Struts filter

最新推荐文章于 2024-01-21 11:55:13 发布

lizarbhc

最新推荐文章于 2024-01-21 11:55:13 发布

阅读量1.7k

点赞数

文章标签： filter struts servlet import authentication encoding

本文介绍 Servlet Filter 的核心功能，包括如何验证用户会话和解决 Struts 中的中文乱码问题。通过两个实战案例，展示了 Filter 在 Web 开发中的实际应用。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

其中最重要的就是filter功能.它使用户可以改变一个request和修改一个response. Filter 不是一个servlet,它不能产生一个response,它能够在一个request到达servlet之前预处理request,也可以在离开servlet时处理response.换种说法,filter其实是一个”servlet chaining”(servlet 链).一个filter 包括:
1. 在servlet被调用之前截获;
2. 在servlet被调用之前检查servlet request;
3. 根据需要修改request头和request数据;
4. 根据需要修改response头和response数据;
5. 在servlet被调用之后截获.
你能够配置一个filter 到一个或多个servlet;单个servlet或servlet组能够被多个filter 使用.几个实用的filter 包括:用户辨认filter,日志filter,审核filter,加密filter,符号filter,能改变xml内容的XSLT filter等.
一个filter必须实现javax.servlet.Filter接口并定义三个方法:
1.void setFilterConfig(FilterConfig config) //设置filter 的配置对象;
2. FilterConfig getFilterConfig() //返回filter的配置对象;
3. void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) //执行filter 的工作.
服务器每次只调用setFilterConfig方法一次准备filter 的处理;调用doFilter方法多次以处理不同的请求.FilterConfig接口有方法可以找到filter名字及初始化参数信息.服务器可以设置FilterConfig为空来指明filter已经终结.
每一个filter从doFilter()方法中得到当前的request及response.在这个方法里,可以进行任何的针对request及response的操作.(包括收集数据,包装数据等).filter调用chain.doFilter()方法把控制权交给下一个filter.一个filter在doFilter()方法中结束.如果一个filter想停止request处理而获得对response的完全的控制,那它可以不调用下一个filter.
一个filter可以包装request 或response以改变几个方法和提供用户定制的属性.Api2.3提供了HttpServletRequestWrapper 和HttpServletResponseWrapper来实现.它们能分派最初的request和response.如果要改变一个方法的特性,必须继承wapper和重写方法.下面是一段简单的日志filter用来记录所有request的持续时间.

EXAMPLE 1(用filter来验证Session):
1 web.xml里添加filter配置信息。

<filter-name> Authentication </filter-name>

<filter-class> com.nova.colimas.web.filters.AuthenticationFilter </filter-class>

<init-param>

<param-name>onError</param-name>

<param-value>/pages/index.jsp</param-value>

</init-param>

</filter>

<filter-mapping>

<filter-name>Authentication</filter-name>

<url-pattern>/protect/*</url-pattern>

</filter-mapping>

<filter-class>定义使用com.nova.colimas.web.filters.AuthenticationFilter类执行过滤Action。
<init-param>当验证失败后Forward到/pages/index.jsp
<filter-mapping>只有当地址包括/protect/时运行filter类

2 实现com.nova.colimas.web.filters.AuthenticationFilter

package com.nova.colimas.web.filters;

import java.io.IOException;

import javax.servlet.RequestDispatcher;

import javax.servlet.ServletException;

import javax.servlet.http.*;

import javax.servlet.Filter;

import javax.servlet.FilterChain;

import javax.servlet.FilterConfig;

import com.nova.colimas.web.bean.UserBean;

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

import org.apache.struts.Globals;

import org.apache.struts.action.*;

import com.nova.colimas.web.constants.Constants;

/** * Filter implementation for user authentication。

必须实现Filter接口 *

@author DREAN*

@version $Id: AuthenticationFilter.java,v 1.0 */

public class AuthenticationFilter implements Filter{

/** * filterConfig will store the reference of FilterConfig */

private FilterConfig filterConfig;

private String onErrorUrl;

/** * store the reference of the FilterConfig.

