亚洲AV网址在线观看-亚洲VA中文字幕无码久久

07-11

2017

基于Maven+SSM整合shiro+Redis實(shí)現(xiàn)后臺(tái)管理項(xiàng)目

本項(xiàng)目由賣咸魚叔叔開發(fā)完成，歡迎大神指點(diǎn)，慎重抄襲！參考了sojson提供的demo，和官方文檔介紹。完整實(shí)現(xiàn)了用戶、角色、權(quán)限CRUD及分頁(yè)，還有shiro的登錄認(rèn)證+授權(quán)訪問(wèn)控制。項(xiàng)目架構(gòu)：Maven + SpringMVC + Spring + Mybatis + Shiro + Redis數(shù)據(jù)庫(kù)：MySql前端框架：H-ui 首先創(chuàng)建Maven項(xiàng)目1.pom.xml 加入依賴包<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> <modelVersion>4.0.0</modelVersion> <groupId>sys</groupId> <artifactId>sys</artifactId> <packaging>war</packaging> <version>0.0.1-SNAPSHOT</version> <name>sys Maven Webapp</name> <url>http://maven.apache.org</url> <dependencies>   <dependency> <groupId>org.springframework</groupId> <artifactId>spring-context</artifactId> <version>4.3.2.RELEASE</version> </dependency>  <dependency> <groupId>org.springframework</groupId> <artifactId>spring-context-support</artifactId> <version>4.3.2.RELEASE</version> </dependency>  <dependency> <groupId>org.springframework</groupId> <artifactId>spring-orm</artifactId> <version>4.3.2.RELEASE</version> </dependency>  <dependency> <groupId>org.springframework</groupId> <artifactId>spring-webmvc</artifactId> <version>4.3.2.RELEASE</version> </dependency>  <dependency> <groupId>org.springframework</groupId> <artifactId>spring-aspects</artifactId> <version>4.3.2.RELEASE</version> </dependency>  <dependency> <groupId>com.fasterxml.jackson.core</groupId> <artifactId>jackson-databind</artifactId> <version>2.6.0</version> </dependency>   <dependency> <groupId>org.mybatis</groupId> <artifactId>mybatis</artifactId> <version>3.3.0</version> </dependency>  <dependency> <groupId>org.mybatis</groupId> <artifactId>mybatis-spring</artifactId> <version>1.2.3</version> </dependency>  <dependency> <groupId>com.github.pagehelper</groupId> <artifactId>pagehelper</artifactId> <version>4.1.6</version> </dependency>  <dependency> <groupId>mysql</groupId> <artifactId>mysql-connector-java</artifactId> <version>5.1.37</version> </dependency>  <dependency> <groupId>com.mchange</groupId> <artifactId>c3p0</artifactId> <version>0.9.5</version> </dependency>  <dependency> <groupId>redis.clients</groupId> <artifactId>jedis</artifactId> <version>2.9.0</version> </dependency>  <dependency> <groupId>commons-fileupload</groupId> <artifactId>commons-fileupload</artifactId> <version>1.3.1</version> </dependency> <dependency> <groupId>commons-io</groupId> <artifactId>commons-io</artifactId> <version>2.5</version> </dependency> <dependency> <groupId>org.apache.commons</groupId> <artifactId>commons-email</artifactId> <version>1.4</version> </dependency> <dependency> <groupId>org.apache.logging.log4j</groupId> <artifactId>log4j-core</artifactId> <version>2.7</version> </dependency> <dependency> <groupId>org.apache.httpcomponents</groupId> <artifactId>httpclient</artifactId> <version>4.5.2</version> </dependency> <dependency> <groupId>org.apache.httpcomponents</groupId> <artifactId>httpcore</artifactId> <version>4.4.4</version> </dependency>  <dependency> <groupId>junit</groupId> <artifactId>junit</artifactId> <version>4.11</version> </dependency>  <dependency> <groupId>javax.servlet</groupId> <artifactId>javax.servlet-api</artifactId> <version>3.1.0</version> <scope>provided</scope> </dependency>  <dependency> <groupId>javax.servlet.jsp</groupId> <artifactId>jsp-api</artifactId> <version>2.2</version> <scope>provided</scope> </dependency>  <dependency> <groupId>org.glassfish.web</groupId> <artifactId>jstl-impl</artifactId> <version>1.2</version> <exclusions> <exclusion> <groupId>javax.servlet</groupId> <artifactId>servlet-api</artifactId> </exclusion> <exclusion> <groupId>javax.servlet.jsp</groupId> <artifactId>jsp-api</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>net.sf.json-lib</groupId> <artifactId>json-lib</artifactId> <version>2.4</version> <classifier>jdk15</classifier> </dependency> <dependency> <groupId>commons-httpclient</groupId> <artifactId>commons-httpclient</artifactId> <version>3.1</version> </dependency>  <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-core</artifactId> <version>1.2.3</version> </dependency> <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-spring</artifactId> <version>1.2.3</version> </dependency> <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-cas</artifactId> <version>1.2.3</version> <exclusions> <exclusion> <groupId>commons-logging</groupId> <artifactId>commons-logging</artifactId> </exclusion> </exclusions> </dependency> <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-web</artifactId> <version>1.2.3</version> </dependency> <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-ehcache</artifactId> <version>1.2.3</version> </dependency> <dependency> <groupId>org.apache.shiro</groupId> <artifactId>shiro-quartz</artifactId> <version>1.2.3</version> </dependency>  </dependencies> <build> <finalName>sys</finalName> <plugins>  <plugin> <groupId>org.apache.maven.plugins</groupId> <artifactId>maven-compiler-plugin</artifactId> <version>3.1</version> <configuration> <source>1.8</source> <target>1.8</target> </configuration> </plugin> </plugins> </build></project>2.SSM框架配置beans.xml<?xml version="1.0" encoding="UTF-8"?><beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mvc="http://www.springframework.org/schema/mvc" xmlns:context="http://www.springframework.org/schema/context" xmlns:aop="http://www.springframework.org/schema/aop" xmlns:tx="http://www.springframework.org/schema/tx" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop.xsd http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx.xsd">  <bean id="dataSource" class="com.mchange.v2.c3p0.ComboPooledDataSource"> <property name="driverClass" value="com.mysql.jdbc.Driver"/> <property name="jdbcUrl" value="jdbc:mysql://localhost:3306/sys_test?characterEncoding=UTF8&allowMultiQueries=true"/> <property name="user" value="root"/> <property name="password" value="root"/> <property name="maxPoolSize" value="100"/> <property name="minPoolSize" value="10"/> <property name="maxIdleTime" value="60"/> </bean>  <bean id="sqlSessionFactory" class="org.mybatis.spring.SqlSessionFactoryBean"> <property name="dataSource" ref="dataSource"/> <property name="configLocation" value="classpath:mybatis-config.xml"></property> </bean>  <bean class="org.mybatis.spring.mapper.MapperScannerConfigurer"> <property name="basePackage" value="com.sys.mapper" /> </bean>  <bean id="txManager" class="org.springframework.jdbc.datasource.DataSourceTransactionManager"> <property name="dataSource" ref="dataSource" /> </bean>  <tx:advice id="txAdvice" transaction-manager="txManager"> <tx:attributes> <tx:method name="select*" propagation="SUPPORTS" read-only="true"/> <tx:method name="page*" propagation="SUPPORTS" read-only="true"/> <tx:method name="is*" propagation="SUPPORTS" read-only="true"/> <tx:method name="*" propagation="REQUIRED" read-only="false"/> </tx:attributes> </tx:advice>  <aop:config> <aop:pointcut id="txPointcut" expression="execution(* com.sys.service..