这篇文章主要介绍“SpringMVC实现自定义拦截器登录检测功能”,在日常操作中,相信很多人在SpringMVC实现自定义拦截器登录检测功能问题上存在疑惑,小编查阅了各式资料,整理出简单好用的操作方法,希望对大家解答”SpringMVC实现自定义拦截器登录检测功能”的疑惑有所帮助!接下来,请跟着小编一起来学习吧!
目录
-
一、定义登录控制器
-
二、自定义登录拦截器
一、定义登录控制器
目录结构
代码:
1、创建TUser类
package com.demo.pojo;
import lombok.AllArgsConstructor;
import lombok.Data;
import lombok.NoArgsConstructor;
@Data
@AllArgsConstructor
@NoArgsConstructor
public class TUser {
private String name;
private String password;
}
2、创建LoginController类
package com.demo.controller;
import com.demo.pojo.TUser;
import com.demo.pojo.User;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RequestParam;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
@Controller
@RequestMapping"/user")
public class LoginController {
@RequestMapping"/login")
public String loginModel model){
model.addAttribute"msg","这里是登陆界面");
return "login";
}
@RequestMapping"/doLogin")
public String doLoginTUser tUser,
HttpServletRequest req, HttpServletResponse resp, Model model){
System.out.println"###LoginController.doLogin)");
if!"admin".equalstUser.getName))||!"admin".equalstUser.getPassword))){
model.addAttribute"msg","用户名或密码不正确!");
return "loginFail";//跳转到loginFail.jsp
}
HttpSession httpSession=req.getSessiontrue);//存在session则使用,不存在则创建
httpSession.setAttribute"user",tUser);
model.addAttribute"msg","登录成功");
return "success";//跳转到success.jsp
}
@RequestMapping"/loginOut")
public String loginFailHttpSession session,Model model){
model.addAttribute"msg","退出登录");
session.removeAttribute"user");
return "login";
}
}
页面代码:
1、login.jsp
<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
<title>login</title>
</head>
<body>
<h2>${msg}</h2>
<form id="login" action="${pageContext.request.contextPath}/user/doLogin" method="post">
用户名:<input type="text" name="name"/><br/>
密码:<input type="password" name="password"><br/>
<input type="submit">
</form>
</body>
</html>
2、loginFail.jsp
<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
<title>loginFail</title>
</head>
<body>
<h2>${msg}</h2>
<h3><a href="${pageContext.request.contextPath}/user/loginOut" rel="external nofollow" rel="external nofollow" >返回登录界面</a></h3>
</body>
</html>
3、success.jsp
<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
<head>
<title>success</title>
</head>
<body>
${msg}
<h3><a href="${pageContext.request.contextPath}/user/loginOut" rel="external nofollow" rel="external nofollow" >退出登录</a></h3>
</body>
</html>
二、自定义登录拦截器
代码:
1、创建LoginInterceptor类,作为拦截器类需实现HandlerInterceptor,并重写里面的三个方法preHandle、postHandle、afterCompletion:
package com.demo.interceptor;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class LoginInterceptor implements HandlerInterceptor {
@Override
public boolean preHandleHttpServletRequest request, HttpServletResponse response,
Object handler) throws Exception {
System.out.println"LoginInterceptor preHandle");
//放行:判断什么情况下
//1、请求到登陆界面放行,首次登陆
ifrequest.getRequestURI).contains"login")||request.getRequestURI).contains"doLogin")){
return true;
}
//2、退出登录可直接放行
ifrequest.getRequestURI).contains"loginOut")){
return true;
}
//3、通过登录进入 放行
ifrequest.getSession).getAttribute"user")!=null){
return true;
}
//非法请求进行拦截
//重定向到登录页面
response.sendRedirectrequest.getContextPath)+"login");
//拦截
return false;
}
@Override
public void postHandleHttpServletRequest request, HttpServletResponse response,
Object handler, ModelAndView modelAndView) throws Exception {
System.out.println"LoginInterceptor "+"postHandle");
}
@Override
public void afterCompletionHttpServletRequest request, HttpServletResponse response,
Object handler, Exception ex) throws Exception {
System.out.println"LoginInterceptor "+"afterCompletion");
}
}
2、在spring-mvc.xml中配置LoginInterceptor拦截器 测试: 1、正常登录正确密码:admin)
1.1、点击退出登录
2、用户名密码错误
2.1、点击返回登录界面
3、非法请求






