Struts2权限控制拦截器

最新推荐文章于 2025-06-03 13:57:15 发布

roger_lmj

最新推荐文章于 2025-06-03 13:57:15 发布

阅读量722

点赞数

分类专栏： Struts1.x/2.x 文章标签： struts string interceptor exception action class

Struts1.x/2.x 专栏收录该内容

144 篇文章

订阅专栏

本文介绍了一个基于Struts2框架实现的权限控制案例。通过自定义拦截器AuthorityInterceptor检查用户是否为特定用户（Jcuckoo），若验证通过则允许访问受保护资源，否则返回登录页面。此外，还提供了一个简单的登录功能。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Struts2权限控制拦截器收藏

AuthorityInterceptor.java

public class AuthorityInterceptor extends AbstractInterceptor {
    public String intercept(ActionInvocation invocation) throws Exception {
        ActionContext ctx = invocation.getInvocationContext();
        Map session = ctx.getSession();
        String user = (String) session.get("user");
        if (user != null && user.equals("Jcuckoo")) {
            return invocation.invoke();
        }
        ctx.put("tip", "您还没有登陆，请输入Jcuckoo,admin登陆系统");
        return Action.LOGIN;
    }
}
LoginAction.java

public class LoginAction extends ActionSupport {
    private String username;
    private String password;
    public void setUsername(String username) {
        this.username = username;
    }
    public String getUsername() {
        return username;
    }
    public void setPassword(String password) {
        this.password = password;
    }
    public String getPassword() {
        return password;
    }
    public String execute() throws Exception {
        System.out.println("进入execute方法执行体..........");
        Thread.sleep(1500);
        if (getUsername().equals("Jcuckoo") && getPassword().equals("admin")) {
            ActionContext ctx = ActionContext.getContext();
            Map session = ctx.getSession();
            session.put("user", getUsername());
            return SUCCESS;
        } else {
            return ERROR;
        }
    }
}
struts.xml

    <package name="jCuckoo" extends="struts-default">
        <interceptors>
            <interceptor name="authority" class="jCuckoo.AuthorityInterceptor" />
        </interceptors>
        <global-results>
            <result name="login">/login.jsp</result>
        </global-results>
        <action name="login" class="jCuckoo.LoginAction">
            <result name="error">/error.jsp</result>
            <result name="success">/welcome.jsp</result>
        </action>
        <action name="viewBook">

<result>/WEB-INF/jsp/viewBook.jsp</result>

<interceptor-ref name="defaultStack" />
            <interceptor-ref name="authority" />
        </action>
    </package>
login.jsp

<div style="color:red" align="center">${requestScope.tip}<div>
<form action="login.action" method="post">
    <table align="center">
    <caption><h3>用户登录</h3></caption>
        <tr>
            <td>用户名：<input type="text" name="username"/></td>
        </tr>
        <tr>
            <td>密码：<input type="text" name="password"/></td>
        </tr>
        <tr align="center">
            <td><input type="submit" value="登录"/><input type="reset" value="重填" /></td>
        </tr>
    </table>
</form>
<div align="center"><a href="viewBook.action">查看作者出版的图书</a><div>
welcome.jsp