*.*(..))" /> <aop:advisor advice-ref="txAdvice" pointcut-ref="txPointcut" /> </aop:config>   <context:component-scan base-package="com.sys.service"></context:component-scan>  <aop:aspectj-autoproxy/> </beans>dispatcher-servlet.xml<?xml version="1.0" encoding="UTF-8"?><beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mvc="http://www.springframework.org/schema/mvc" xmlns:context="http://www.springframework.org/schema/context" xmlns:aop="http://www.springframework.org/schema/aop" xmlns:tx="http://www.springframework.org/schema/tx" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://www.springframework.org/schema/mvc http://www.springframework.org/schema/mvc/spring-mvc.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop.xsd http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx.xsd">  <context:component-scan base-package="com.sys" />  <mvc:annotation-driven />  <aop:aspectj-autoproxy/>  <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver"> <property name="prefix" value="/WEB-INF/jsp/"></property> <property name="suffix" value=".jsp"></property> </bean>  <bean id="multipartResolver" class="org.springframework.web.multipart.commons.CommonsMultipartResolver"> <property name="maxUploadSize" value="104857600" /> <property name="defaultEncoding" value="UTF-8" /> <property name="maxInMemorySize" value="40960" /> </bean>  <mvc:resources location="/css/" mapping="/css/**" /> <mvc:resources location="/js/" mapping="/js/**" /> <mvc:resources location="/images/" mapping="/images/**" /> <mvc:resources location="/skin/" mapping="/skin/**" /> <mvc:resources location="/lib/" mapping="/lib/**" /> </beans>mybatis-config.xml<?xml version="1.0" encoding="UTF-8" ?><!DOCTYPE configuration PUBLIC "-//mybatis.org//DTD Config 3.0//EN" "http://mybatis.org/dtd/mybatis-3-config.dtd"><configuration> <settings>  <setting name="logImpl" value="LOG4J2"/> </settings> <typeAliases>  <package name="com.sys.pojo"/> </typeAliases> <mappers>  <package name="com.sys.mapper"/> </mappers></configuration>Log4j2.xml <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE xml><Configuration status="OFF"> <Appenders> <Console name="CONSOLE" target="SYSTEM_OUT"> <PatternLayout pattern="%d{HH:mm:ss.SSS} %-5level %logger{0} - %msg%n" /> </Console> <RollingFile name="ROLLING" fileName="/logs/ups-manager/log.log" filePattern="/logs/log_%d{yyyy-MM-dd}_%i.log"> <PatternLayout pattern="%d %p %c{1.} [%t] %m%n"/> <Policies> <TimeBasedTriggeringPolicy modulate="true" interval="1"/> <SizeBasedTriggeringPolicy size="1024 KB"/> </Policies> <DefaultRolloverStrategy max="100"/> </RollingFile> </Appenders> <Loggers> <Root level="debug"> <AppenderRef ref="CONSOLE" /> <AppenderRef ref="ROLLING"/> </Root>  <Logger name="org.mybatis.spring" level="error"> <AppenderRef ref="CONSOLE"/> </Logger> </Loggers></Configuration>web.xml<?xml version="1.0" encoding="UTF-8"?><web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://xmlns.jcp.org/xml/ns/javaee" xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd" id="WebApp_ID" version="3.1">  <listener> <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> </listener>  <filter> <filter-name>characterEncodingFilter</filter-name> <filter-class>org.springframework.web.filter.CharacterEncodingFilter</filter-class> <init-param> <param-name>encoding</param-name> <param-value>UTF-8</param-value> </init-param> <init-param>  <param-name>forceEncoding</param-name> <param-value>true</param-value> </init-param> </filter> <filter-mapping> <filter-name>characterEncodingFilter</filter-name>  <url-pattern>/*</url-pattern> </filter-mapping> <context-param> <param-name>contextConfigLocation</param-name> <param-value> classpath:spring-shiro.xml, classpath:beans.xml, classpath:dispatcher-servlet.xml </param-value> </context-param>  <filter> <filter-name>shiroFilter</filter-name> <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> <init-param> <param-name>targetFilterLifecycle</param-name> <param-value>true</param-value> </init-param> </filter> <filter-mapping> <filter-name>shiroFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping>  <servlet> <servlet-name>dispatcher</servlet-name> <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> <init-param> <param-name>contextConfigLocation</param-name> <param-value>classpath:dispatcher-servlet.xml</param-value> </init-param> <load-on-startup>1</load-on-startup> </servlet> <servlet-mapping> <servlet-name>dispatcher</servlet-name> <url-pattern>/</url-pattern> </servlet-mapping> </web-app>3.實(shí)現(xiàn)用戶、角色、權(quán)限頁(yè)面操作功能，這里就不貼代碼了4.接下來(lái)就是shiro，登錄認(rèn)證和授權(quán)只需要繼承AuthorizingRealm，其繼承了 AuthenticatingRealm（即身份驗(yàn)證），而且也間接繼承了 CachingRealm（帶有緩存實(shí)現(xiàn)）。身份認(rèn)證重寫doGetAuthenticationInfo方法，授權(quán)重寫doGetAuthorizationInfo方法。Shiro 默認(rèn)提供的 Realm 身份認(rèn)證流程流程如下：首先調(diào)用 Subject.login(token) 進(jìn)行登錄，其會(huì)自動(dòng)委托給 Security Manager，調(diào)用之前必須通過(guò) SecurityUtils.setSecurityManager() 設(shè)置；SecurityManager 負(fù)責(zé)真正的身份驗(yàn)證邏輯；它會(huì)委托給 Authenticator 進(jìn)行身份驗(yàn)證；Authenticator 才是真正的身份驗(yàn)證者，Shiro API 中核心的身份認(rèn)證入口點(diǎn)，此處可以自定義插入自己的實(shí)現(xiàn)；Authenticator 可能會(huì)委托給相應(yīng)的 AuthenticationStrategy 進(jìn)行多 Realm 身份驗(yàn)證，默認(rèn) ModularRealmAuthenticator 會(huì)調(diào)用 AuthenticationStrategy 進(jìn)行多 Realm 身份驗(yàn)證；Authenticator 會(huì)把相應(yīng)的 token 傳入 Realm，從 Realm 獲取身份驗(yàn)證信息，如果沒(méi)有返回 / 拋出異常表示身份驗(yàn)證失敗了。此處可以配置多個(gè) Realm，將按照相應(yīng)的順序及策略進(jìn)行訪問(wèn)。代碼實(shí)現(xiàn)：/** * */package com.sys.shiro;import javax.annotation.Resource;import org.apache.shiro.SecurityUtils;import org.apache.shiro.authc.AccountException;import org.apache.shiro.authc.AuthenticationInfo;import org.apache.shiro.authc.AuthenticationToken;import org.apache.shiro.authc.DisabledAccountException;import org.apache.shiro.authc.SimpleAuthenticationInfo;import org.apache.shiro.authz.AuthorizationInfo;import org.apache.shiro.authz.SimpleAuthorizationInfo;import org.apache.shiro.realm.AuthorizingRealm;import org.apache.shiro.subject.PrincipalCollection;import org.apache.shiro.subject.SimplePrincipalCollection;import org.apache.shiro.util.ByteSource;import com.sys.pojo.AdminUser;import com.sys.service.AdminUserService;/** * @ClassName: MyRealm * @Description: shiro 認(rèn)證 + 授權(quán) 重寫 */public class MyRealm extends AuthorizingRealm { @Resource AdminUserService adminUserService; /* (non-Javadoc) * @see org.apache.shiro.realm.AuthorizingRealm#doGetAuthorizationInfo(org.apache.shiro.subject.PrincipalCollection) */ /** * 授權(quán)Realm */ @Override protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) { String account = (String)principals.getPrimaryPrincipal(); AdminUser pojo = new AdminUser(); pojo.setAccount(account); Long userId = adminUserService.selectOne(pojo).getId(); SimpleAuthorizationInfo info = new SimpleAuthorizationInfo(); /**根據(jù)用戶ID查詢角色（role），放入到Authorization里.