在java web 工程中實現登錄和安全驗證

登錄驗證代碼

String username = request.getParameter("username");//獲取用戶名
        String password = request.getParameter("password");//獲取密碼
         
        //如果用戶名user或密碼88888相同
        if(username.equals("user") && password.equals("88888")) {
            HttpSession session = request.getSession(true);//獲取會話
             
            //密碼正確則設置一個session
            session.setAttribute("user", new User(username,password));
            putCookie(request,response,username);//將request、response、username放到cookie里
//跳轉到console/admin.jsp
 request.getRequestDispatcher("console/admin.jsp").forward(request, response); 

}else { 
//否則跳轉到ERROR_VIEW
   request.getRequestDispatcher(ERROR_VIEW).forward(request, response); 
}

安全驗證代碼

//將/console/*", "/admin/*開頭的過濾掉
@WebFilter(urlPatterns = { "/console/*", "/admin/*" }, initParams = {
 //INDEX_VIEW的值為/index.jsp
        @WebInitParam(name = "INDEX_VIEW", value = "/index.jsp") })