struts 拦截器来过滤用户的权限

最新推荐文章于 2024-10-15 09:53:24 发布

bianguangxue

最新推荐文章于 2024-10-15 09:53:24 发布

阅读量439

点赞数

CC 4.0 BY-SA版权

分类专栏： struts2

本文链接：https://blog.youkuaiyun.com/bianguangxue/article/details/41643591

struts2 专栏收录该内容

7 篇文章

订阅专栏

本文介绍了一个基于Struts2框架的权限拦截器实现方法。通过分析用户角色与权限配置，确保只有具备相应权限的用户才能访问特定资源。文章详细展示了如何从用户会话中获取信息，并与请求的资源进行匹配来验证权限。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

package com.cstc.web.interceptor;

import java.util.Set;

import org.apache.commons.lang3.StringUtils;
import org.apache.struts2.ServletActionContext;

import com.cstc.common.Constants;
import com.cstc.entity.AppAccount;
import com.cstc.entity.Privilege;
import com.cstc.entity.Role;
import com.cstc.service.AppAccountService;
import com.opensymphony.xwork2.ActionContext;
import com.opensymphony.xwork2.ActionInvocation;
import com.opensymphony.xwork2.interceptor.AbstractInterceptor;

//权限拦截器
public class PrivilegeInterceptor  extends  AbstractInterceptor{

	
	private static final long serialVersionUID = 6417931165996137903L;

	private AppAccountService appAccountService; 
	
	@Override
	public String intercept(ActionInvocation invocation) throws Exception {
		System.out.println("privilegeInterceptor"+appAccountService);

		AppAccount acc =   (AppAccount) ActionContext.getContext().getSession().get(Constants.KEY_SESSION_CURR_USER);
		boolean flag = false;

		if(acc != null){
			
		   String uri =  ServletActionContext.getRequest().getRequestURI();
		   
		   String resource = StringUtils.substringBetween(uri, "/mng/", "_");
		   String action = StringUtils.substringBetween(uri, "_", ".action");
		   
			System.out.println(acc);
			System.out.println("account.Role:"+acc.getRole());
			Role r  = acc.getRole();
			Set<Privilege> set =  r.getSetPrivilege();
			for (Privilege p : set) {
				System.out.println("p::+++++"+p);
				if(p.getResources().equalsIgnoreCase(resource)){
					if(p.getAction().equals(action)){
						flag=true;
					}
				}
				
			}
			
			if(flag){
				return invocation.invoke();
			}else{
				return "fail";
			}
		
		}else{
			return invocation.invoke();
		}
		
	
	}

	public AppAccountService getAppAccountService() {
		return appAccountService;
	}

	public void setAppAccountService(AppAccountService appAccountService) {
		this.appAccountService = appAccountService;
	}

}