• 吴裕雄--天生自然轻量级JAVA EE企业应用开发Struts2Sping4Hibernate整合开发学习笔记:struts2使用拦截器完成权限控制


    <?xml version="1.0" encoding="GBK"?>
    <project name="struts" basedir="." default="">
        <property name="dist" value="classes"/>
        <property name="src" value="src"/>
        
        <path id="classpath">
            <fileset dir="lib">
                <include name="*.jar"/>
            </fileset>
            <pathelement path="${dist}"/>
        </path>
    
        <target name="compile" description="Compile all source code">
            <delete dir="${dist}"/>
            <mkdir dir="${dist}"/>
            <copy todir="${dist}">
                <fileset dir="${src}">
                    <exclude name="**/*.java"/>
                </fileset>        
            </copy>
            <javac destdir="classes" debug="true" includeantruntime="yes"
                deprecation="false" optimize="false" failonerror="true">
                <src path="${src}"/>
                <classpath refid="classpath"/>
            </javac>
        </target>
    
    </project>
    <?xml version="1.0" encoding="GBK"?>
    
    <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
        xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee
        http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd" version="3.1">
        <!-- 定义Struts 2的核心Filter -->
        <filter>
            <filter-name>struts2</filter-name>
            <filter-class>org.apache.struts2.dispatcher.ng.filter.StrutsPrepareAndExecuteFilter</filter-class>
        </filter>
        <!-- 让Struts 2的核心Filter拦截所有请求 -->
        <filter-mapping>
            <filter-name>struts2</filter-name>
            <url-pattern>/*</url-pattern>
        </filter-mapping>
    </web-app>
    <%--
    网站: <a href="http://www.crazyit.org">疯狂Java联盟</a>
    author  yeeku.H.lee kongyeeku@163.com
    version  1.0
    Copyright (C), 2001-2016, yeeku.H.Lee
    This program is protected by copyright laws.
    Program Name:
    Date: 
    --%>
    
    <%@ page contentType="text/html; charset=GBK" language="java" errorPage="" %>
    <%@ taglib prefix="s" uri="/struts-tags"%>
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <title>错误页面</title>
    </head>
    <body>
        您不能登录!
    </body>
    </html>
    <%--
    网站: <a href="http://www.crazyit.org">疯狂Java联盟</a>
    author  yeeku.H.lee kongyeeku@163.com
    version  1.0
    Copyright (C), 2001-2016, yeeku.H.Lee
    This program is protected by copyright laws.
    Program Name:
    Date: 
    --%>
    
    <%@ page contentType="text/html; charset=GBK" language="java" errorPage="" %>
    <%@ taglib prefix="s" uri="/struts-tags"%>
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <title>登录页面</title>
    </head>
    <body>
    <h3>用户登录</h3>
    ${tip}
    <s:form action="login">
        <s:textfield name="username" label="用户名"/>
        <s:password name="password" label="密码"/>
        <s:submit value="登录"/>
    </s:form>
    </body>
    </html>
    <%--
    网站: <a href="http://www.crazyit.org">疯狂Java联盟</a>
    author  yeeku.H.lee kongyeeku@163.com
    version  1.0
    Copyright (C), 2001-2016, yeeku.H.Lee
    This program is protected by copyright laws.
    Program Name:
    Date: 
    --%>
    
    <%@ page contentType="text/html; charset=GBK" language="java" errorPage="" %>
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <title>作者李刚已经出版的图书:</title>
        <meta name="website" content="http://www.crazyit.org"/>
    </head>
    <body>
    <h2>作者李刚已经出版的图书:</h2>
    轻量级Java EE企业应用实战<br/>
    疯狂iOS讲义<br/>
    疯狂Java讲义<br/>
    </body>
    </html>
    <%--
    网站: <a href="http://www.crazyit.org">疯狂Java联盟</a>
    author  yeeku.H.lee kongyeeku@163.com
    version  1.0
    Copyright (C), 2001-2016, yeeku.H.Lee
    This program is protected by copyright laws.
    Program Name:
    Date: 
    --%>
    
    <%@ page contentType="text/html; charset=GBK" language="java" errorPage="" %>
    <%@ taglib prefix="s" uri="/struts-tags"%>
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <title>成功页面</title>
    </head>
    <body>
        您已经登录!
        <a href="viewBook">查看图书</a>
    </body>
    </html>
    <?xml version="1.0" encoding="GBK"?>
    <!DOCTYPE struts PUBLIC
        "-//Apache Software Foundation//DTD Struts Configuration 2.3//EN"
        "http://struts.apache.org/dtds/struts-2.3.dtd">
    <struts>
        <constant name="struts.i18n.encoding" value="GBK"/>
    
