filter interceptor

2011-12-12 01:41:12 142 阅读 AI 写同款 · GEO 优化AI 选题数据监测一键分发 ›

Filter和Interceptor的对比问题引入在开发过程中需要对某些接口进行鉴权，一开始的想法是写个Filter，然后拦截指定的路径，通过获取header中的信息进行鉴权，没有权限则抛出自定义异常，然后自定义全局异常处理器再去拦截。程序测试时发现，没权限时确实被拦截了，但是并没有进入到全局异常处理器，而是直接抛出500。通过查找发现，Filter的在进入Servlet之前进行拦截的，而全局异常是SpringBoot中的（本质是Servlet），所以全局异常处理并不能拦截到Filter抛出的异常。基本概念与这个相关的一些概念如下： 1、阅读详情

filter
web.xml

<filter>
<filter-name>LoginFilter</filter-name>
<filter-class>com.augmentum.training.filter.LoginFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>LoginFilter</filter-name>
<url-pattern>/admin/*</url-pattern>
<url-pattern>/engineer/*</url-pattern>
<url-pattern>/itstaff/*</url-pattern>
<url-pattern>/manager/*</url-pattern>
<url-pattern>/sdm/*</url-pattern>
</filter-mapping>

package com.augmentum.training.filter;

import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import com.augmentum.training.bean.User;

public class LoginFilter implements Filter {

@Override
public void destroy() {
// TODO Auto-generated method stub

}

@Override
public void doFilter(ServletRequest req, ServletResponse res,
FilterChain chain) throws IOException, ServletException {
// TODO Auto-generated method stub
HttpServletRequest hreq=(HttpServletRequest) req;
HttpServletResponse hres=(HttpServletResponse) res;
HttpSession session=hreq.getSession();
User user=(User) session.getAttribute("user");
String url=hreq.getRequestURI();
if(user!=null){
chain.doFilter(req, res);
}else {
hres.sendRedirect(hreq.getContextPath()+"/login/login.jsp");
}

}

@Override
public void init(FilterConfig arg0) throws ServletException {
// TODO Auto-generated method stub

}

}

...全文