struts2 interceptor 拦截器

认证拦截器详解：实现用户权限管理

最新推荐文章于 2024-09-04 11:52:54 发布

原创最新推荐文章于 2024-09-04 11:52:54 发布 · 139 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#struts #interceptor

struts 专栏收录该内容

9 篇文章

订阅专栏

本文深入探讨了认证拦截器的功能和实现机制，着重介绍了如何通过拦截URL跳转来实现用户权限管理，确保只有经过身份验证的用户才能访问特定页面。详细解释了拦截器如何判断用户身份，并根据不同情况执行重定向或正常调用Action。

package com.fusionability.web.interceptor;

import org.apache.struts2.ServletActionContext;

import com.fusionability.web.bean.User;
import com.fusionability.web.utils.Constants;
import com.opensymphony.xwork2.Action;
import com.opensymphony.xwork2.ActionInvocation;
import com.opensymphony.xwork2.interceptor.AbstractInterceptor;

/**
 * 认证拦截器（可以拦截URL的跳转） 
 */
public class AuthInterceptor extends AbstractInterceptor {
  
	@Override
	public String intercept(ActionInvocation invocation) throws Exception {
		if("/FusionAbility/user/register.action".equals(ServletActionContext.getRequest().getRequestURI())
		    ||"/FusionAbility/user/login.action".equals(ServletActionContext.getRequest().getRequestURI())
		    ||"/FusionAbility/user/doRegister.action".equals(ServletActionContext.getRequest().getRequestURI())
		    ||"/FusionAbility/user/doLogin.action".equals(ServletActionContext.getRequest().getRequestURI())
		    ||"/FusionAbility/user/isExistUser.action".equals(ServletActionContext.getRequest().getRequestURI())
		    ||"/FusionAbility/user/refreshPatchcaImage.action".equals(ServletActionContext.getRequest().getRequestURI())
		    ||"/FusionAbility/user/doMail.action".equals(ServletActionContext.getRequest().getRequestURI())
		    ||"/FusionAbility/user/isRightCode.action".equals(ServletActionContext.getRequest().getRequestURI()) 
			||"/FusionAbility/user/updateRetrievepassword.action".equals(ServletActionContext.getRequest().getRequestURI()) 
		    ||"/FusionAbility/user/goUpdateRetrievepassword.action".equals(ServletActionContext.getRequest().getRequestURI())){
			return invocation.invoke();
		}
		User user = (User)ServletActionContext.getRequest().getSession().getAttribute(Constants.SESSION_USER);
		if (user == null) {
			//重定向到登录页面
			return Action.LOGIN;
		}
		return invocation.invoke();
	}
}

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE struts PUBLIC
    "-//Apache Software Foundation//DTD Struts Configuration 2.0//EN"
    "http://struts.apache.org/dtds/struts-2.0.dtd">

<struts>

    <package name="interceptorPackage" extends="struts-default">
        <interceptors>
        	<interceptor name="authInterceptor" class="com.fusionability.web.interceptor.AuthInterceptor"></interceptor>
            <interceptor-stack name="traceStack">
	            <interceptor-ref name="defaultStack"></interceptor-ref>
	            <interceptor-ref name="authInterceptor"></interceptor-ref>
            </interceptor-stack>
        </interceptors>
        <default-interceptor-ref name="traceStack"></default-interceptor-ref>
    </package>

</struts>