Spring MVC，拦截器实现session控制

本文基于Spring MVC 注解，让Spring跑起来。

未登录，不允许访问background文件夹内的页面，那如何判断是否登录呢？background是关键目录，每个操作该目录的人都需要写在日志表中，如何实现呢？拦截器是实现方案之一。

(1) 在com.geloin.spring.interceptor包中添加SystemInterceptor，并使其继承HandlerInterceptor

[java]
view plaincopyprint?

/**
*
* @author geloin
* @date 2012-3-27 下午2:29:35
*/
package com.geloin.spring.interceptor;


import java.io.PrintWriter;

import java.util.Iterator;

import java.util.Map;

import javax.annotation.Resource;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;


import org.springframework.stereotype.Repository;

import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;


import com.embest.ruisystem.form.SystemLoggerForm;

import com.embest.ruisystem.form.SystemUserForm;

import com.embest.ruisystem.service.SystemLoggerService;

import com.embest.ruisystem.util.Constants;

import com.embest.ruisystem.util.DataUtil;


/**
*
* @author geloin
* @date 2012-3-27 下午2:29:35
*/
@Repository
public class SystemInterceptor
extends HandlerInterceptorAdapter {


@Resource(name =
"systemLoggerService")
private SystemLoggerService systemLoggerService;


/*
* (non-Javadoc)
*
* @see
* org.springframework.web.servlet.handler.HandlerInterceptorAdapter#preHandle

* (javax.servlet.http.HttpServletRequest,

* javax.servlet.http.HttpServletResponse, java.lang.Object)

*/
@SuppressWarnings({ "rawtypes",
"unchecked" })
@Override

public boolean preHandle(HttpServletRequest request,

HttpServletResponse response, Object handler)
throws Exception {

request.setCharacterEncoding("UTF-8");

response.setCharacterEncoding("UTF-8");

response.setContentType("text/html;charset=UTF-8");


// 后台session控制

String[] noFilters = new String[] {
"login.html", "veriCode.html",

"index.html",
"logout.html" };
String uri = request.getRequestURI();

if (uri.indexOf("background") != -1) {

boolean beFilter =
true;
for (String s : noFilters) {

if (uri.indexOf(s) != -1) {

beFilter = false;

break;

}
}
if (beFilter) {

Object obj = request.getSession().getAttribute(

Constants.LOGINED);
if (null == obj) {


// 未登录

PrintWriter out = response.getWriter();
StringBuilder builder =
new StringBuilder();
builder.append("<script type=\"text/javascript\" charset=\"UTF-8\">");

builder.append("alert(\"页面过期，请重新登录\");");

builder.append("window.top.location.href=\"");

builder.append(Constants.basePath);

builder.append("/background/index.html\";</script>");

out.print(builder.toString());

out.close();
return
false;
} else {
// 添加日志

String operateContent = Constants.operateContent(uri);

if (null != operateContent) {

String url = uri.substring(uri.indexOf("background"));

String ip = request.getRemoteAddr();

Integer userId = ((SystemUserForm) obj).getId();

SystemLoggerForm form =
new SystemLoggerForm();
form.setUserId(userId);
form.setIp(ip);
form.setOperateContent(operateContent);

form.setUrl(url);
this.systemLoggerService.edit(form);

}
}
}
}

Map paramsMap = request.getParameterMap();

for (Iterator<Map.Entry> it = paramsMap.entrySet().iterator(); it

.hasNext();) {
Map.Entry entry = it.next();
Object[] values = (Object[]) entry.getValue();

for (Object obj : values) {

if (!DataUtil.isValueSuccessed(obj)) {

throw new RuntimeException("有非法字符：" + obj);

}
}
}

return super.preHandle(request, response, handler);

}

}

/**
 *
 * @author geloin
 * @date 2012-3-27 下午2:29:35
 */
package com.geloin.spring.interceptor;

import java.io.PrintWriter;
import java.util.Iterator;
import java.util.Map;

import javax.annotation.Resource;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.springframework.stereotype.Repository;
import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;

import com.embest.ruisystem.form.SystemLoggerForm;
import com.embest.ruisystem.form.SystemUserForm;
import com.embest.ruisystem.service.SystemLoggerService;
import com.embest.ruisystem.util.Constants;
import com.embest.ruisystem.util.DataUtil;

/**
 * 
 * @author geloin
 * @date 2012-3-27 下午2:29:35
 */
@Repository
public class SystemInterceptor extends HandlerInterceptorAdapter {

	@Resource(name = "systemLoggerService")
	private SystemLoggerService systemLoggerService;

	/*
	 * (non-Javadoc)
	 * 
	 * @see
	 * org.springframework.web.servlet.handler.HandlerInterceptorAdapter#preHandle
	 * (javax.servlet.http.HttpServletRequest,
	 * javax.servlet.http.HttpServletResponse, java.lang.Object)
	 */
	@SuppressWarnings({ "rawtypes", "unchecked" })
	@Override
	public boolean preHandle(HttpServletRequest request,
			HttpServletResponse response, Object handler) throws Exception {

		request.setCharacterEncoding("UTF-8");
		response.setCharacterEncoding("UTF-8");
		response.setContentType("text/html;charset=UTF-8");

		// 后台session控制
		String[] noFilters = new String[] { "login.html", "veriCode.html",
				"index.html", "logout.html" };
		String uri = request.getRequestURI();

		if (uri.indexOf("background") != -1) {
			boolean beFilter = true;
			for (String s : noFilters) {
				if (uri.indexOf(s) != -1) {
					beFilter = false;
					break;
				}
			}
			if (beFilter) {
				Object obj = request.getSession().getAttribute(
						Constants.LOGINED);
				if (null == obj) {

					// 未登录
					PrintWriter out = response.getWriter();
					StringBuilder builder = new StringBuilder();
					builder.append("<script type=\"text/javascript\" charset=\"UTF-8\">");
					builder.append("alert(\"页面过期，请重新登录\");");
					builder.append("window.top.location.href=\"");
					builder.append(Constants.basePath);
					builder.append("/background/index.html\";</script>");
					out.print(builder.toString());
					out.close();
					return false;
				} else {
					// 添加日志
					String operateContent = Constants.operateContent(uri);
					if (null != operateContent) {
						String url = uri.substring(uri.indexOf("background"));
						String ip = request.getRemoteAddr();
						Integer userId = ((SystemUserForm) obj).getId();
						SystemLoggerForm form = new SystemLoggerForm();
						form.setUserId(userId);
						form.setIp(ip);
						form.setOperateContent(operateContent);
						form.setUrl(url);
						this.systemLoggerService.edit(form);
					}
				}
			}
		}

		Map paramsMap = request.getParameterMap();

		for (Iterator<Map.Entry> it = paramsMap.entrySet().iterator(); it
				.hasNext();) {
			Map.Entry entry = it.next();
			Object[] values = (Object[]) entry.getValue();
			for (Object obj : values) {
				if (!DataUtil.isValueSuccessed(obj)) {
					throw new RuntimeException("有非法字符：" + obj);
				}
			}
		}

		return super.preHandle(request, response, handler);
	}

}

(2) 修改context-dispatcher.xml，让spring管理拦截器

[java]
view plaincopyprint?

<mvc:interceptors>
<bean class="com.geloin.spring.interceptor.SystemInterceptor" />

</mvc:interceptors>