1. 过滤器 Fillter
1)Servlet过滤器是在Java Servlet规范2.3中定义的，它能够对Servlet容器的请求和响应对象进行检查和修改
2)Servlet过滤器本身并不生成请求和响应对象，它只提供过滤器作用。
3)Servlet过滤器能过在Servlet被调用之前检查Request对象，修改Request Heather和Request内容
4)在Servlet被调用之后检查Response对象，修改Response Header和Response内容。Servlet过滤器负责过滤的Web组件可以是Servlet，JSP或HTML文件
2.Servlet过滤器的过滤过程
3.所有的Servlet过滤器类都必须实现javax.servlet.Filter接口。这个过滤器含有3个过滤器类必须实现的方法：
init()
deFilter()
destory()
4.过滤器链式请求过程（FilterChain）
5. 过滤器实践1
1)创建访问时，检查用户是否登录过滤器
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
package com.example.filter;
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
/**
* Servlet Filter implementation class LoginFilter
*/
@WebFilter("/LoginFilter")
public class LoginFilter implements Filter {
/**
* Default constructor.
*/
public LoginFilter() {
// TODO Auto-generated constructor stub
}
/**
* @see Filter#destroy()
*/
public void destroy() {
// TODO Auto-generated method stub
System.out.println("filter ondestory");
}
/**
* @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain)
*/
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
System.out.println("doFilter");
HttpServletRequest r = (HttpServletRequest)request;
String requestURI = r.getRequestURI();
if (requestURI.endsWith("login.jsp") || requestURI.endsWith("MyLoginServlet")) {
chain.doFilter(request, response);
return;
}
HttpSession session = r.getSession();
if(null == session.getAttribute("user")){
((HttpServletResponse)response).sendRedirect("login.jsp");
return;
}else{
chain.doFilter(request, response);
}
}
/**
* @see Filter#init(FilterConfig)
*/
public void init(FilterConfig fConfig) throws ServletException {
// TODO Auto-generated method stub
System.out.println("filter init");
}
}
|
如果没有登录，则重定向到login.jsp
2) 在web .xml 中配置filter
|
1
2
3
4
5
6
7
8
|
<
filter
>
<
filter-name
>PrivFilter</
filter-name
>
<
filter-class
>com.example.filter.LoginFilter</
filter-class
>
</
filter
>
<
filter-mapping
>
<
filter-name
>PrivFilter</
filter-name
>
<
url-pattern
>/*</
url-pattern
>
</
filter-mapping
>
|
3) login.jsp
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
<%@ page language="java" contentType="text/html; charset=UTF-8"
pageEncoding="UTF-8"%>
<!
DOCTYPE
html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<
html
>
<
head
>
<
meta
http-equiv="Content-Type" content="text/html; charset=UTF-8">
<
title
>Insert title here</
title
>
<% String basePath= request.getContextPath() + "/test"; %>
<
base
href='<%=basePath %>'>
</
head
>
<
body
>
<
form
action="MyLoginServlet" method="post">
username <
input
type="text" name="username"><
br
>
password <
input
type="password" name="password"><
br
>
权限: <
select
name="authority">
<
option
value="1">common user</
option
>
<
option
value="2">admin</
option
>
</
select
>
<
br
>
<
input
type="submit" value="submit" >
</
form
>
</
body
>
</
html
>
|
4)index.jsp
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
<%@ page language="java" contentType="text/html; charset=UTF-8"
pageEncoding="UTF-8"%>
<%@ page import="com.example.bean.User" %>
<!
DOCTYPE
html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<
html
>
<
head
>
<
meta
http-equiv="Content-Type" content="text/html; charset=UTF-8">
<
title
>Insert title here</
title
>
</
head
>
<
body
>
<
a
href="MyQueryServlet">Query</
a
>
<% if(((User)session.getAttribute("user")).getAuthority().equals("2")){ %>
<
a
href="MyUpdateServlet">Update</
a
>
<% } %>
</
body
>
</
html
>
|
5)创建Servlet， 如MyLoginServlet.java，另外两个Servlet： MyQueryServlet和MyUpdateServlet比较简单，只做简单打印信息。
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
package com.example.servlet;
import java.io.IOException;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import com.example.bean.User;
/**
* Servlet implementation class MyLoginServlet
*/
@WebServlet("/MyLoginServlet")
public class MyLoginServlet extends HttpServlet {
private static final long serialVersionUID = 1L;
/**
* @see HttpServlet#HttpServlet()
*/
public MyLoginServlet() {
super();
// TODO Auto-generated constructor stub
}
/**
* @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
*/
protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
doPost(request, response);
}
/**
* @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
*/
protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
User user = new User();
HttpSession session = request.getSession();
String username = request.getParameter("username");
String password = request.getParameter("password");
String authority = request.getParameter("authority");
System.out.println("username:" +username + " authority:" + authority);
if ("1".equals(authority)) {
if ("zhangsan".equals(username) && "123".equals(password)) {
setSession(session, username, password, authority);
request.getRequestDispatcher("filter/index.jsp?username="
+username +"&authority="+authority).forward(request, response);
}else{
failLogin(user,response);
}
}else if ("2".equals(authority)) {
if ("lisi".equals(username) && "456".equals(password)) {
setSession(session, username, password, authority);
request.getRequestDispatcher("filter/index.jsp?username="
+username +"&authority="+authority).forward(request, response);
}else{
failLogin(user,response);
}
}
//登录失败
else{
failLogin(user,response);
}
}
void failLogin(User user, HttpServletResponse response){
/*RequestDispatcher rd = request.getRequestDispatcher("sessionlogin.jsp");
try {
rd.forward(request, response);
} catch (ServletException e) {
e.printStackTrace();
} catch (IOException e) {
e.printStackTrace();
}*/
try {
response.sendRedirect("filter/login.jsp?username="
+user.getUsername() +"&authority="+user.getAuthority());
} catch (IOException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}
private void setSession(HttpSession session, String username, String password, String authority) {
User user = new User();
user.setUsername(username);
user.setPassword(password);
user.setAuthority(authority);
session.setAttribute("user", user);
}
}
|
本文转自Work Hard Work Smart博客园博客，原文链接：http://www.cnblogs.com/linlf03/p/7705970.html，如需转载请自行联系原作者
