用struts2拦截器实现权限检查

最新推荐文章于 2017-05-08 20:01:00 发布

原创最新推荐文章于 2017-05-08 20:01:00 发布 · 3.8k 阅读

2 ·

CC 4.0 BY-SA版权

文章标签：

#struts #import #interceptor #action #exception #user

本文介绍了一个使用Struts2框架实现的简单登录系统案例，包括登录验证、用户信息保存及展示、注销等功能，并通过自定义拦截器进行权限检查。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

<%@ page contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>

<%@ taglib prefix="s" uri="/struts-tags"%>

String path = request.getContextPath();

String basePath = request.getScheme() + "://" + request.getServerName() + ":" + request.getServerPort() + path + "/";

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>

<head>

<s:head />

<title>My JSP 'login.jsp' starting page</title>

<!--

-->

</head>

<body>

<s:fielderror/>

</div>

<s:form action="login" theme="simple">

<tr>

Name:

</td>

<td>

<s:textfield name="name" />

</td>

<td>

<s:submit value="Submit" />

</td>

</tr>

<tr>

<a href="welcome.action">Go to welcome page directly.</a>

</td>

</tr>

</table>

</s:form>

</body>

</html>

welcome.jsp

<%@ page contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>

<%@ taglib prefix="s" uri="/struts-tags"%>

String path = request.getContextPath();

String basePath = request.getScheme() + "://" + request.getServerName() + ":" + request.getServerPort() + path + "/";

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>

<head>

<s:head />

<title>My JSP 'login.jsp' starting page</title>

<!--

-->

</head>

<body>

<s:form action="logout" theme="simple">

<h2>

Welcome!

</h2>

<tr>

<td>

Name:

</td>

<td>

<s:property value="#session['USER_INFO'].name" />

</td>

</tr>

<tr>

<td>

</td>

<td>

<s:property value="#session['USER_INFO'].loginTime" />

</td>

</tr>

<tr>

<td>

<s:submit value="Logout" />

</td>

<td>

<a href="login.action">Back to login.</a>

</td>

</tr>

</table>

</s:form>

</body>

</html>

struts.xml

<!DOCTYPE struts PUBLIC

"-//Apache Software Foundation//DTD Struts Configuration 2.0//EN"

"http://struts.apache.org/dtds/struts-2.0.dtd">

<interceptor name="authCheck"

class="interceptor.AuthCheckInterceptor">

</interceptor>

<interceptor-stack name="myStack">

<interceptor-ref name="defaultStack" />

<interceptor-ref name="authCheck"></interceptor-ref>

</interceptor-stack>

</interceptors>

<default-interceptor-ref name="myStack"></default-interceptor-ref>

<global-results>

<result name="globalLogin">login.jsp</result>

</global-results>

</package>

<result>welcome.jsp</result>

<result name="input">login.jsp</result>

</action>

<result>login.jsp</result>

</action>

</package>

<result>welcome.jsp</result>

</action>

</package>

</struts>

LoginAction.java

package action;

import java.util.Date;

import java.util.Map;

import bean.LoginedUser;

import com.opensymphony.xwork2.ActionContext;

import com.opensymphony.xwork2.ActionSupport;

@ SuppressWarnings ( "unchecked" )

public class LoginAction extends ActionSupport {

private String name;

private static final long serialVersionUID = -2907891170345505600L;

@ Override

public String execute() throws Exception {

Map session = ActionContext.getContext().getSession();

LoginedUser user = new LoginedUser();

user.setName(name);

user.setLoginTime(new Date());

if (name.startsWith("U_")) {//假设用户名以"U_"开头才是合法的

session.put("USER_INFO", user);//只有此处会向session里面加入key=“USER_INFO”的对象

return SUCCESS;

} else {

addFieldError("name", "name is invalid.");

return INPUT;

}

public void validate() {

if (null == name || name.trim().length() < 1) {

addFieldError("name", "name is required.");

}

public String getName() {

return name;

}

public void setName(String name) {

this.name = name;

}

LogoutAction.java

package action;

import java.util.Map;

import com.opensymphony.xwork2.ActionContext;

import com.opensymphony.xwork2.ActionSupport;

@ SuppressWarnings ( "unchecked" )

public class LogoutAction extends ActionSupport {

private static final long serialVersionUID = -2907891170345505600L;

@ Override

public String execute() throws Exception {

Map session = ActionContext.getContext().getSession();

if (null != session.get("USER_INFO")) {// 刪除session中key="USER_INFO"的對象

session.remove("USER_INFO");

}

return SUCCESS;//注销完毕，回到登录页面

}

WelcomeAction.java

package action;

import com.opensymphony.xwork2.ActionSupport;

@ SuppressWarnings ( "unchecked" )

public class WelcomeAction extends ActionSupport {

private static final long serialVersionUID = -2907891170345505600L;

@ Override

public String execute() throws Exception {

return SUCCESS;

}

AuthCheckInterceptor.java

package interceptor;

import java.util.Map;

import bean.LoginedUser;

import com.opensymphony.xwork2.ActionContext;

import com.opensymphony.xwork2.ActionInvocation;

import com.opensymphony.xwork2.interceptor.AbstractInterceptor;

@ SuppressWarnings ( "unchecked" )

public class AuthCheckInterceptor extends AbstractInterceptor {

private static final long serialVersionUID = -4535462154177128320L;

@ Override

public String intercept(ActionInvocation ai) throws Exception {

Map session = ActionContext.getContext().getSession();

LoginedUser user = (LoginedUser)session.get("USER_INFO");

if(null==user){// 判断session里是否有key="USER_INFO"的对象

return "globalLogin";// 转发到登录页面

}

return ai.invoke();

}