<filter>
<filter-name>authentication</filter-name>
<filter-class>
com.nova.colimas.web.filters.authenticationfilter
</filter-class>
<init-param>
<param-name>onerror</param-name>
<param-value>/pages/index.jsp</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>authentication</filter-name>
<url-pattern>/protect/*</url-pattern>
</filter-mapping>
package com.nova.colimas.web.filters;
import java.io.ioexception;
import javax.servlet.requestdispatcher;
import javax.servlet.servletexception;
import javax.servlet.http.*;
import javax.servlet.filter;
import javax.servlet.filterchain;
import javax.servlet.filterconfig;
import com.nova.colimas.web.bean.userbean;
import javax.servlet.servletrequest;
import javax.servlet.servletresponse;
import org.apache.struts.globals;
import org.apache.struts.action.*;
import com.nova.colimas.web.constants.constants;
/**
* filter implementation for user authentication。必须实现filter接口
* @author tyrone
* @version $id: authenticationfilter.java,v 1.0
*/
public class authenticationfilter implements filter
{
/**
* filterconfig will store the reference of filterconfig
*/
private filterconfig filterconfig;
private string onerrorurl;
/**
* store the reference of the filterconfig.
* @param config filterconfig object
* @throws servletexception
*/
public void init(filterconfig config) throws servletexception
{
//获得验证失败forward地址
filterconfig = config;
onerrorurl=filterconfig.getinitparameter("onerror");
if (onerrorurl==null "".equals(onerrorurl)){
onerrorurl="/pages/index.jsp";
}
}
/**
* user authentication is done. if user is authenticated successful then
* control is transferred to logon uri
* @param servletrequest request
* @param servletrequest response
* @param filterchain filter chain
* @throws servletexception,ioexception
*/
public void dofilter(servletrequest request, servletresponse response, filterchain next)
throws ioexception, servletexception
{
httpservletrequest httprequest = (httpservletrequest)request;
httpservletresponse httpresponse=(httpservletresponse)response;
// current session
httpsession httpsession = httprequest.getsession();
//session里是否有用户信息。
if (httpsession.getattribute(constants.user_key) == null)
{
actionerrors errors=new actionerrors();
errors.add(actionerrors.global_error,
new actionerror("error authentication"));
httprequest.setattribute(globals.error_key,errors);
//没有,验证失败forward到/pages/index.jsp httprequest.getrequestdispatcher(onerrorurl).forward(httprequest,httpresponse);
}else
//成果过滤action结束
next.dofilter(request,response);
}
/**
* destroy() method is called by the servlet container
*/
public void destroy()
{
}
}
Java Asp PHP .Net XML C/C++ CGI VB Jsp J2ee J2se J2me EJB Servlet Tomcat Resin Struts Weblogic Eclipse ANT GUI JMS Web servise IDEA Webphere Hibernate Spring Jboss Applet Swing Socket Javamail Perl Ajax P2P 安全 模式 框架 测试 开源 游戏
Windows XP Windows 2000 Windows 2003 Windows Me Windows 9.x Linux UNIX 注册表 操作系统 服务器 应用服务器