*/ info.setRoles(adminUserService.findRoleByUserId(userId)); /**根據(jù)用戶ID查詢權(quán)限（permission），放入到Authorization里.*/ info.setStringPermissions(adminUserService.findPermissionByUserId(userId)); return info; } /* (non-Javadoc) * @see org.apache.shiro.realm.AuthenticatingRealm#doGetAuthenticationInfo(org.apache.shiro.authc.AuthenticationToken) */ /** * 登錄認(rèn)證Realm */ @Override protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken token) { String username = (String)token.getPrincipal(); String password = new String((char[])token.getCredentials()); AdminUser user = adminUserService.login(username, password); if(null==user){ throw new AccountException("帳號(hào)或密碼不正確！"); } if(user.getIsDisabled()){ throw new DisabledAccountException("帳號(hào)已經(jīng)禁止登錄！"); } //**密碼加鹽**交給AuthenticatingRealm使用CredentialsMatcher進(jìn)行密碼匹配 return new SimpleAuthenticationInfo(user.getAccount(),user.getPassword(),ByteSource.Util.bytes("3.14159"), getName()); } /** * 清空當(dāng)前用戶權(quán)限信息 */ public void clearCachedAuthorizationInfo() { PrincipalCollection principalCollection = SecurityUtils.getSubject().getPrincipals(); SimplePrincipalCollection principals = new SimplePrincipalCollection( principalCollection, getName()); super.clearCachedAuthorizationInfo(principals); } /** * 指定principalCollection 清除 */ public void clearCachedAuthorizationInfo(PrincipalCollection principalCollection) { SimplePrincipalCollection principals = new SimplePrincipalCollection( principalCollection, getName()); super.clearCachedAuthorizationInfo(principals); } }shiro的配置：spring-shiro.xml<?xml version="1.0" encoding="UTF-8"?><beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:aop="http://www.springframework.org/schema/aop" xmlns:tx="http://www.springframework.org/schema/tx" xmlns:util="http://www.springframework.org/schema/util" xmlns:context="http://www.springframework.org/schema/context" xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx.xsd http://www.springframework.org/schema/aop http://www.springframework.org/schema/aop/spring-aop.xsd http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd"> <bean id="shiroFilter" class="org.apache.shiro.spring.web.ShiroFilterFactoryBean">  <property name="securityManager" ref="securityManager"></property>  <property name="loginUrl" value="/login"></property>  <property name="unauthorizedUrl" value="/unauthorized.jsp"></property>  <property name="filters"> <map>  <entry key="kickout" value-ref="KickoutSessionControlFilter"/> </map> </property>   <property name="filterChainDefinitions"> <value> /js/**=anon /css/**=anon /images/**=anon /skin/**=anon /lib/**=anon /nodel/**=anon /WEB-INF/jsp/**=anon /adminUserLogin/**=anon /**/submitLogin.do=anon /**=user,kickout </value> </property> </bean>  <bean id="lifecycleBeanPostProcessor" class="org.apache.shiro.spring.LifecycleBeanPostProcessor" />  <bean id="securityManager" class="org.apache.shiro.web.mgt.DefaultWebSecurityManager"> <property name="realm" ref="MyRealm"/> <property name="rememberMeManager" ref="rememberMeManager"/> </bean> <bean id="MyRealm" class="com.sys.shiro.MyRealm" > <property name="cachingEnabled" value="false"/> </bean>  <bean class="org.springframework.beans.factory.config.MethodInvokingFactoryBean"> <property name="staticMethod" value="org.apache.shiro.SecurityUtils.setSecurityManager"/> <property name="arguments" ref="securityManager"/> </bean>  <bean id="sessionIdCookie" class="org.apache.shiro.web.servlet.SimpleCookie"> <constructor-arg value="rememberMe"/> <property