《struts2权威指南》学习笔记之使用拦截器完成权限控制

本例的功能是，必须指定用户名 scott/tiger 登陆的用户，方能查看系统中viewBook的这个资源，否则直接跳回登陆页面

登陆Action

package auth;

import com.opensymphony.xwork2.ActionSupport;
import com.opensymphony.xwork2.ActionContext;
import java.util.*;



public class LoginAction extends ActionSupport
...{
    private String username;
    private String password;

    public void setUsername(String username)
    ...{
        this.username = username;
    }
    public String getUsername()
    ...{
        return username;
    }

    public void setPassword(String password)
    ...{
        this.password = password;
    }
    public String getPassword()
    ...{
        return password;
    }

    public String execute() throws Exception
    ...{
        System.out.println("进入execute方法执行体..........");
        Thread.sleep(1500);
        if (getUsername().equals("scott")
            && getPassword().equals("tiger") )
        ...{
            ActionContext ctx = ActionContext.getContext();
            Map session = ctx.getSession();
            session.put("user" , getUsername());
            return SUCCESS;
        }
        else
        ...{
            return ERROR;
        }
    }


}

 权限检测拦截器

package auth;

import java.util.Map;

import com.opensymphony.xwork2.Action;
import com.opensymphony.xwork2.ActionContext;
import com.opensymphony.xwork2.ActionInvocation;
import com.opensymphony.xwork2.interceptor.AbstractInterceptor;

public class AuthorityInterceptor extends AbstractInterceptor ...{

    
    public String intercept(ActionInvocation invocation) throws Exception ...{
        ActionContext ctx=invocation.getInvocationContext();
        Map session=ctx.getSession();
        String user=(String)session.get("user");
        if(user!=null&&user.equals("scott"))...{
            return invocation.invoke();
        }else...{
            ctx.put("tip", "您还没有登录");
            return Action.LOGIN;
        }
        
    }

}

配置action (struts.xml)

<?xml version="1.0" encoding="GBK"?>
<!DOCTYPE struts PUBLIC
        "-//Apache Software Foundation//DTD Struts Configuration 2.0//EN"
        "http://struts.apache.org/dtds/struts-2.0.dtd">
<struts>
    <constant name="struts.custom.i18n.resources" value="globalMessages"/>
    <constant name="struts.i18n.encoding" value="GBK"/>

    <package name="lee" extends="struts-default">
      
    
        <interceptors>
          <interceptor name="authority" class="auth.AuthorityInterceptor"></interceptor>
        </interceptors>
        
         <global-results>
          <result name="login">/login.jsp</result>
        </global-results>
        
        <!-- 将viewBook.jsp放在web-inf下，防止直接用url访问 -->
        <action name="viewBook">
          <result>/WEB-INF/viewBook.jsp</result>
        <!-- 拦截器一般配置在result之后 -->
        <interceptor-ref name="defaultStack"></interceptor-ref>
        <interceptor-ref name="authority"></interceptor-ref>  
        </action>
        
         <action name="login" class="auth.LoginAction">
            <result name="error">/error.jsp</result>
            <result name="success">/welcome.jsp</result>
        </action>
        
        
    
    </package>
    
    
</struts>

web.xml

<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.5" 
    xmlns="http://java.sun.com/xml/ns/javaee" 
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
    http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
    <filter>
      <filter-name>struts2</filter-name>
      <filter-class>org.apache.struts2.dispatcher.FilterDispatcher</filter-class>
    </filter>
    <filter-mapping>
      <filter-name>struts2</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>
 
 
    <filter>
      <filter-name>struts-cleanup</filter-name>
      <filter-class>org.apache.struts2.dispatcher.ActionContextCleanUp</filter-class>
    </filter>
    <filter-mapping>
      <filter-name>struts-cleanup</filter-name>
      <url-pattern>/*</url-pattern>
    </filter-mapping>
</web-app>

viewBook.jsp  放到web-inf下

<%...@ page contentType="text/html; charset=GBK"%>
<html>
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=GBK"/>
    <title>作者李刚已经出版的图书：</title>
</head>
<body>
作者已经出版的图书：<p>
Spring2.0宝典<br>
轻量级J2EE企业实战<br>
基于J2EE的Ajax宝典<br>
</body>
</html>

login.jsp

<%...@ page language="java" contentType="text/html; charset=GBK"%>
<%...@taglib prefix="s" uri="/struts-tags"%>

<%...@ page isELIgnored="false" %>
<%...@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
<html>
<head>
<title>登录页面</title>
</head>
<body>
<div style="color:red" align="center">${requestScope.tip}<div>
<form action="login.action" method="post">
    <table align="center">
    <caption><h3>用户登录</h3></caption>
        <tr>
            <td>用户名：<input type="text" name="username"/></td>
        </tr>
        <tr>
            <td>密&nbsp;&nbsp;码：<input type="text" name="password"/></td>
        </tr>
        <tr align="center">
            <td><input type="submit" value="登录"/><input type="reset" value="重填" /></td>
        </tr>
    </table>
</form>
<div align="center"><a href="viewBook.action">查看作者出版的图书</a><div>
</body>
</html>

error.jsp

<%...@ page language="java" contentType="text/html; charset=GBK"%>
<html>
    <head>
        <title>错误页面</title>
    </head>
    <body>
        您不能登录!<br>
        <a href="viewBook.action">查看作者出版的图书</a>
    </body>
</html>

<%...@ page language="java" contentType="text/html; charset=GBK"%>
<html>
    <head>
        <title>成功页面</title>
    </head>
    <body>
        您已经登录!<br>
        <a href="viewBook.action">查看作者出版的图书</a>
    </body>
</html>

运行login.jsp 用scott和tiger登陆，方能浏览viewBook.jsp