cn.dreampie.common.plugin.shiro

类 MyAccessControlFilter

java.lang.Object

org.apache.shiro.web.servlet.ServletContextSupport

org.apache.shiro.web.servlet.AbstractFilter

org.apache.shiro.web.servlet.NameableFilter

org.apache.shiro.web.servlet.OncePerRequestFilter

org.apache.shiro.web.servlet.AdviceFilter

org.apache.shiro.web.filter.PathMatchingFilter

cn.dreampie.common.plugin.shiro.MyAccessControlFilter

所有已实现的接口:

javax.servlet.Filter, org.apache.shiro.util.Nameable, org.apache.shiro.web.filter.PathConfigProcessor

直接已知子类:

MyAuthenticationFilter

public abstract class MyAccessControlFilter
extends org.apache.shiro.web.filter.PathMatchingFilter

Superclass for any filter that controls access to a resource and may redirect the user to the login page if they are not authenticated. This superclass provides the method saveRequestAndRedirectToLogin(javax.servlet.ServletRequest, javax.servlet.ServletResponse) which is used by many subclasses as the behavior when a user is unauthenticated.

从以下版本开始:

0.9

字段概要

字段

限定符和类型	字段和说明
static String	DEFAULT_LOGIN_URL Simple default login URL equal to /login.jsp, which can be overridden by calling the setLoginUrl method.
static String	GET_METHOD Constant representing the HTTP 'GET' request method, equal to GET.
static String	POST_METHOD Constant representing the HTTP 'POST' request method, equal to POST.

从类继承的字段 org.apache.shiro.web.filter.PathMatchingFilter

appliedPaths, pathMatcher

从类继承的字段 org.apache.shiro.web.servlet.OncePerRequestFilter

ALREADY_FILTERED_SUFFIX

从类继承的字段 org.apache.shiro.web.servlet.AbstractFilter

filterConfig

构造器概要

构造器

构造器和说明
MyAccessControlFilter()

方法概要

限定符和类型	方法和说明
String	getFailureUrl()
Map<String,String>	getFailureUrlMap()
String	getLoginUrl() Returns the login URL used to authenticate a user.
Map<String,String>	getLoginUrlMap()
String	getRealFailureUrl(javax.servlet.ServletRequest request) 获取真实的登录url
String	getRealLoginUrl(javax.servlet.ServletRequest request) 获取真实的登录url
protected org.apache.shiro.subject.Subject	getSubject(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response) Convenience method that acquires the Subject associated with the request.
protected abstract boolean	isAccessAllowed(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, Object mappedValue) Returns true if the request is allowed to proceed through the filter normally, or false if the request should be handled by the onAccessDenied(request,response,mappedValue) method instead.
protected boolean	isLoginRequest(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response) Returns true if the incoming request is a login request, false otherwise.
protected abstract boolean	onAccessDenied(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response) Processes requests where the subject was denied access as determined by the isAccessAllowed method.
protected boolean	onAccessDenied(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, Object mappedValue) Processes requests where the subject was denied access as determined by the isAccessAllowed method, retaining the mappedValue that was used during configuration.
boolean	onPreHandle(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, Object mappedValue) Returns true if isAccessAllowed(Request,Response,Object), otherwise returns the result of onAccessDenied(Request,Response,Object).
protected void	redirectToLogin(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response) Convenience method for subclasses that merely acquires the getLoginUrl and redirects the request to that url.
protected void	saveRequest(javax.servlet.ServletRequest request) Convenience method merely delegates to WebUtils.saveRequest(request) to save the request state for reuse later.
protected void	saveRequestAndRedirectToLogin(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response) Convenience method for subclasses to use when a login redirect is required.
void	setFailureUrl(String failureUrl)
void	setFailureUrlMap(Map<String,String> failureUrlMap)
void	setLoginUrl(String loginUrl) Sets the login URL used to authenticate a user.
void	setLoginUrlMap(Map<String,String> loginUrlMap)

