struts2利用拦截器和注解进行权限控制
?
基本是在每个方法上加入注入来进行控制，有点像asp 脚本语言
package auth;import java.lang.annotation.ElementType;import java.lang.annotation.Retention;import java.lang.annotation.RetentionPolicy;import java.lang.annotation.Target;
@Retention(RetentionPolicy.RUNTIME)//指定该注解是在运行期进行@Target({ElementType.METHOD})//指定该注解要在方法上使用public @interface AuthName {? String value() default "";}?
?
?
package auth;import java.lang.reflect.Method;public class ParseAuthName {public static String parseAuthentication(Class<?> clazz, String methodName,Class<?>... parameterTypes) throws NoSuchMethodException {//根据方法名，取得方法，如果有则返回Method method = clazz.getMethod(methodName, parameterTypes);if (null != method) {AuthName authName = method.getAnnotation(AuthName.class);if (null != authName) {return authName.value();}}return null;}}?
?
下面是struts的拦截器
package auth;import com.opensymphony.xwork2.ActionContext;import com.opensymphony.xwork2.ActionInvocation;import com.opensymphony.xwork2.ActionProxy;import com.opensymphony.xwork2.interceptor.AbstractInterceptor;public class AuthInterceptor extends AbstractInterceptor {@Overridepublic String intercept(ActionInvocation invocation) throws Exception {ActionContext context = invocation.getInvocationContext();String user = (String)context.getSession().get("user") == null ? "tom" : "tom";ActionProxy proxy = invocation.getProxy();String methodName = proxy.getMethod();Object action = proxy.getAction();String auth = null;try{auth = ParseAuthName.parseAuthentication(action.getClass(),methodName, null);}catch(NoSuchMethodException ex) {ex.printStackTrace(); return "nopermisses";}if (null != auth) {if ("AUTH".equals(auth)) {return invocation.invoke();}}return "nopermisses";}}?
?
写一个action进行测试：
public class UserListAction extends ActionSupport{@AuthName(value = "admin")public String execute() {return SUCCESS;}}?
?
struts.xml文件基本配置：
?
<?xml version="1.0" encoding="UTF-8" ?><!DOCTYPE struts PUBLIC "-//Apache Software Foundation//DTD Struts Configuration 2.0//EN" "http://struts.apache.org/dtds/struts-2.0.dtd"> <struts><package name="system" namespace="/admin"extends="struts-default"><interceptors><interceptor name="auth" > <result name="success">/default.jsp</result> <result name="nopermisses">/sss.jsp</result> </action></package></struts>
?web.xml文件 ，我用的是tomcat7 + servlet3.0
?
<?xml version="1.0" encoding="UTF-8"?><web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xmlns="http://java.sun.com/xml/ns/javaee" xmlns:jsp="http://java.sun.com/xml/ns/javaee/jsp"xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"id="WebApp_ID" version="3.0"> <filter> <filter-name>struts-cleanup</filter-name> <filter-class>org.apache.struts2.dispatcher.ActionContextCleanUp</filter-class> </filter> <filter> <filter-name>struts2</filter-name> <filter-class>org.apache.struts2.dispatcher.FilterDispatcher</filter-class> <init-param> <param-name>actionPackages</param-name> <param-value>action</param-value> </init-param> </filter> <filter-mapping> <filter-name>struts2</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <filter-mapping> <filter-name>struts-cleanup</filter-name> <url-pattern>*.action</url-pattern> </filter-mapping><welcome-file-list><welcome-file>index.jsp</welcome-file></welcome-file-list></web-app>
?