超市訂單管理系統（4）-用戶注銷和權限攔截

1.注銷功能：移除session，返回登錄頁面即可

　　（1）編寫移除注銷功能的servlet

package com.xiaoma.servlet.user;

import com.xiaoma.util.Constants;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class LogoutServlet extends HttpServlet {
    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        //移除session
        req.getSession().removeAttribute(Constants.USER_SESSION);
        //重定向到登錄頁面
        resp.sendRedirect(req.getContextPath()+"/login.jsp");
    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        doGet(req, resp);
    }
}

　　（2）在web.xml中注冊我們的servlet，注意這里的url-patten是走的前端的jsp/common/head.jsp下的退出走的那個url

 

 

 

 

 

 

 

 

 

 

 

　　　　　　　　　　　　　　　　　　　　　

　　（3）效果圖

 ----------------------------------------------------------------------------------------------------------------------------------------------------------------

2. 登錄權限攔截

 　　（1）在filter文件夾下創建一個SysFilter類文件，用來進行登錄攔截，所需的error.jsp頁面鏈接：https://pan.baidu.com/s/1UKtUbRBphFyIlk6RU9aR9g提取碼：5210

package com.xiaoma.filter;

import com.xiaoma.pojo.User;
import com.xiaoma.util.Constants;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;


public class SysFilter implements Filter {

    @Override
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    @Override
    public void doFilter(ServletRequest req, ServletResponse resp, FilterChain filterChain) throws IOException, ServletException {
        //request用來獲取session，request用來重定向
        HttpServletRequest request=(HttpServletRequest) req;
        HttpServletResponse response=(HttpServletResponse) resp;

        //獲取session
        User user=(User) request.getSession().getAttribute(Constants.USER_SESSION);

        //用戶session為空，就說明用戶已經注銷了，或者未登錄
        if (user == null) {
            response.sendRedirect(((HttpServletRequest) req).getContextPath()+"/error.jsp");
        }else{
            filterChain.doFilter(req,resp);
        }
    }

    @Override
    public void destroy() {

    }
}

　　（2）在web.xml中注冊過濾器

    <!--注冊權限攔截過濾器-->
    <filter>
        <filter-name>SysFilter</filter-name>
        <filter-class>com.xiaoma.filter.SysFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>SysFilter</filter-name>
        <url-pattern>/jsp/*</url-pattern>
    </filter-mapping>

　　（3）運行測試效果