securityfilter.java

《精通SOA：基于服务总线的Struts+EJB+Web Service整合应用开发》原书的实例代码

package com.bkstore.security;


import java.io.IOException;

import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import com.bkstore.model.service.dto.UserAccountDTO;


public class SecurityFilter implements Filter {
	

	public void init(FilterConfig arg0) throws ServletException {

	}

	public void doFilter(ServletRequest req, ServletResponse res, FilterChain filterChain) throws IOException, ServletException {
	    
		
		HttpServletRequest request = (HttpServletRequest) req;	
		
		HttpSession session = request.getSession();
		UserAccountDTO userAccountDTO = (UserAccountDTO) session.getAttribute("userSession");

	      if (userAccountDTO == null && !request.getServletPath().equals("/bkstore/login.do") ) {
	        HttpServletResponse response = (HttpServletResponse) res;
	        response.sendRedirect("/webModule/bkstore/loginFirst.do");
	      }else{
	        filterChain.doFilter(req, res);
	      }
	}

	public void destroy() {

	}


	
}