Struts之使用拦截器实现的登录权限的控制

只有指定类型的用户才可以进行登录，否则将会登录失败

建立登录界面

<%@ page language="java" contentType="text/html; charset=UTF-8"
    pageEncoding="UTF-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>登录界面</title>
</head>
<body>
	<form action="LoginAction" method="post">
		用户名:<input type="text" name="username"><br>
		密    码:<input type="password" name="password"><br>
		<input type="submit" value="提交"><br>
		<input type="reset" value="重置">
	</form>
</body>
</html>

建立一个registerAction类用于实现对所表单对象当中所提交的登录信息保存到session对象当中去

import javax.servlet.http.HttpSession;
import org.apache.struts2.ServletActionContext;
public class RegisterAction {
	private String username;
	private String password;
	public String getUsername() {
		return username;
	}
	public void setUsername(String username) {
		this.username = username;
	}
	public String getPassword() {
		return password;
	}
	public void setPassword(String password) {
		this.password = password;
	}
	public String register()
	{
		System.out.println("执行注册操作");
		//通过Servlet对象来获取session请求对象
		HttpSession session=ServletActionContext.getRequest().getSession();
		System.out.println("register:username="+username);
		session.setAttribute("username",username);
		return "success";
	}
}

建立一个用于进行业务处理的对象

import com.opensymphony.xwork2.ActionSupport;

public class HandlerAction extends ActionSupport {
	@Override
	public String execute() throws Exception {
		System.out.println("执行业务逻辑处理功能");
		return "success";
	}
}

建立一个拦截器对象用于实现对所有访问HandlerAction对象的请求信息进行过滤操作，拦截器对象用于对session对象当中的数据信息进行获取操作，当所获取的username信息值和拦截器对象当中所指定的用户名相符的时候则允许用户对业务处理类进行访问操作，否则将直接返回到登录界面的当中去。

public class LoginInterceptor extends AbstractInterceptor{
	@Override
	public String intercept(ActionInvocation invocation) throws Exception {
		System.out.println("执行拦截操作");
		//获取action对象的上下文容器对象
		HttpSession session=ServletActionContext.getRequest().getSession();
		String username=(String) session.getAttribute("username");
		if(username !=null && "qingzhiyu".equals(username))
		{//表明登录正确，将当前的拦截权限转交给下一个拦截器对象或action对象
			return invocation.invoke();
		}
		else
			return "login";
	}
}

进行struts.xml文件对象的配置操作

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE struts PUBLIC
	"-//Apache Software Foundation//DTD Struts Configuration 2.3//EN"
	"http://struts.apache.org/dtds/struts-2.3.dtd">
<struts>
	<package name="default-package" namespace="/" extends="struts-default">
		<interceptors>
			<interceptor name="loginInterceptor" class="interceptor.LoginInterceptor"/>
			<interceptor-stack name="mydefaultstack">
				<interceptor-ref name="defaultStack"/>
				<interceptor-ref name="loginInterceptor"/>
			</interceptor-stack>
		</interceptors>
		<action name="handleAction" class="Action.HandlerAction">
			<result name="success">/welcome.jsp</result>
			<result name="login">/login.jsp</result>
			<interceptor-ref name="mydefaultstack"/>
		</action>
		<action name="LoginAction" class="Action.RegisterAction" method="register">
			<result name="success" type="chain">handleAction</result>
		</action>
	</package>
</struts>

登录成功界面:

<%@ page language="java" contentType="text/html; charset=UTF-8"
    pageEncoding="UTF-8"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>登录成功</title>
</head>
<body>
	<h2 style="color: olive;">登录成功界面</h2>
</body>
</html>

Struts之使用拦截器实现的登录权限的控制

猜你喜欢