name="httpOnly" value="true"/> <property name="maxAge" value="-1"/> </bean>  <bean id="rememberMeCookie" class="org.apache.shiro.web.servlet.SimpleCookie"> <constructor-arg value="rememberMe"/> <property name="httpOnly" value="true"/>  <property name="maxAge" value="604800"/> </bean>  <bean id="rememberMeManager" class="org.apache.shiro.web.mgt.CookieRememberMeManager">  <property name="cipherKey" value="#{T(org.apache.shiro.codec.Base64).decode('3AvVhmFLUs0KTA3Kprsdag==')}"/> <property name="cookie" ref="rememberMeCookie"/> </bean>  <bean id="RememberMeFilter" class="com.sys.shiro.RememberMeFilter" />    <bean id="KickoutSessionControlFilter" class="com.sys.shiro.KickoutSessionControlFilter"> </bean> </beans>5.登錄即密碼失敗多次后鎖定/** * */package com.sys.controller;import java.util.LinkedHashMap;import java.util.Map;import javax.annotation.Resource;import javax.servlet.http.HttpServletRequest;import org.apache.logging.log4j.LogManager;import org.apache.logging.log4j.Logger;import org.apache.shiro.SecurityUtils;import org.apache.shiro.authc.AccountException;import org.apache.shiro.authc.AuthenticationException;import org.apache.shiro.authc.DisabledAccountException;import org.apache.shiro.authc.ExcessiveAttemptsException;import org.apache.shiro.authc.UsernamePasswordToken;import org.apache.shiro.subject.Subject;import org.springframework.stereotype.Controller;import org.springframework.web.bind.annotation.RequestMapping;import org.springframework.web.bind.annotation.RequestMethod;import org.springframework.web.bind.annotation.ResponseBody;import com.sys.pojo.AdminUser;import com.sys.service.AdminUserService;import com.sys.common.JedisUtils;import com.sys.shiro.ShiroUtils;/** * @ClassName: LoginController * @Description: 登錄*/@Controllerpublic class LoginController{ protected final static Logger logger = LogManager.getLogger(LoginController.class); protected Map<String, Object> resultMap = new LinkedHashMap<String, Object>(); @Resource AdminUserService adminUserService; /** * @Description: 登錄認(rèn)證 * @param um 登錄賬號(hào) * @param pw 登錄密碼 * @param rememberMe 記住我 * @param request * @return * @throws * @author lao * @Date 2018年1月15日下午12:24:19 * @version 1.00 */ @RequestMapping(value="/submitLogin.do",method=RequestMethod.POST) @ResponseBody public Map<String,Object> submitLogin(String um,String pw,boolean rememberMe,HttpServletRequest request){ Subject subject = SecurityUtils.getSubject(); UsernamePasswordToken token = new UsernamePasswordToken(um,ShiroUtils.getStrByMD5(pw)); try{ token.setRememberMe(rememberMe); subject.login(token); JedisUtils.del(um); logger.info("------------------身份認(rèn)證成功-------------------"); resultMap.put("status", 200); resultMap.put("message", "登錄成功！"); } catch (DisabledAccountException dax) { logger.info("用戶名為:" + um + " 用戶已經(jīng)被禁用！"); resultMap.put("status", 500); resultMap.put("message", "帳號(hào)已被禁用！"); } catch (ExcessiveAttemptsException eae) { logger.info("用戶名為:" + um + " 用戶登錄次數(shù)過(guò)多，有暴力破解的嫌疑！"); resultMap.put("status", 500); resultMap.put("message", "登錄次數(shù)過(guò)多！"); } catch (AccountException ae) { logger.info("用戶名為:" + token.getPrincipal() + " 帳號(hào)或密碼錯(cuò)誤！"); String excessiveInfo = ExcessiveAttemptsInfo(um); if(null!=excessiveInfo){ resultMap.put("status", 500); resultMap.p

06-17

2017

有關(guān)Servlet和JSP的梳理

