在java web工程中实现登入和安全验证

登入页面的话我们之前做过直接可以拿来用翻一翻之前的博客就可以找到

在这个基础上添加验证功能

代码如下：

package security;
/**
 * @author 鐜嬭儨鍗?
 */
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.annotation.WebFilter;
import javax.servlet.annotation.WebInitParam;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.commons.lang3.ObjectUtils;

@WebFilter(urlPatterns = { "/console/*", "/admin/*" }, initParams = {
        @WebInitParam(name = "INDEX_VIEW", value = "/index.jsp") })
public class MemberFilter implements Filter {

    private String INDEX_VIEW;

    @Override
    public void init(FilterConfig config) throws ServletException {
        this.INDEX_VIEW = config.getInitParameter("INDEX_VIEW");
    }

    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
            throws IOException, ServletException {
        HttpServletRequest req = (HttpServletRequest) request;

        if (ObjectUtils.anyNotNull(req.getSession().getAttribute("user"))) {
            chain.doFilter(request, response);
        } else {
            HttpServletResponse resp = (HttpServletResponse) response;
            resp.sendRedirect(req.getContextPath() + INDEX_VIEW);
        }
    }

    @Override
    public void destroy() {
    }

}

如果账号和密码输入正确就可以进入后台反之如果输入错误就返回登入页面