Java Servlet Filter实现Web路径和用户日志过滤器

 以下是本人在项目中用Servlet Filter实现的Web路径和用户日志过滤器：package com.sunfairs.filter; import java.io.IOException; import java.util.List; import java.util.Vector; import javax.servlet.Filter; import javax.servlet.FilterChain; import javax.servlet.FilterConfig; import javax.servlet.RequestDispatcher; import javax.servlet.ServletException; import javax.servlet.ServletRequest; import javax.servlet.ServletResponse; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import org.apache.log4j.Logger; import com.sunfairs.bean.Authority; import com.sunfairs.constant.ShopConstants; import com.sunfairs.dao.AuthorityDAO; public class ApplicationFilter implements Filter { private static final Logger logger = Logger.getLogger(ApplicationFilter.class); private String filterPaths; public void destroy() { } public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException { HttpServletRequest httpRequest = (HttpServletRequest) request; HttpServletResponse httpResponse = (HttpServletResponse) response; AuthorityDAO authorityDao = new AuthorityDAO(); httpRequest.setCharacterEncoding("UTF-8"); String requestPath = httpRequest.getRequestURI(); String requestServer = requestPath.substring(0,requestPath.indexOf("/", 1)); String filterPath = httpRequest.getServletPath(); String queryString = httpRequest.getQueryString(); String action = ""; if(queryString!=null && !queryString.equals("")){ if(queryString.indexOf("&")!=-1){ action = "?"+queryString.substring(0, queryString.indexOf("&")); } else{ action = "?"+queryString; } } //logger.info(action); RequestDispatcher dispatcher = httpRequest.getRequestDispatcher("/system_login.jsp"); //logger.info(filterPath); //logger.info(requestPath); String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+requestPath; HttpSession session = httpRequest.getSession(); String department = (String) session.getAttribute(ShopConstants.LOGIN_DEPARTMENT); String requestUser = (String) session.getAttribute(ShopConstants.LOGIN_USER); Long userId = (Long) session.getAttribute(ShopConstants.LOGIN_ID); logger.info(department+"/"+requestUser+"--"+basePath+action); String[]filterPathArray = this.filterPaths.split(","); boolean isStartsWith = false; if(userId!=null && requestUser != null){ if(filterPath.indexOf("j_logout")==-1){ for(int i=0;i<filterPathArray.length;i++){ if(filterPath.startsWith(filterPathArray[i])){ isStartsWith = true; break; } } if(isStartsWith){ List authorityList = authorityDao.findUsedByUserId(userId); Vector<String> paths = new Vector<String>(); for(int j=0;j<authorityList.size();j++){ Authority userAuthor = (Authority) authorityList.get(j); paths.add(userAuthor.getPath()); } if(!paths.contains(filterPath+action)){ httpResponse.sendRedirect(requestServer+"/requestDeny.jsp"); } else{ chain.doFilter(request, response); } } else{ chain.doFilter(request, response); } } else{ chain.doFilter(request, response); } } else{ if(!filterPath.equals("/system/userTable.do")){ session.setAttribute("lastPage", filterPath+queryString); dispatcher.forward(httpRequest, httpResponse); } else{ chain.doFilter(request, response); } } //chain.doFilter(httpRequest, httpResponse); } public void init(FilterConfig config) throws ServletException { String filterPaths = config.getInitParameter("filterPaths"); if(filterPaths!=null){ this.filterPaths = filterPaths; logger.info("初始化拦截路径成功!"); } else{ this.filterPaths = "/order/"; } } }