org.frameworkset.web.interceptor

Class AuthenticateFilter

java.lang.Object

org.frameworkset.web.token.TokenFilter

org.frameworkset.web.interceptor.AuthenticateFilter

All Implemented Interfaces:

javax.servlet.Filter

Direct Known Subclasses:

AuthenticateInterceptor

public abstract class AuthenticateFilter
extends TokenFilter

AuthenticateFilter.java

Description:

bboss workgroup

Copyright (c) 2009

Field Summary

Fields

Modifier and Type	Field and Description
static java.lang.String	accesscontrol_check_result
static java.lang.String	accesscontrol_check_result_fail
static java.lang.String	accesscontrol_check_result_free
static java.lang.String	accesscontrol_check_result_ok
static java.lang.String	accesscontrol_permissioncheck_result
static java.lang.String	accesscontrol_permissioncheck_result_fail
static java.lang.String	accesscontrol_permissioncheck_result_ok
protected java.lang.String	authorfailedurl
protected boolean	contextRelative
protected java.lang.String	directtype redirect forward include
protected boolean	enablePermissionCheck
protected java.lang.String	encodingScheme
protected boolean	exposeModelAttributes
protected boolean	failedback 是否启用认证失败重新登录后仍然回到请求页面
static java.lang.String	failedbackpath_parametername
protected java.lang.String[]	failedbackurlpattern 指定需要failedback的url地址模式，只有符合相关的模式，这个地址才能被failedback
static java.lang.String	FORWARD
protected boolean	http10Compatible
static java.lang.String	INCLUDE
protected boolean	isforward
protected boolean	isinclude
protected org.frameworkset.util.PathMatcher	pathMatcher
protected java.util.List<java.lang.String>	patternsExclude
protected java.util.List<java.lang.String>	patternsInclude
protected java.lang.String	permissiondirecttype redirect forward include 权限检测定向方法暂时不用，和认证检测公用directtype属性
protected java.util.List<java.lang.String>	permissionExclude
protected java.util.List<java.lang.String>	permissionInclude
protected boolean	preventDispatchLoop
static java.lang.String	REDIRECT
static java.lang.String	referpath_parametername
protected boolean	sign 是否对接收到的token进行签名解析处理
protected org.frameworkset.web.util.UrlPathHelper	urlPathHelper

Fields inherited from class org.frameworkset.web.token.TokenFilter

redirectpath

Constructor Summary

Constructors

Constructor and Description
AuthenticateFilter()

Method Summary

Modifier and Type	Method and Description
protected boolean	_permissionHandle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)
protected boolean	_preHandle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)
protected abstract boolean	check(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)
protected abstract boolean	checkPermission(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta, java.lang.String uri)
void	destroy() Filter接口实现开始
void	doFilter(javax.servlet.ServletRequest arg0, javax.servlet.ServletResponse arg1, javax.servlet.FilterChain arg2)
java.lang.String	getAuthorfailedurl()
java.lang.String	getDirecttype()
java.lang.String[]	getFailedbackurlpattern()
protected java.lang.String	getPathUrl(javax.servlet.http.HttpServletRequest request)
java.util.List<java.lang.String>	getPatternsExclude()
java.util.List<java.lang.String>	getPatternsInclude()
java.lang.String	getPermissiondirecttype()
java.util.List<java.lang.String>	getPermissionExclude()
java.util.List<java.lang.String>	getPermissionInclude()
void	init(javax.servlet.FilterConfig arg0) tokenstore 指定令牌存储机制，目前提供两种机制： mem：将令牌直接存储在内存空间中 session：将令牌存储在session中 默认存储在session中
boolean	isEnablePermissionCheck()
boolean	isFailedback()
protected boolean	isforward()
boolean	isHttp10Compatible()
boolean	isPreventDispatchLoop()
static void	main(java.lang.String[] args)
protected boolean	needCheck(java.lang.String path)
protected boolean	needCheck(java.lang.String path, java.util.List<java.lang.String> patternsExclude, java.util.List<java.lang.String> patternsInclude)
boolean	preHandle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)
protected java.lang.String	prepareForRendering(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, java.lang.String uripathwithnocontextpath)
protected java.lang.String	prepareForRendering(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, java.lang.String uripathwithnocontextpath, java.lang.String renderpath)
protected java.lang.String	preparePermissionForRendering(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, java.lang.String uripathwithnocontextpath)
boolean	prepermissionHandle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)
void	setAuthorfailedurl(java.lang.String authorfailedurl)
void	setDirecttype(java.lang.String directtype)
void	setEnablePermissionCheck(boolean enablePermissionCheck)
void	setFailedback(boolean failedback)
void	setFailedbackurlpattern(java.lang.String failedbackurlpattern_)
void	setHttp10Compatible(boolean http10Compatible)
void	setPatternsExclude(java.util.List<java.lang.String> patternsExclude)
void	setPatternsInclude(java.util.List<java.lang.String> patternsInclude)
void	setPermissiondirecttype(java.lang.String permissiondirecttype)
void	setPermissionExclude(java.util.List<java.lang.String> permissionExclude)
void	setPermissionInclude(java.util.List<java.lang.String> permissionInclude)
void	setPreventDispatchLoop(boolean preventDispatchLoop)

Methods inherited from class org.frameworkset.web.token.TokenFilter

appendDTokenToTargetURL, assertDToken, checkTokenExist, doDTokencheck, doTicketcheck, firstRequest, getRedirecturl, isloopredirect, sendRedirect, sendRedirect, sendRedirect403, setRedirecturl

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

accesscontrol_check_result

public static final java.lang.String accesscontrol_check_result

See Also:

