使用HandlerInterceptor实现简单的授权
实现拦截器接口HandlerInterceptor或者HandlerInterceptorAdapter
package com.qunar.keyvalue.controller;import javax.servlet.http.HttpServletRequest;import javax.servlet.http.HttpServletResponse;import javax.servlet.http.HttpSession;import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;import com.qunar.keyvalue.model.User;public class AuthorizeInterceptor extends HandlerInterceptorAdapter{@Overridepublic boolean preHandle(HttpServletRequest request,HttpServletResponse response, Object handler) throws Exception {boolean handlerOk = super.preHandle(request, response, handler);if(handlerOk){String url = request.getRequestURL().toString();if(url.endsWith("doLogin"))return true;HttpSession session = request.getSession();User user = (User)session.getAttribute("user");if(user == null) {response.sendRedirect("login.jsp");}return true;}return false;}}<bean id="authorizeInterceptor" class="org.springframework.web.servlet.mvc.annotation.DefaultAnnotationHandlerMapping"><property name="interceptors"><list><ref bean="authorizeInterceptor"/></list></property></bean>