大二第一學(xué)期的時(shí)候有學(xué)JSP的課，但是因?yàn)樵陂_學(xué)之前做過(guò)JSP的小項(xiàng)目，所以一個(gè)學(xué)期的課也沒(méi)聽(tīng)，直到期末考試成績(jī)出來(lái)了，才回想JSP的內(nèi)容還有多少記得，沒(méi)想到模模糊糊也記不起多少，趕緊回頭學(xué)回來(lái)。接下來(lái)是關(guān)于Servlet和JSP的梳理。-------------------------------------------------------------------------------------------------------------------------------------------------　　Servlet是一個(gè)Java程序，一個(gè)Servlet應(yīng)用有一個(gè)或多個(gè)Servlet程序，而且JSP頁(yè)面也會(huì)被轉(zhuǎn)換和編譯成Servlet程序?！　ervlet應(yīng)用無(wú)法獨(dú)立運(yùn)行，必須運(yùn)行在Servlet容器中。Servlet容器將用戶的請(qǐng)求傳遞給Servlet應(yīng)用，并將結(jié)果返回給用戶。由于大部分Servlet應(yīng)用都包含多個(gè)JSP頁(yè)面，因此更準(zhǔn)確地說(shuō)是“Servlet/JSP應(yīng)用”?！　∑渲?，Servlet API是開發(fā)Servlet的主要技術(shù)。而Servlet API有以下4個(gè)Java包：Java包包含的內(nèi)容javax.servlet定義Servlet和Servlet容器之間契約的類和接口javax.servlet.http定義HTTP Servlet和Servlet容器之間契約的類和接口javax.servlet.annotation標(biāo)注Servlet、Filter、Listener的標(biāo)注。它還被標(biāo)注原件定義元數(shù)據(jù)javax.servlet.descriptor包含提供程序化登陸web應(yīng)用程序的配置信息的類型?！　ervlet技術(shù)的核心是Servlet，它是所有Servlet類必須直接或間接實(shí)現(xiàn)的一個(gè)接口，而Servlet接口定義了Servlet與Servlet容器之間的契約。這個(gè)契約歸結(jié)起來(lái)就是，Servlet容器將Servlet類載入內(nèi)存，并在Servlet實(shí)例上調(diào)用具體的方法。當(dāng)用戶的請(qǐng)求使得Servlet容器調(diào)用Servlet的Service方法，會(huì)傳入一個(gè)ServletRequest實(shí)例和一個(gè)ServletResponse實(shí)例，其中，ServletRequest中封裝了當(dāng)前的HTTP請(qǐng)求，而ServletResponse表示當(dāng)前用戶的HTTP響應(yīng)。對(duì)于每一個(gè)應(yīng)用程序，Servlet容器還會(huì)創(chuàng)建一個(gè)ServletContext實(shí)例，這個(gè)對(duì)象中封裝了上下文(應(yīng)用程序)的環(huán)境詳情。每個(gè)上下文只有一個(gè)ServletContext，而且每個(gè)Servlet實(shí)例都有一個(gè)配置的ServletConfig。　Servlet的生命周期方法：　　Servlet容器的生命周期方法作用init該方法在Servlet第一次被請(qǐng)求的時(shí)候，Servlet就會(huì)調(diào)用這個(gè)方法，而后不再被調(diào)用，所以可以用這個(gè)方法進(jìn)行初始化工作。調(diào)用這個(gè)方法時(shí)，Servlet容器會(huì)傳入一個(gè)ServletConfig。Service每當(dāng)請(qǐng)求Servlet時(shí)，Servlet容器就會(huì)調(diào)用這個(gè)方法。第一次請(qǐng)求Servlet時(shí)，Servlet容器調(diào)用init方法和Service方法。后續(xù)的請(qǐng)求將只調(diào)用Service方法。destroy當(dāng)要銷毀Servlet時(shí)，Servlet容器就會(huì)調(diào)用這個(gè)方法。一般會(huì)在這個(gè)方法中編寫清除代碼?！　≡诮榻B一個(gè)Servlet中另外兩個(gè)非生命周期的方法：Servlet容器的非生命周期方法作用getServletInfo這個(gè)方法會(huì)返回Servlet的描述getServletConfig這個(gè)方法會(huì)返回由Servlet容器傳給init方法的ServletConfig。但是為了讓getServletConfig返回一個(gè)非null值，必須將傳給init方法的ServletConfig賦給一個(gè)類級(jí)變量。------------------------------------------------------------------------------------------------------------------------------------------------- 　　接下來(lái)是Servlet的各類接口：　　ServletRequest　接口說(shuō)明ServletRequest對(duì)于每一個(gè)HTTP請(qǐng)求，Servlet容器都會(huì)創(chuàng)建一個(gè)ServletRequest實(shí)例，并將它傳給Servlet的Service方法。ServletRequest封裝了關(guān)于這個(gè)請(qǐng)求的信息?！　〕Ｓ玫姆椒ㄓ校骸　　　》椒ㄕf(shuō)明public int getContentLength()返回請(qǐng)求主體的字節(jié)數(shù)。public java.lang.String getContentType()返回請(qǐng)求主體的MIME類型。public java.lang.String getParameter(java.lang.String name)返回指定請(qǐng)求參數(shù)的值public java.lang.String getProtocol()返回這個(gè)HTTP請(qǐng)求的協(xié)議名稱和版本　　ServletResponse接口說(shuō)明ServletResponse該接口表示一個(gè)Servlet響應(yīng)。在調(diào)用Servlet的Service方法前，Servlet容器首先創(chuàng)建一個(gè)ServletResponse，并將它作為第二個(gè)參數(shù)傳給Service方法。ServletResponse隱藏了向?yàn)g覽器發(fā)送響應(yīng)的復(fù)雜過(guò)程?！　〕Ｓ玫姆椒ǎ骸》椒ㄕf(shuō)明getWriter()返回了一個(gè)可以向客戶端發(fā)送文本的java.io.PrintWriter。默認(rèn)情況下，PrintWriter對(duì)象使用ISO-8859-1編碼。setContentType(“type”)設(shè)置響應(yīng)的內(nèi)容類型，并將”text/html”作為一個(gè)參數(shù)傳入。如果沒(méi)有設(shè)置相應(yīng)內(nèi)容類型，有些瀏覽器就會(huì)將HTML標(biāo)簽顯示為普通文本?！　ervletConfig　　接口說(shuō)明ServletConfig用于存儲(chǔ)關(guān)于Servlet的配置信息。當(dāng)Servlet容器初始化Servlet時(shí)，Servlet容器會(huì)給Servlet的init()方法傳入一個(gè)ServletConfig。ServletConfig封裝可以通過(guò)@WebServlet或描述符傳給Servlet的配置信息。　　　