* @param config FilterConfig object

* @throws ServletException */

public void init(FilterConfig config) throws ServletException

{//获得验证失败forward地址

filterConfig = config;

onErrorUrl=filterConfig.getInitParameter("onError");

if (onErrorUrl==null || "".equals(onErrorUrl))

{

onErrorUrl="/pages/index.jsp";

}

/** * User Authentication is done. If User is authenticated successful then

* control is transferred to logon URI

* @param ServletRequest Request

* @param ServletRequest Response

* @param FilterChain Filter Chain

* @throws ServletException,IOException */

public void doFilter(ServletRequest request, ServletResponse response, FilterChain next) throws

IOException,ServletException

{

HttpServletRequest httpRequest = (HttpServletRequest)request;

HttpServletResponse httpResponse=(HttpServletResponse)response;

// Current session

HttpSession httpSession = httpRequest.getSession();

//Session里是否有用户信息。

if (httpSession.getAttribute(Constants.USER_KEY) == null)

{

ActionErrors errors=new ActionErrors();

errors.add(ActionErrors.GLOBAL_ERROR,

new ActionError("error authentication"));

httpRequest.setAttribute(Globals.ERROR_KEY,errors);

//没有，验证失败forward到/pages/index.jsp

httpRequest.getRequestDispatcher(onErrorUrl).forward(httpRequest,httpResponse);

}

else

//成果过滤Action结束

next.doFilter(request,response);

}

/** * destroy() method is called by the servlet container */

public void destroy()

{ .... }

}

EXAMPLE 2(用filter来解决Struts中文乱码的问题):

首先，实现javax.servlet.Filter接口，编写一个处理request编码的过滤器类...

package tutorial.struts.filter;

import javax.servlet.Filter;

import javax.servlet.FilterConfig;

import javax.servlet.ServletException;

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

import javax.servlet.FilterChain;

import java.io.IOException;

public class SetCharacterEncodingFilter implements Filter {

protected FilterConfig filterConfig;

protected String encodingName;

protected boolean enable;

public SetCharacterEncodingFilter() {

this.encodingName = "UTF-8";

this.enable = false;

}

public void init(FilterConfig filterConfig) throws ServletException {

this.filterConfig = filterConfig;

loadConfigParams();

}

private void loadConfigParams() {

//encoding

this.encodingName = this.filterConfig.getInitParameter("encoding");

//filter enable flag...

String strIgnoreFlag = this.filterConfig.getInitParameter("enable");

if (strIgnoreFlag.equalsIgnoreCase("true")) {

this.enable = true;

} else {

this.enable = false;

}

public void doFilter(ServletRequest request, ServletResponse response,

FilterChain chain) throws IOException, ServletException {

if(this.enable) {

request.setCharacterEncoding(this.encodingName);

}

chain.doFilter(request, response);

}

public void destroy() {

}

然后，需要在web.xml中注册我们的过滤器类：

<filter-name>Set Character Encoding</filter-name>

<filter-class>tutorial.struts.filter.SetCharacterEncodingFilter</filter-class >

<init-param>

<param-name>encoding</param-name>

<param-value>UTF-8</param-value>

</init-param>

<init-param>

<param-name>enable</param-name >

<param-value>true</param-value >

</init-param>

</filter>

<filter-mapping>

<filter-name>Set Character Encoding</filter-name >

<servlet-name>Action Servlet</servlet-name >

</filter-mapping>

<filter-mapping>

<filter-name>Set Character Encoding</filter-name >

<servlet-name>Faces Servlet</servlet-name >

</filter-mapping>

任何通过Struts，或是JSF的Controller Servlet处理的request，都会在过滤器中先行处理，才把控制权交还给Struts或是JSF，而且Filter中有一个Process Chain的概念