免费视频淫片aa毛片_日韩高清在线亚洲专区vr_日韩大片免费观看视频播放_亚洲欧美国产精品完整版

  <!--身份驗(yàn)證、登錄、權(quán)限-->

  <filter>

    <filter-name>authorityFilter</filter-name>

    <filter-class>com.hk.uc.client.filter.RestAuthorizeFilter</filter-class>

    <init-param>

        <!-- 配置不需要被登錄過濾器攔截的鏈接，只支持配后綴、前綴 及全路徑，多個(gè)配置用逗號分隔 -->

        <param-name>excludedPaths</param-name>

        <param-value>/pages/*,*.html,*.js,*.ico</param-value>

    </init-param>

  </filter>

  <filter-mapping>

    <filter-name>authorityFilter</filter-name>

    <url-pattern>/*</url-pattern>

  </filter-mapping>

import java.io.IOException;

import javax.servlet.Filter;

import javax.servlet.FilterChain;

import javax.servlet.FilterConfig;

import javax.servlet.ServletException;

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import com.kangxiinfo.framework.common.util.StringUtils;

/**

 * 身份認(rèn)證過濾器

 * @author ZENG.XIAO.YAN

 * @time   2018-10-19 14:07:44

 * @version  v1.0

 */

public class RestAuthorizeFilter implements Filter {

    /**

     * 不需要被過濾器攔截的頁面 ，主要用于靜態(tài)資源的放行

     * 在web.xml中配置filter的init-param

     */    

    private String excludedPaths; 

    private String [] excludedPathArray;

    @Override

    public void init(FilterConfig filterConfig) throws ServletException {

        // 初始化時(shí)讀取web.xml中配置的init-param

        excludedPaths = filterConfig.getInitParameter("excludedPaths");

        if(!StringUtils.isNullOrBlank(excludedPaths)){

            excludedPathArray = excludedPaths.split(",");

        }

    }

    @Override

    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,

                         FilterChain filterChain) throws IOException, ServletException {

        HttpServletRequest request = (HttpServletRequest) servletRequest;

        HttpServletResponse response = (HttpServletResponse) servletResponse;

        // 判斷是否是直接放行的請求

        if (!isFilterExcludeRequest(request)) {

            // TODO 這里寫你的過濾器處理邏輯

        }

        filterChain.doFilter(servletRequest, servletResponse);

    }

    @Override

    public void destroy() {

        // TODO Auto-generated method stub

    }

    /**

     * 判斷是否是 過濾器直接放行的請求

     * <br/>主要用于靜態(tài)資源的放行

     * @param url

     * @return

     */

    private boolean isFilterExcludeRequest(HttpServletRequest request) {

        if(null != excludedPathArray && excludedPathArray.length > 0) {

            String url = request.getRequestURI();

            for (String ecludedUrl : excludedPathArray) {

                if (ecludedUrl.startsWith("*.")) {

                    // 如果配置的是后綴匹配, 則把前面的*號干掉，然后用endWith來判斷

                    if(url.endsWith(ecludedUrl.substring(1))){

                        return true;

                    }

                } else if (ecludedUrl.endsWith("/*")) {

                    if(!ecludedUrl.startsWith("/")) {

                        // 前綴匹配，必須要是/開頭

                        ecludedUrl = "/" + ecludedUrl;

                    }

                    // 如果配置是前綴匹配, 則把最后的*號干掉，然后startWith來判斷

                    String prffixStr = request.getContextPath() + ecludedUrl.substring(0, ecludedUrl.length() - 1);

                    if(url.startsWith(prffixStr)) {

                        return true;

                    }

                } else {

                    // 如果不是前綴匹配也不是后綴匹配,那就是全路徑匹配

                    if(!ecludedUrl.startsWith("/")) {

                        // 全路徑匹配，也必須要是/開頭

                        ecludedUrl = "/" + ecludedUrl;

                    }

                    String targetUrl = request.getContextPath() + ecludedUrl;

                    if(url.equals(targetUrl)) {

                        return true;

                    }

                }

            }

        }

        return false;

    }

}