springmvc權限驗證-絕對可靠

1、精品文檔/* (#)AuthorityInterceptor.java*創(chuàng)建日期：2011-04-19* Copyright(c)20102011 hitsoftware co.,Ltd*/package erceptor;import java.io.IOException;import org.springframework.web.servlet.HandlerInterceptor;import org.springframework.web.servlet.ModelAndView;import javax.servlet.http.*;

2、import java.util.*;import com.hsoft.framework.bean.UserSession;/*權限攔截，用于在用戶登錄與操作過程中的身份權限的驗證* see UserSession* see HandlerInterceptor* see ModelAndView*更新日志： 修改人 版本號 時間 修改內容 蘆寧1.0.0 2011-04-19添加注釋* author蘆寧* version 1.0.0 2011-04-19*/public class AuthorityInterceptor implements HandlerInterceptor *處理

3、之前，對用戶身份進行驗證* param request HttpServletRequest對象* param response HttpServletResponse對象* param handler Object對象* return返回一個布爾型數(shù)值*/SuppressWarnings(unchecked)public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Objecthandler) throws Exception try if (handler.getClass().ge

4、tName().indexOf(LoginCtrl) = 0) return true;UserSession userSession = (UserSession) request.getSession() .getAttribute(userSession);1歡迎下載精品文檔if (userSession = null) sendRedirect(request, response); return false;Map map = request.getParameterMap();for (Iterator iter = map.entrySet().iterator(); iter.

5、hasNext();) Map.Entry element =(Map.Entry) iter.next(); String s = (String) element.getValue();if (s = null | s.length 1) sendError(request, response); return false; else if (s0.indexOf() != -1) sendError(request, response); return false; List list = (List) request.getSession().getAttribute(visit);/

6、System.out.println(url-);/for (Iterator it = list.iterator(); it.hasNext();) /System.out.println(url+(String)it.next();/if (list = null | list.size() 0) url += method= +request.getParameter(method); else url += request.getQueryString();String tempurl = ;for (Iterator it = list.iterator(); it.hasNext

7、();) tempurl = / + (String) it.next(); if(url.indexOf(tempurl) != -1) /System.out.println(url:+url);/System.out.println(url:+temp); /System.out.println(url:+url.indexOf(temp);2歡迎下載/時請刪除此行。精品文檔b = true;break;if (!b) / System.out.println(jcbk the request of + url interrupted);sendError(request, respon

8、se);return false;return true; catch (Exception e) sendRedirect(request, response); return false;*處理之后，對用戶身份進行驗證，暫無實現(xiàn)內容* param request HttpServletRequest對象* param response HttpServletResponse對象* param handler Object對象* param modelAndView ModelAndView對象*/public void postHandle(HttpServletRequest reque

9、st, HttpServletResponse response,Object handler, ModelAndView modelAndView) throws Exception *完成操作之后，對用戶身份進行驗證，暫無實現(xiàn)內容* param request HttpServletRequest對象* param response HttpServletResponse對象* param handler Object對象* param ex Exception對象*/public void afterCompletion(HttpServletRequest request, HttpS

10、ervletResponseresponse, Object handler, Exception ex) throws Exception *用戶ID在Session中失效時或用戶操作出現(xiàn)異常時，導向登出頁面* param request傳遞的HttpServletRequest對象3歡迎下載精品文檔+ is* param response傳遞的HttpServletResponse對象*/private void sendRedirect(HttpServletRequest request, HttpServletResponse response) try response.sendRedirect(./logout.jsp); catch (IOException e) e.printStackTrace();/*出錯時，導向錯誤頁面* param request傳遞的HttpServletRequest對象* param response傳遞的HttpServletResponse對象*/private void sendError(HttpServletRequest request, HttpServ