springmvc權(quán)限驗(yàn)證-絕對(duì)可靠

1、精品文檔/* (#)AuthorityInterceptor.java*創(chuàng)建日期：2011-04-19* Copyright(c)20102011 hitsoftware co.,Ltd*/package erceptor;import java.io.IOException;import org.springframework.web.servlet.HandlerInterceptor;import org.springframework.web.servlet.ModelAndView;import javax.servlet.http.*;

2、import java.util.*;import com.hsoft.framework.bean.UserSession;/*權(quán)限攔截，用于在用戶(hù)登錄與操作過(guò)程中的身份權(quán)限的驗(yàn)證* see UserSession* see HandlerInterceptor* see ModelAndView*更新日志： 修改人 版本號(hào) 時(shí)間 修改內(nèi)容 蘆寧1.0.0 2011-04-19添加注釋* author蘆寧* version 1.0.0 2011-04-19*/public class AuthorityInterceptor implements HandlerInterceptor *處理

3、之前，對(duì)用戶(hù)身份進(jìn)行驗(yàn)證* param request HttpServletRequest對(duì)象* param response HttpServletResponse對(duì)象* param handler Object對(duì)象* return返回一個(gè)布爾型數(shù)值*/SuppressWarnings(unchecked)public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Objecthandler) throws Exception try if (handler.getClass().ge

4、tName().indexOf(LoginCtrl) = 0) return true;UserSession userSession = (UserSession) request.getSession() .getAttribute(userSession);1歡迎下載精品文檔if (userSession = null) sendRedirect(request, response); return false;Map map = request.getParameterMap();for (Iterator iter = map.entrySet().iterator(); iter.

5、hasNext();) Map.Entry element =(Map.Entry) iter.next(); String s = (String) element.getValue();if (s = null | s.length 1) sendError(request, response); return false; else if (s0.indexOf() != -1) sendError(request, response); return false; List list = (List) request.getSession().getAttribute(visit);/

6、System.out.println(url-);/for (Iterator it = list.iterator(); it.hasNext();) /System.out.println(url+(String)it.next();/if (list = null | list.size() 0) url += method= +request.getParameter(method); else url += request.getQueryString();String tempurl = ;for (Iterator it = list.iterator(); it.hasNext

7、();) tempurl = / + (String) it.next(); if(url.indexOf(tempurl) != -1) /System.out.println(url:+url);/System.out.println(url:+temp); /System.out.println(url:+url.indexOf(temp);2歡迎下載/時(shí)請(qǐng)刪除此行。精品文檔b = true;break;if (!b) / System.out.println(jcbk the request of + url interrupted);sendError(request, respon

8、se);return false;return true; catch (Exception e) sendRedirect(request, response); return false;*處理之后，對(duì)用戶(hù)身份進(jìn)行驗(yàn)證，暫無(wú)實(shí)現(xiàn)內(nèi)容* param request HttpServletRequest對(duì)象* param response HttpServletResponse對(duì)象* param handler Object對(duì)象* param modelAndView ModelAndView對(duì)象*/public void postHandle(HttpServletRequest reque

9、st, HttpServletResponse response,Object handler, ModelAndView modelAndView) throws Exception *完成操作之后，對(duì)用戶(hù)身份進(jìn)行驗(yàn)證，暫無(wú)實(shí)現(xiàn)內(nèi)容* param request HttpServletRequest對(duì)象* param response HttpServletResponse對(duì)象* param handler Object對(duì)象* param ex Exception對(duì)象*/public void afterCompletion(HttpServletRequest request, HttpS

10、ervletResponseresponse, Object handler, Exception ex) throws Exception *用戶(hù)ID在Session中失效時(shí)或用戶(hù)操作出現(xiàn)異常時(shí)，導(dǎo)向登出頁(yè)面* param request傳遞的HttpServletRequest對(duì)象3歡迎下載精品文檔+ is* param response傳遞的HttpServletResponse對(duì)象*/private void sendRedirect(HttpServletRequest request, HttpServletResponse response) try response.sendRedirect(./logout.jsp); catch (IOException e) e.printStackTrace();/*出錯(cuò)時(shí)，導(dǎo)向錯(cuò)誤頁(yè)面* param request傳遞的HttpServletRequest對(duì)象* param response傳遞的HttpServletResponse對(duì)象*/private void sendError(HttpServletRequest request, HttpServ