Java Servlet实现在浏览器中打开pdf文件

很多朋友想知道怎么让客户端请求的pdf文件在浏览器中打开让用户在线浏览，而不是直接下载，下面我就来做一个简单的例子：
1、前端html页面代码：
a、我这儿做了一个密码设置，只有用户输入正确的密码，才能在线打开正确的的pdf文件；
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>浏览器在线打开pdf文件</title>
</head>
<body>
<form action="FileDownLoadServlet" method="post">
<input type="password" name="password" value=""/><br>
<input type="submit" name="download" value="Download">
</form>
</body>
</html>

2、后台java代码：
package com.victory.servlet;

import java.io.File;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;

import javax.servlet.ServletException;
import javax.servlet.annotation.MultipartConfig;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

@MultipartConfig
@WebServlet("/FileDownLoadServlet")
public class FileDownLoadServlet extends HttpServlet {
private static final long serialVersionUID = 1L;

protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
doPost(request, response);
}

protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {

String password = request.getParameter("password");
if("123456".equals(password)) {
response.setContentType("application/pdf");
//InputStream is = getServletContext().getResourceAsStream("/WEB-INF/1.pdf");
InputStream is = new FileInputStream(new File("F:/1.pdf"));
// if(is == null) {
// System.out.println("要下载的文件不存在！");
// }else {
OutputStream os = response.getOutputStream();
writeBytes(is, os);
// }
}
}

private void writeBytes(InputStream in, OutputStream out) throws IOException {
byte[] buffer = new byte[1024];
int length = -1;
while ((length = in.read(buffer)) != -1) {
out.write(buffer, 0, length);
}
in.close();
out.close();
}

}

写的简单，没有做相关的判断，仅作参考，不对之处欢迎抛砖！