从类继承的方法 org.apache.shiro.web.filter.PathMatchingFilter

getPathWithinApplication, isEnabled, pathsMatch, pathsMatch, preHandle, processPathConfig

从类继承的方法 org.apache.shiro.web.servlet.AdviceFilter

afterCompletion, cleanup, doFilterInternal, executeChain, postHandle

从类继承的方法 org.apache.shiro.web.servlet.OncePerRequestFilter

doFilter, getAlreadyFilteredAttributeName, isEnabled, isEnabled, setEnabled, shouldNotFilter

从类继承的方法 org.apache.shiro.web.servlet.NameableFilter

getName, setName, toStringBuilder

从类继承的方法 org.apache.shiro.web.servlet.AbstractFilter

destroy, getFilterConfig, getInitParam, init, onFilterConfigSet, setFilterConfig

从类继承的方法 org.apache.shiro.web.servlet.ServletContextSupport

getContextAttribute, getContextInitParam, getServletContext, removeContextAttribute, setContextAttribute, setServletContext, toString

从类继承的方法 java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

字段详细资料

DEFAULT_LOGIN_URL

public static final String DEFAULT_LOGIN_URL

Simple default login URL equal to /login.jsp, which can be overridden by calling the setLoginUrl method.

另请参阅:

常量字段值

GET_METHOD

public static final String GET_METHOD

Constant representing the HTTP 'GET' request method, equal to GET.

另请参阅:

常量字段值

POST_METHOD

public static final String POST_METHOD

Constant representing the HTTP 'POST' request method, equal to POST.

另请参阅:

常量字段值

构造器详细资料

MyAccessControlFilter

public MyAccessControlFilter()

方法详细资料

getFailureUrl

public String getFailureUrl()

setFailureUrl

public void setFailureUrl(String failureUrl)

getFailureUrlMap

public Map<String,String> getFailureUrlMap()

setFailureUrlMap

public void setFailureUrlMap(Map<String,String> failureUrlMap)

getLoginUrl

public String getLoginUrl()

Returns the login URL used to authenticate a user. Most Shiro filters use this url as the location to redirect a user when the filter requires authentication. Unless overridden, the DEFAULT_LOGIN_URL is assumed, which can be overridden via setLoginUrl.

返回:

the login URL used to authenticate a user, used when redirecting users if authentication is required.

setLoginUrl

public void setLoginUrl(String loginUrl)

Sets the login URL used to authenticate a user. Most Shiro filters use this url as the location to redirect a user when the filter requires authentication. Unless overridden, the DEFAULT_LOGIN_URL is assumed.

参数:

loginUrl - the login URL used to authenticate a user, used when redirecting users if authentication is required.

getLoginUrlMap

public Map<String,String> getLoginUrlMap()

setLoginUrlMap

public void setLoginUrlMap(Map<String,String> loginUrlMap)

getSubject

protected org.apache.shiro.subject.Subject getSubject(javax.servlet.ServletRequest request,
                                                      javax.servlet.ServletResponse response)

Convenience method that acquires the Subject associated with the request. The default implementation simply returns SecurityUtils.getSubject().

参数:

request - the incoming ServletRequest

response - the outgoing ServletResponse

返回:

the Subject associated with the request.

isAccessAllowed

protected abstract boolean isAccessAllowed(javax.servlet.ServletRequest request,
                                           javax.servlet.ServletResponse response,
                                           Object mappedValue)
                                    throws Exception

Returns true if the request is allowed to proceed through the filter normally, or false if the request should be handled by the onAccessDenied(request,response,mappedValue) method instead.

参数:

request - the incoming ServletRequest

response - the outgoing ServletResponse

mappedValue - the filter-specific config value mapped to this filter in the URL rules mappings.

返回:

true if the request should proceed through the filter normally, false if the request should be processed by this filter's onAccessDenied(javax.servlet.ServletRequest, javax.servlet.ServletResponse, Object) method instead.

