过滤器只允许有权限用户访问jsp

1、过滤器

package com.life.struts.filter;

import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class SellerLoginFilter implements Filter {

    @Override
    public void doFilter(ServletRequest servletRequest,
            ServletResponse servletResponse, FilterChain filterChain)
            throws IOException, ServletException {
        // TODO Auto-generated method stub
        //取session
        HttpServletRequest httpServletRequest = (HttpServletRequest) servletRequest;
        HttpServletResponse httpServletResponse = (HttpServletResponse) servletResponse;
        System.out.println("seller过滤器"+httpServletRequest.getRequestURI());

        String seller = (String) httpServletRequest.getSession(true)
                .getAttribute("seller");

        if (!isSellerExcludePages(httpServletRequest.getRequestURI())) {
            System.out.println("哈哈");
            if (seller == null) {
                System.out.println("呵呵");
                httpServletResponse.sendRedirect(httpServletRequest
                        .getContextPath() + "/seller/login.jsp");
                return;
            }
        }
        filterChain.doFilter(servletRequest, servletResponse);
    }

    private boolean isSellerExcludePages(String requestURI) {
        // TODO Auto-generated method stub
        return requestURI.indexOf("logout.") != -1
                || requestURI.indexOf("login.") != -1
                || requestURI.indexOf("action.") != -1
                || requestURI.endsWith(".css") || requestURI.endsWith(".js")
                || requestURI.endsWith(".gif") || requestURI.endsWith(".jpg")
                || requestURI.endsWith(".png");
    }

    @Override
    public void init(FilterConfig arg0) throws ServletException {
        // TODO Auto-generated method stub

    }

    @Override
    public void destroy() {
        // TODO Auto-generated method stub
        
    }

}

注意：httpServletRequest.getRequestURI() 是 httpServletRequest.getRequestURI()。

不要在isSellerExcludePages加上|| !requestURI.contains("seller.jsp")，看上去是对包含seller.jsp进行拦截，但是如果不包含它的则都会通过了

web.xml配置

（1） 扩展匹配

    <filter>
        <filter-name>LoginFilter</filter-name>
        <filter-class>com.life.struts.filter.LoginFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>LoginFilter</filter-name>
        <url-pattern>*.jsp</url-pattern>
    </filter-mapping>

 （2）路径匹配：/seller/*，但是不要混搭/*.jsp

Done！