        <package name="lee" extends="struts-default">
            <!-- 用户拦截器定义在该元素下 -->
            <interceptors>
                <!-- 定义了一个名为authority的拦截器 -->
                <interceptor name="authority" 
                    class="org.crazyit.app.interceptor.AuthorityInterceptor"/>
            </interceptors>
    
            <!-- 定义全局Result -->
            <global-results>
                <!-- 当返回login视图名时,转入loginForm.jsp页面 -->
                <result name="login">/WEB-INF/content/loginForm.jsp</result>
            </global-results>
    
            <action name="login" class="org.crazyit.app.action.LoginAction">
                <result name="error">/WEB-INF/content//error.jsp</result>
                <result>/WEB-INF/content/welcome.jsp</result>
            </action>
            <!-- 定义一个名为viewBook的Action,其实现类为ActionSupport -->
            <action name="viewBook">
                <!-- 返回success视图名时,转入viewBook.jsp页面 -->
                <result>/WEB-INF/content/viewBook.jsp</result>
                <interceptor-ref name="defaultStack"/>
                <!-- 应用自定义拦截器 -->
                <interceptor-ref name="authority"/>
            </action>
            <action name="*">
                <result>/WEB-INF/content/{1}.jsp</result>
            </action>
        </package>
    </struts>
    package org.crazyit.app.action;
    
    import com.opensymphony.xwork2.ActionSupport;
    import com.opensymphony.xwork2.ActionContext;
    
    import java.util.*;
    /**
     * Description:
     * <br/>网站: <a href="http://www.crazyit.org">疯狂Java联盟</a>
     * <br/>Copyright (C), 2001-2016, Yeeku.H.Lee
     * <br/>This program is protected by copyright laws.
     * <br/>Program Name:
     * <br/>Date:
     * @author  Yeeku.H.Lee kongyeeku@163.com
     * @version  1.0
     */
    public class LoginAction extends ActionSupport
    {
        private String username;
        private String password;
    
        // username的setter和getter方法
        public void setUsername(String username)
        {
            this.username = username;
        }
        public String getUsername()
        {
            return this.username;
        }
    
        // password的setter和getter方法
        public void setPassword(String password)
        {
            this.password = password;
        }
        public String getPassword()
        {
            return this.password;
        }
    
        public String execute() throws Exception
        {
            System.out.println("进入execute方法执行体..........");
            if (getUsername().equals("crazyit.org")
                && getPassword().equals("leegang") )
            {
                ActionContext ctx = ActionContext.getContext();
                Map<String,Object> session = ctx.getSession();
                session.put("user" , getUsername());
                return SUCCESS;
            }
            return ERROR;
        }
    }
    package org.crazyit.app.interceptor;
    
    import com.opensymphony.xwork2.*;
    import com.opensymphony.xwork2.interceptor.AbstractInterceptor;
    
    import java.util.*;
    
    /**
     * Description:
     * <br/>网站: <a href="http://www.crazyit.org">疯狂Java联盟</a>
     * <br/>Copyright (C), 2001-2016, Yeeku.H.Lee
     * <br/>This program is protected by copyright laws.
     * <br/>Program Name:
     * <br/>Date:
     * @author  Yeeku.H.Lee kongyeeku@163.com
     * @version  1.0
     */
    // 权限检查拦截器继承AbstractInterceptor类
    public class AuthorityInterceptor
        extends AbstractInterceptor
    {
        // 拦截Action处理的拦截方法
        public String intercept(ActionInvocation invocation)
            throws Exception
        {
            // 取得请求相关的ActionContext实例
            ActionContext ctx = invocation.getInvocationContext();
            Map session = ctx.getSession();
            // 取出Session里的user属性
            String user = (String)session.get("user");
            //如果没有登录,或者登录所用的用户名不是crazyit.org,都返回重新登录
            if (user != null && user.equals("crazyit.org") )
            {
                return invocation.invoke();
            }
            // 如果没有登录,将服务器提示放入ActionContext中
            ctx.put("tip" ,"您还没有登录,请输入crazyit.org,leegang登录系统");
            // 返回login的逻辑视图
            return Action.LOGIN;
        }
    }
  • 相关阅读:
    SDWebImage缓存下载图片
    NSMutableUrlRequest自定义封装网络请求
    第152题:乘积最大子序列
    第142题:环形链表II
    第17题:电话号码的组合
    第129题:求根到叶子节点数字之和
    第125题:验证回文串
    第122题:买卖股票的最佳时机II
    第121题:买卖股票的最佳时机
    第120题:三角形最小路径和
  • 原文地址:https://www.cnblogs.com/tszr/p/12366911.html
Copyright © 2020-2023  润新知