springboot filter 多域名跨域访问

最新推荐文章于 2024-07-06 20:36:20 发布

songjiahe123

最新推荐文章于 2024-07-06 20:36:20 发布

阅读量714

点赞数

CC 4.0 BY-SA版权

分类专栏： java 文章标签：跨域访问

本文链接：https://blog.youkuaiyun.com/songjiahe123/article/details/85161806

java 专栏收录该内容

5 篇文章

订阅专栏

本文介绍了一个用于判断用户是否登录的过滤器设计，该过滤器通过设定允许路径来避免对特定URL的拦截，同时实现了跨域请求的处理，确保了系统的安全性与易用性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

package com.wolfking.jeesite.common.filter;

/**
 * @Auther: 宋甲贺
 * @Date: 2018/12/21
 * @Description: com.wolfking.jeesite.common.filter
 * @version: 1.0
 */

//判断是否登陆的 filter

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.net.URI;
import java.util.Arrays;
import java.util.Collections;
import java.util.HashSet;
import java.util.Set;

// /* 表示全部拦截
//@WebFilter(filterName = "loginFilter",urlPatterns = "/*")
public class LoginFilter implements Filter {
    //这里面 填写不需要 被拦截的地址
    private static final Set<String> ALLOWED_PATHS = Collections.unmodifiableSet(
            new HashSet<String>( Arrays.asList("/login","/isLogin","/findCategory") )
    );

    //初始化调用的方法
    //当服务器 被启动的时候，调用
    public void init(FilterConfig filterConfig) throws ServletException { }
    private static URI getIP(URI uri) {
        URI effectiveURI = null;

        try {
            // URI(String scheme, String userInfo, String host, int port, String
            // path, String query,String fragment)
            effectiveURI = new URI(uri.getScheme(), uri.getUserInfo(), uri.getHost(), uri.getPort(), null, null, null);
        } catch (Throwable var4) {
            effectiveURI = null;
        }

        return effectiveURI;
    }

    // 跨域域名设置
    public static final String[] ALLOW_DOMAIN = { "http://localhost",
            "http://192.168.0.100" };
    //拦截的方法
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain filterChain) throws IOException, ServletException {


        HttpServletRequest request = (HttpServletRequest) req;
        HttpServletResponse response = (HttpServletResponse) res;
        String url2=request.getScheme()+"://"+ request.getServerName();
        System.out.println(url2);
        if (Arrays.asList(ALLOW_DOMAIN).contains(url2)) {
            //解决跨域的问题
            response.setHeader("Access-Control-Allow-Origin", "*");
            response.setHeader("Access-Control-Allow-Credentials", "true");
            response.setHeader("Access-Control-Allow-Headers", "Content-Type,Content-Length, Authorization, Accept,X-Requested-With,X-App-Id, X-Token");
            response.setHeader("Access-Control-Allow-Methods", "PUT,POST,GET,DELETE,OPTIONS");
            response.setHeader("Access-Control-Max-Age", "3600");


            String path = request.getRequestURI().substring(request.getContextPath().length()).replaceAll("[/]+$", "");
            boolean allowePath = ALLOWED_PATHS.contains(path);

       /* if (!allowePath) {  //需要拦截的方法
            Object aa = request.getSession().getAttribute("user");
            if (aa != null) {
                filterChain.doFilter(request,response);
            }
            else {
                response.getWriter().write("noLogin");
            }
        } else {  //不需要被拦截的方法*/
            //直接放行
            filterChain.doFilter(request, response);
            /*}*/
        }else{
            response.getWriter().write("noLogin");
        }


    }

    //销毁时候调用的方法
    public void destroy() { }
}