Struts2配置拦截器

最新推荐文章于 2024-05-12 10:00:24 发布

原创最新推荐文章于 2024-05-12 10:00:24 发布 · 148 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#Struts2 #Inteceptor

本文详细介绍了如何在Java应用中实现登录拦截和权限检查，确保只有经过验证的用户才能访问特定页面。通过定制的拦截器，实现了针对不同操作方法的权限控制，有效提升系统的安全性。

=============================java==============
import java.util.Map;

import com.opensymphony.xwork2.ActionContext;
import com.opensymphony.xwork2.ActionInvocation;
import com.opensymphony.xwork2.interceptor.Interceptor;
import com.zr.pojo.aged.home.ZaghUsers;

public class UtilInterceptor implements Interceptor {

/**
* 实现登录拦截
*/
private static final long serialVersionUID = -532172353763647921L;

public void destroy() {
// TODO Auto-generated method stub

}

public void init() {
// TODO Auto-generated method stub

}

@SuppressWarnings("unchecked")
public String intercept(ActionInvocation invocation) throws Exception {
String methodName=null;
Map map = invocation.getInvocationContext().getParameters();
if (map == null || map.size() == 0) {
System.out.println("0");
} else {
String[] keys = new String[map.size()];
map.keySet().toArray(keys);
for (int i = 0; i < keys.length; i++) {
if (map.get(keys[i]) != null) {
String[] values = (String[])map.get(keys[i]);
for (int j = 0; j < values.length; j++) {
methodName=values[0];
}
}
}
}
ActionContext ctx = invocation.getInvocationContext();
Map session = ctx.getSession();
// 取出名为user的session属性
ZaghUsers user = (ZaghUsers) session.get("userbean");
// 如果没有登陆，返回重新登陆
if (user != null||(methodName!=null&&methodName.equalsIgnoreCase("User.checkUserLogin"))||(methodName!=null&&methodName.equalsIgnoreCase("Home.index"))) {
return invocation.invoke();
} else {
return "/index.jsp";
}
//return invocation.invoke();
}

// @Override
// protected String doIntercept(ActionInvocation invocation) throws Exception {
// ActionProxy proxy=invocation.getProxy();
// String methodName=proxy.getMethod();
// Method method=null;
// method = proxy.getAction().getClass().getMethod(methodName, new Class[0]);
//// String methodName=proxy.getClass().getMethod(name, parameterTypes);
// // 取得请求相关的ActionContext实例
// ActionContext ctx = invocation.getInvocationContext();
// Map session = ctx.getSession();
// // 取出名为user的session属性
// ZaghUsers user = (ZaghUsers) session.get("userbean");
// // 如果没有登陆，返回重新登陆
// if (user != null||methodName.equalsIgnoreCase("checkUserLogin")) {
// return invocation.invoke();
// } else {
// return "/tpl/html//home/Home/index.jsp";
// }
// }

}
=====================struts.xml==============================
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE struts PUBLIC
"-//Apache Software Foundation//DTD Struts Configuration 2.0//EN"
"http://struts.apache.org/dtds/struts-2.0.dtd">

<struts>


<constant name="struts.i18n.encoding" value="UTF-8"/>
<constant name="struts.custom.i18n.resources" value="messages"/>
<constant name= "struts.multipart.maxSize" value="52428800" />

<package name="default" extends="struts-default" >
<result-types>
<result-type name="direct" class="com.gctx.framework.struts2.dispatcher.DirectResultDispatcher"/>
</result-types>


<interceptors>

<interceptor name="requestAction"
class="com.gctx.web.action.home.UtilInterceptor" />


<interceptor-stack name="myDefaultStack">

<interceptor-ref name="requestAction">
<param name="excludeMethods">*.index,*.checkUserLogin</param>
</interceptor-ref>
<interceptor-ref name="defaultStack"></interceptor-ref>
</interceptor-stack>
</interceptors>

<default-interceptor-ref name="myDefaultStack" />
</package>
<package name="all" extends="default">
<result-types>
<result-type name="direct" class="com.gctx.framework.struts2.dispatcher.DirectResultDispatcher"/>
</result-types>
<action name="*" class="com.gctx.web.action.GenericBaseAction" >
<result name="*" type="direct">direct</result>
</action>
</package>

</struts>