struts2自定义拦截器,模拟登陆权限验证

struts2自定义拦截器一——模拟登陆权限验证

1、http://localhost:8083/struts2/user.jsp 表示用户已登陆，存放session对象

2、http://localhost:8083/struts2/quit.jsp 表示用户已退出，移除session对象

3、http://localhost:8083/struts2/login/addUIHelloWorld.do  如果session存在则往下执行，否则提示“你没有权限执行该操作”

4、http://localhost:8083/struts2/login/executeHelloWorld.do  如果session存在则往下执行，否则提示“你没有权限执行该操作”

代码

user.jsp页面

<% 
   @ page language 
   = 
   " 
   java 
   " 
     
   import 
   = 
   " 
   java.util.* 
   " 
    pageEncoding 
   = 
   " 
   UTF-8 
   " 
   %> 
     
   <% 
    request.getSession().setAttribute( 
   " 
   user 
   " 
   ,  
   " 
   ljq 
   " 
   );  
   %> 
    用户已经登录

quit.jsp页面

<% 
   @ page language 
   = 
   " 
   java 
   " 
     
   import 
   = 
   " 
   java.util.* 
   " 
    pageEncoding 
   = 
   " 
   UTF-8 
   " 
   %> 
     
   <% 
    request.getSession().removeAttribute( 
   " 
   user 
   " 
   );  
   %> 
    用户已经退出登录

Action类

package 
    com.ljq.action;  
   public 
     
   class 
    HelloWorldAction {  
   private 
    String message;  
   public 
    String addUI() {  
   this 
   .message  
   = 
     
   " 
   addUI 
   " 
   ;  
   return 
     
   " 
   success 
   " 
   ; }  
   public 
    String execute()  
   throws 
    Exception {  
   this 
   .message  
   = 
     
   " 
   execute 
   " 
   ;  
   return 
     
   " 
   success 
   " 
   ; }  
   public 
    String getMessage() {  
   return 
    message; }  
   public 
     
   void 
    setMessage(String message) {  
   this 
   .message  
   = 
    message; } }

权限类

package 
    com.ljq.interceptor;  
   import 
    com.opensymphony.xwork2.ActionContext;  
   import 
    com.opensymphony.xwork2.ActionInvocation;  
   import 
    com.opensymphony.xwork2.interceptor.Interceptor;  
   /** 
    * 限制没有登录的用户进入访问页面 * *  
   @author 
    jiqinlin *  
   */ 
    @SuppressWarnings( 
   " 
   serial 
   " 
   )  
   public 
     
   class 
    PermissionInterceptor  
   implements 
    Interceptor {  
   public 
     
   void 
    destroy() { }  
   public 
     
   void 
    init() { }  
   public 
    String intercept(ActionInvocation invocation)  
   throws 
    Exception { Object user  
   = 
    ActionContext.getContext().getSession().get( 
   " 
   user 
   " 
   );  
   // 
    如果user不为null,代表用户已经登录,允许执行action中的方法 
     
     
   if 
    (user  
   != 
     
   null 
   ){  
   return 
    invocation.invoke(); } ActionContext.getContext().put( 
   " 
   message 
   " 
   ,  
   " 
   你没有权限执行该操作 
   " 
   );  
   return 
     
   " 
   success 
   " 
   ; } }

struts.xml配置文件

<? 
   xml version 
   = 
   " 
   1.0 
   " 
    encoding 
   = 
   " 
   UTF-8 
   " 
     
   ?> 
     
   <! 
   DOCTYPE struts PUBLIC  
   " 
   -//Apache Software Foundation//DTD Struts Configuration 2.0//EN 
   " 
     
   " 
   http://struts.apache.org/dtds/struts-2.0.dtd 
   " 
   > 
     
   < 
   struts 
   > 
     
   < 
   constant name 
   = 
   " 
   struts.i18n.encoding 
   " 
    value 
   = 
   " 
   UTF-8 
   " 
     
   /> 
     
   < 
   constant name 
   = 
   " 
   struts.enable.DynamicMethodInvocation 
   " 
    value 
   = 
   " 
   false 
   " 
     
   /> 
     
   < 
   constant name 
   = 
   " 
   struts.action.extension 
   " 
    value 
   = 
   " 
   do 
   " 
     
   /> 
     
   < 
   package 
    name 
   = 
   " 
   login 
   " 
    namespace 
   = 
   " 
   /login 
   " 
     
   extends 
   = 
   " 
   struts-default 
   " 
   > 
     
   < 
   interceptors 
   > 
     
   <!-- 
    自定义拦截器  
   --> 
     
   < 
   interceptor name 
   = 
   " 
   permission 
   " 
     
   class 
   = 
   " 
   com.ljq.interceptor.PermissionInterceptor 
   " 
     
   /> 
     
   <!-- 
    配制默许的拦截器到拦截器栈  
   --> 
     
   < 
   interceptor 
   - 
   stack name 
   = 
   " 
   permissionStack 
   " 
   > 
     
   <!-- 
    此处先后顺序好像没影响哦，我尝试过是没影响的  
   --> 
     
   < 
   interceptor 
   - 
   ref name 
   = 
   " 
   permission 
   " 
     
   /> 
     
   < 
   interceptor 
   - 
   ref name 
   = 
   " 
   defaultStack 
   " 
     
   /> 
     
   </ 
   interceptor 
   - 
   stack 
   > 
     
   </ 
   interceptors 
   > 
     
   <!-- 
    配置默认的拦截器  
   --> 
     
   < 
   default 
   - 
   interceptor 
   - 
   ref name 
   = 
   " 
   permissionStack 
   " 
     
   /> 
     
   <!-- 
    全局变量  
   --> 
     
   < 
   global 
   - 
   results 
   > 
     
   < 
   result name 
   = 
   " 
   success 
   " 
   >/ 
   WEB 
   - 
   INF 
   / 
   page 
   / 
   message.jsp 
   </ 
   result 
   > 
     
   </ 
   global 
   - 
   results 
   > 
     
   < 
   action name 
   = 
   " 
   *HelloWorld 
   " 
     
   class 
   = 
   " 
   com.ljq.action.HelloWorldAction 
   " 
    method 
   = 
   " 
   {1} 
   " 
   > 
     
   <!-- 
     
   < 
   interceptor 
   - 
   ref name 
   = 
   " 
   permissionStack 
   " 
     
   /> 
     
   --> 
     
   </ 
   action 
   > 
     
   </ 
   package 
   > 
     
   </ 
   struts 
   >