AuthFilter过滤器阻断通过转发的WEB-INF/jsp页面失败

解决了。

package com.imooc.library.filter;

import java.io.IOException;

import javax.servlet.Filter;

import javax.servlet.FilterChain;

import javax.servlet.FilterConfig;

import javax.servlet.ServletException;

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import com.imooc.library.entity.User;

/*

 * 

 */

public class AuthFilter implements Filter {

@Override

public void destroy() {

// TODO Auto-generated method stub

}

@Override

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)

throws IOException, ServletException {

// TODO Auto-generated method stub

HttpServletRequest req=(HttpServletRequest)request;

HttpServletResponse res=(HttpServletResponse)response;

StringBuffer URL=req.getRequestURL();

System.out.println("filter URL="+URL);

String url[]={".js",".html","login",".css","png","jpg"};

boolean flag=false;

String method=req.getParameter("method");

if(method!=null) {

if(method.equals("login")) {

flag=true;

}

}

for(String str:url) {

System.out.println("index="+URL.indexOf(str));

if(URL.indexOf(str)>0) {

flag=true;

break;

}

}

if(!flag) {

System.out.println("====== authfilter过滤user结果username=");

    User user=(User)req.getSession().getAttribute("user");

         if(user!=null) {

    chain.doFilter(request, response);

    }else {

   res.sendRedirect(req.getContextPath()+"/login.jsp");

   //chain.doFilter(request, response);

     }

}else 

  {

chain.doFilter(request, response);

  }

}

@Override

public void init(FilterConfig filterConfig) throws ServletException {

// TODO Auto-generated method stub

}

}

同学你哈哦，1、建议同学将 <url-pattern>/WEB-INF/jsp/*</url-pattern>修改为 <url-pattern>/*</url-pattern>，如下图所示：

/* 会匹配所有url（只匹配当前文件夹下文件，不匹配子文件夹下文件），路径型的和后缀型的url(包括/login,*.jsp,*.js和*.html等)。

2、建议在AuthFilter过滤器中放行js、css、login等页面。如下图所示：

​

@Override
	public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
			throws IOException, ServletException {
		// TODO Auto-generated method stub
		HttpServletRequest req = (HttpServletRequest) request;
		HttpServletResponse res = (HttpServletResponse) response;
		// 判断是否能通过
		boolean flag = false;
		String reqURI = req.getRequestURI();
		// 不需要过滤的url
		String[] url = { ".js", ".css", ".html", ".png", "/login" };
		for (String str : url) {
			// 判断uri是否需要过滤
			if (reqURI.indexOf(str) != -1) {
				flag = true;
				break;
			}
		}
		// 如果为flag为false，则判断是否登录，如果登录，则放行，没登录则跳转到登录页面
		if (!flag) {
			User user = (User) req.getSession().getAttribute("user");
			if (user != null) {
				// 如果user为null，则直接调用getUserName()方法，会出现空指针异常，所以建议在if判断中进行输出
				System.out.println("====== authfilter过滤user结果username=" + user.getUserName());
				chain.doFilter(request, response);
				return;
			} else {
				res.sendRedirect(request.getServletContext() + "/login.jsp");
			}
		}
		chain.doFilter(request, response);
	}

祝学习愉快！