常用的方法：　方法說(shuō)明java.lang.String getInitParameter(java,lang.String name)為了從Servlet內(nèi)部獲取到初始參數(shù)的值，要在Servlet容器傳給Servlet的init方法的ServletConfig中調(diào)用getInitParameter方法。java.util.Enumration<java.lang.String> getInitParameterNames()返回所有初始參數(shù)名稱的一個(gè)Enumeration。String contactName = servletConfig.getInitParameter(“contactName”)獲取contactName參數(shù)值　　ServletContext接口說(shuō)明ServletContext每個(gè)Web應(yīng)用程序只有一個(gè)上下文，所以ServletContext可以存儲(chǔ)這個(gè)上下文，并且ServletContext還可以共享從應(yīng)用程序中的所有資料處訪問(wèn)到的信息，并且可以動(dòng)態(tài)注冊(cè)Web對(duì)象，而且是用ServletContext內(nèi)部的Map保存。　　常用的方法：　方法說(shuō)明getServletContext().getInitParameter(String name)獲取在項(xiàng)目下的web.xml中設(shè)置context的初始化參數(shù)this.getServletContext().log(“測(cè)試”)在web.xml文件中，使用logger元素來(lái)設(shè)置日志文件getAttribute(String name)/get AttributeNames()獲取ServletContext中的屬性setAttribute(String name, Object object)設(shè)置ServletContext中的屬性removeAttribute(String name)移除ServletContext中的屬性　　GenericServlet接口說(shuō)明GenericServletGenericServlet實(shí)現(xiàn)了Servlet和ServletConfig接口。將init方法中的ServletConfig賦給一個(gè)類級(jí)變量，以便可以通過(guò)getServletConfig獲取，為Servlet接口中的所有方法提供默認(rèn)的實(shí)現(xiàn)，而且提供包括ServletConfig中的方法?！　ttp Servlets　　　　接口說(shuō)明HttpServletHttpServlet類覆蓋了javax.servlet.GenericServlet類。使用HttpServlet時(shí)，還要借助分別代表Servlet請(qǐng)求和Servlet響應(yīng)的HttpServletRequest和HttpServletResponse對(duì)象。而HttpServlet與GenericServlet的差別在于，HttpServlet覆蓋的是doGet或者doPost方法，而不是Service方法，而且使用的是HttpServletRequest和HttpServletResponse，而不是ServletRequest和ServletResponse。HttpServletRequest表示HTTP環(huán)境中的Servlet請(qǐng)求HttpServletResponse表示HTTP環(huán)境中的Servlet響應(yīng)　　各個(gè)接口常用的方法如下：　　接口方法說(shuō)明 HttpServletRequestjava.lang.String getContextPath()返回表示請(qǐng)求上下文的請(qǐng)求URI部分。 HttpServletRequestCookie[] getCookies()返回一個(gè)Cookie對(duì)象的數(shù)組。 HttpServletRequestjava.lang.String getHeader(java.lang.String name)返回指定HTTP標(biāo)題的值。 HttpServletRequestjava.lang.String getMethod()返回生成這個(gè)請(qǐng)求的HTTP方法名稱 HttpServletRequestjava.lang.String getQueryString()返回請(qǐng)求URL中的查詢字符串。 HttpServletRequestHttpSession getSession()返回與這個(gè)請(qǐng)求相關(guān)的會(huì)話對(duì)象。如果沒(méi)有，將創(chuàng)建一個(gè)新的會(huì)話對(duì)象。 HttpServletRequestHttpSession getSession(Boolean create)返回與這個(gè)請(qǐng)求相關(guān)的繪畫對(duì)象，如果有，并且create參數(shù)為True，將創(chuàng)建一個(gè)新的會(huì)話對(duì)象。 HttpServletResponsevoid addCookie(Cookie cookie)給這個(gè)響應(yīng)對(duì)象添加一個(gè)cookie。 HttpServletResponsevoid addHeader(java.lang.String name, java.lang.String value)給這個(gè)響應(yīng)對(duì)象添加一個(gè)header。 HttpServletResponsevoid sendRedirect(java.lang.String location)發(fā)送一條響應(yīng)碼，將瀏覽器跳轉(zhuǎn)到指定的位置。-------------------------------------------------------------------------------------------------------------------------------------------------　　當(dāng)用戶提交HTML表單時(shí)，在表單元素中輸入的值就會(huì)被當(dāng)作請(qǐng)求參數(shù)發(fā)送到服務(wù)器。HTML輸入域(文本域、隱藏域或者密碼域)或者文本區(qū)的值，會(huì)被當(dāng)作字符串發(fā)送到服務(wù)器?？盏妮斎胗蚧蛘呶谋緟^(qū)會(huì)發(fā)送空的字符串?！　“鄠€(gè)值的select元素發(fā)出一個(gè)字符串?dāng)?shù)組，可以通過(guò)ServletRequest.getParameterValues進(jìn)行處理。　　核查過(guò)的復(fù)選框會(huì)發(fā)送字符串"on"到服務(wù)器，未經(jīng)核查的復(fù)選框則不向服務(wù)器發(fā)送任何內(nèi)容，ServletRequest.getParameter(fieldName)返回null?！　芜x框?qū)⒈贿x中按鈕的值發(fā)送到服務(wù)器。如果沒(méi)有選擇任何按鈕，將沒(méi)有任何內(nèi)容被發(fā)送到服務(wù)器，并且ServletRequest.getParameter(fieldName)返會(huì)null?！　∪绻粋€(gè)表單中包含多個(gè)輸入同名的元素，那么所有值都會(huì)被提交，并且必須利用ServletRequest.getParameterValues來(lái)獲取它們。ServletRequest.getParameter將只返回最后一個(gè)值。

辽阳剐什教育咨询有限公司

新聞中心