抛出:

Exception - if an error occurs during processing.

onAccessDenied

protected boolean onAccessDenied(javax.servlet.ServletRequest request,
                                 javax.servlet.ServletResponse response,
                                 Object mappedValue)
                          throws Exception

Processes requests where the subject was denied access as determined by the isAccessAllowed method, retaining the mappedValue that was used during configuration. This method immediately delegates to onAccessDenied(javax.servlet.ServletRequest, javax.servlet.ServletResponse) as a convenience in that most post-denial behavior does not need the mapped config again.

参数:

request - the incoming ServletRequest

response - the outgoing ServletResponse

mappedValue - the config specified for the filter in the matching request's filter chain.

返回:

true if the request should continue to be processed; false if the subclass will handle/render the response directly.

抛出:

Exception - if there is an error processing the request.

从以下版本开始:

1.0

onAccessDenied

protected abstract boolean onAccessDenied(javax.servlet.ServletRequest request,
                                          javax.servlet.ServletResponse response)
                                   throws Exception

Processes requests where the subject was denied access as determined by the isAccessAllowed method.

参数:

request - the incoming ServletRequest

response - the outgoing ServletResponse

返回:

true if the request should continue to be processed; false if the subclass will handle/render the response directly.

抛出:

Exception - if there is an error processing the request.

onPreHandle

public boolean onPreHandle(javax.servlet.ServletRequest request,
                           javax.servlet.ServletResponse response,
                           Object mappedValue)
                    throws Exception

Returns true if isAccessAllowed(Request,Response,Object), otherwise returns the result of onAccessDenied(Request,Response,Object).

覆盖:

onPreHandle 在类中 org.apache.shiro.web.filter.PathMatchingFilter

返回:

true if isAccessAllowed, otherwise returns the result of onAccessDenied.

抛出:

Exception - if an error occurs.

isLoginRequest

protected boolean isLoginRequest(javax.servlet.ServletRequest request,
                                 javax.servlet.ServletResponse response)

Returns true if the incoming request is a login request, false otherwise. The default implementation merely returns true if the incoming request matches the configured loginUrl by calling pathsMatch(loginUrl, request).

参数:

request - the incoming ServletRequest

response - the outgoing ServletResponse

返回:

true if the incoming request is a login request, false otherwise.

saveRequestAndRedirectToLogin

protected void saveRequestAndRedirectToLogin(javax.servlet.ServletRequest request,
                                             javax.servlet.ServletResponse response)
                                      throws IOException

Convenience method for subclasses to use when a login redirect is required. This implementation simply calls saveRequest(request) and then redirectToLogin(request,response).

参数:

request - the incoming ServletRequest

response - the outgoing ServletResponse

抛出:

IOException - if an error occurs.

saveRequest

protected void saveRequest(javax.servlet.ServletRequest request)

Convenience method merely delegates to WebUtils.saveRequest(request) to save the request state for reuse later. This is mostly used to retain user request state when a redirect is issued to return the user to their originally requested url/resource. If you need to save and then immediately redirect the user to login, consider using saveRequestAndRedirectToLogin(request,response) directly.

参数:

request - the incoming ServletRequest to save for re-use later (for example, after a redirect).

redirectToLogin

protected void redirectToLogin(javax.servlet.ServletRequest request,
                               javax.servlet.ServletResponse response)
                        throws IOException

Convenience method for subclasses that merely acquires the getLoginUrl and redirects the request to that url. N.B. If you want to issue a redirect with the intention of allowing the user to then return to their originally requested URL, don't use this method directly. Instead you should call saveRequestAndRedirectToLogin(request,response), which will save the current request state so that it can be reconstructed and re-used after a successful login.

参数:

request - the incoming ServletRequest

response - the outgoing ServletResponse

抛出:

IOException - if an error occurs.

getRealLoginUrl

public String getRealLoginUrl(javax.servlet.ServletRequest request)

获取真实的登录url

参数:

request - the incoming ServletRequest

返回:

url

getRealFailureUrl

public String getRealFailureUrl(javax.servlet.ServletRequest request)

获取真实的登录url

参数:

request - the incoming ServletRequest

返回:

url