大家好，又见面了，我是你们的朋友全栈君。
SecurityInterceptor.java
package light.mvc.framework.interceptors;
import java.util.List;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import light.mvc.framework.constant.GlobalConstant;
import light.mvc.framework.tool.SessionInfo;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
/**
* 权限拦截器
*
*/
public class SecurityInterceptor implements HandlerInterceptor {
private List<String> excludeUrls;// 不需要拦截的资源
public List<String> getExcludeUrls() {
return excludeUrls;
}
public void setExcludeUrls(List<String> excludeUrls) {
this.excludeUrls = excludeUrls;
}
/**
* 完成页面的render后调用
*/
@Override
public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object object,
Exception exception) throws Exception {
}
/**
* 在调用controller具体方法后拦截
*/
@Override
public void postHandle(HttpServletRequest request, HttpServletResponse response, Object object,
ModelAndView modelAndView) throws Exception {
}
/**
* 在调用controller具体方法前拦截
*/
@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object object) throws Exception {
String requestUri = request.getRequestURI();
String contextPath = request.getContextPath();
String url = requestUri.substring(contextPath.length());
SessionInfo sessionInfo = (SessionInfo) request.getSession().getAttribute(GlobalConstant.SESSION_INFO);
//判断是否包含在菜单权限里
if ((url.indexOf("/admin/") > -1) || excludeUrls.contains(url)) {// 如果要访问的资源是不需要验证的
return true;
}
if ((sessionInfo == null) || (sessionInfo.getId() == null)) {// 如果没有登录或登录超时
request.setAttribute("msg", "您还没有登录或登录已超时，请重新登录，然后再刷新本功能！");
request.getRequestDispatcher("/error/noSession.jsp").forward(request, response);
return false;
}
if(!sessionInfo.getAccessAllList().contains(url)){
return true;
}
if (!sessionInfo.getAccessList().contains(url)) {// 如果当前用户没有访问此资源的权限
request.setAttribute("msg", "您没有访问此资源的权限！<br/>请联系超管赋予您<br/>[" + url + "]<br/>的资源访问权限！");
request.getRequestDispatcher("/error/noSecurity.jsp").forward(request, response);
return false;
}
return true;
}
}
spring-mvc.xml中增加配置
<!-- 拦截器 -->
<mvc:interceptors>
<mvc:interceptor>
<mvc:mapping path="/**" />
<bean class="light.mvc.framework.interceptors.SecurityInterceptor">
<!-- 不需要权限验证的地址 -->
<property name="excludeUrls">
<list>
<value>/access/tree</value><!-- 首页左侧功能菜单 -->
</list>
</property>
</bean>
</mvc:interceptor>
</mvc:interceptors>版权声明：本文内容由互联网用户自发贡献，该文观点仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请联系我们举报，一经查实，本站将立刻删除。
发布者：全栈程序员-站长，转载请注明出处：https://javaforall.net/139497.html原文链接：https://javaforall.net
