
            if (matcher.matches()) {
                return true;
            }
        }
        return false;
    }


    
}

二.过滤器的配置

         配置过滤器有两种方式,第一种是纯注解方式,第二种是写过滤器注册配置类

         1.纯注解方式配置过滤器  :需要在过滤器上添加WebFilter ,在springboot启动类上面加上ServletComponentScan注解

           

@WebFilter(filterName = "sessionFilter",urlPatterns = {"/*"})
public class SessionFilter implements Filter {
}

 

@SpringBootApplication
@ServletComponentScan
public class LinkInsuranceApplication {

    public static void main(String[] args) {
        SpringApplication.run(LinkInsuranceApplication.class, args);
    }
}

  2.通过过滤器注册配置类使用过滤器

import javax.servlet.Filter;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import com.ty.tyzxtj.fiter.SessionFilter;

/**
 * 过滤器配置
 * @author wangjiping
 *
 */
@Configuration
public class FilterConfig {
    /**
     * 配置过滤器
     * @return
     */
    @Bean
    public FilterRegistrationBean someFilterRegistration() {
        FilterRegistrationBean registration = new FilterRegistrationBean();
        registration.setFilter(sessionFilter());
        registration.addUrlPatterns("/*");
        registration.addInitParameter("paramName", "paramValue");
        registration.setName("sessionFilter");
        return registration;
    }

    /**
     * 创建一个bean
     * @return
     */
    @Bean(name = "sessionFilter")
    public Filter sessionFilter() {
        return new SessionFilter();
    }
}

 

            

Stringboot 拦截器Filter实现登录认证

标签:clu   ret   package   auto   cte   min   ssi   getc   situation   

原文地址:https://www.cnblogs.com/dbutil/p/9454933.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!