jsp权限管理源码

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class AuthFilter implements Filter {
    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
            throws IOException, ServletException {
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        HttpServletResponse httpResponse = (HttpServletResponse) response;

        String userRole = getUserRole(httpRequest); // 从会话或数据库获取用户角色

        if ("ADMIN".equals(userRole)) {
            chain.doFilter(request, response); // 允许管理员访问
        } else {
            httpResponse.sendRedirect("/accessDenied.jsp"); // 重定向到无权限页面
        }
    }

    private String getUserRole(HttpServletRequest request) {
        // 实现获取用户角色的逻辑，例如从Session或数据库查询
        return (String) request.getSession().getAttribute("userRole");
    }

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {}

    @Override
    public void destroy() {}
}

<filter>
    <filter-name>AuthFilter</filter-name>
    <filter-class>com.example.AuthFilter</filter-class>
</filter>
<filter-mapping>
    <filter-name>AuthFilter</filter-name>
    <url-pattern>/admin/*</url-pattern>
</filter-mapping>