Constant Field Values

accesscontrol_check_result_ok

public static final java.lang.String accesscontrol_check_result_ok

See Also:

Constant Field Values

accesscontrol_check_result_free

public static final java.lang.String accesscontrol_check_result_free

See Also:

Constant Field Values

accesscontrol_check_result_fail

public static final java.lang.String accesscontrol_check_result_fail

See Also:

Constant Field Values

referpath_parametername

public static final java.lang.String referpath_parametername

See Also:

Constant Field Values

failedbackpath_parametername

public static final java.lang.String failedbackpath_parametername

See Also:

Constant Field Values

accesscontrol_permissioncheck_result

public static final java.lang.String accesscontrol_permissioncheck_result

See Also:

Constant Field Values

accesscontrol_permissioncheck_result_ok

public static final java.lang.String accesscontrol_permissioncheck_result_ok

See Also:

Constant Field Values

accesscontrol_permissioncheck_result_fail

public static final java.lang.String accesscontrol_permissioncheck_result_fail

See Also:

Constant Field Values

preventDispatchLoop

protected boolean preventDispatchLoop

http10Compatible

protected boolean http10Compatible

REDIRECT

public static java.lang.String REDIRECT

FORWARD

public static java.lang.String FORWARD

INCLUDE

public static java.lang.String INCLUDE

isforward

protected boolean isforward

isinclude

protected boolean isinclude

sign

protected boolean sign

是否对接收到的token进行签名解析处理

directtype

protected java.lang.String directtype

redirect forward include

contextRelative

protected boolean contextRelative

exposeModelAttributes

protected boolean exposeModelAttributes

patternsInclude

protected java.util.List<java.lang.String> patternsInclude

patternsExclude

protected java.util.List<java.lang.String> patternsExclude

urlPathHelper

protected org.frameworkset.web.util.UrlPathHelper urlPathHelper

enablePermissionCheck

protected boolean enablePermissionCheck

permissionExclude

protected java.util.List<java.lang.String> permissionExclude

permissionInclude

protected java.util.List<java.lang.String> permissionInclude

authorfailedurl

protected java.lang.String authorfailedurl

permissiondirecttype

protected java.lang.String permissiondirecttype

redirect forward include 权限检测定向方法暂时不用，和认证检测公用directtype属性

failedback

protected boolean failedback

是否启用认证失败重新登录后仍然回到请求页面

failedbackurlpattern

protected java.lang.String[] failedbackurlpattern

指定需要failedback的url地址模式，只有符合相关的模式，这个地址才能被failedback

pathMatcher

protected org.frameworkset.util.PathMatcher pathMatcher

encodingScheme

protected java.lang.String encodingScheme

Constructor Detail

AuthenticateFilter

public AuthenticateFilter()

Method Detail

getPermissiondirecttype

public java.lang.String getPermissiondirecttype()

setPermissiondirecttype

public void setPermissiondirecttype(java.lang.String permissiondirecttype)

needCheck

protected boolean needCheck(java.lang.String path)

needCheck

protected boolean needCheck(java.lang.String path,
                            java.util.List<java.lang.String> patternsExclude,
                            java.util.List<java.lang.String> patternsInclude)

prepareForRendering

protected java.lang.String prepareForRendering(javax.servlet.http.HttpServletRequest request,
                                               javax.servlet.http.HttpServletResponse response,
                                               java.lang.String uripathwithnocontextpath)
                                        throws java.lang.Exception

Throws:

java.lang.Exception

preparePermissionForRendering

protected java.lang.String preparePermissionForRendering(javax.servlet.http.HttpServletRequest request,
                                                         javax.servlet.http.HttpServletResponse response,
                                                         java.lang.String uripathwithnocontextpath)
                                                  throws java.lang.Exception

Throws:

java.lang.Exception

prepareForRendering

protected java.lang.String prepareForRendering(javax.servlet.http.HttpServletRequest request,
                                               javax.servlet.http.HttpServletResponse response,
                                               java.lang.String uripathwithnocontextpath,
                                               java.lang.String renderpath)
                                        throws java.lang.Exception

Throws:

java.lang.Exception

check

protected abstract boolean check(javax.servlet.http.HttpServletRequest request,
                                 javax.servlet.http.HttpServletResponse response,
                                 org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)

checkPermission

protected abstract boolean checkPermission(javax.servlet.http.HttpServletRequest request,
                                           javax.servlet.http.HttpServletResponse response,
                                           org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta,
                                           java.lang.String uri)

getPathUrl

protected java.lang.String getPathUrl(javax.servlet.http.HttpServletRequest request)

_preHandle

protected boolean _preHandle(javax.servlet.http.HttpServletRequest request,
                             javax.servlet.http.HttpServletResponse response,
                             org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)
                      throws java.lang.Exception

Throws:

java.lang.Exception

_permissionHandle

protected boolean _permissionHandle(javax.servlet.http.HttpServletRequest request,
                                    javax.servlet.http.HttpServletResponse response,
                                    org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)
                             throws java.lang.Exception

Throws:

java.lang.Exception

preHandle

public boolean preHandle(javax.servlet.http.HttpServletRequest request,
                         javax.servlet.http.HttpServletResponse response,
                         org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)
                  throws java.lang.Exception

Throws:

java.lang.Exception

prepermissionHandle

public boolean prepermissionHandle(javax.servlet.http.HttpServletRequest request,
                                   javax.servlet.http.HttpServletResponse response,
                                   org.frameworkset.web.servlet.handler.HandlerMeta handlerMeta)
                            throws java.lang.Exception

Throws:

java.lang.Exception

isforward

protected boolean isforward()

main

public static void main(java.lang.String[] args)

Parameters:

args -

isPreventDispatchLoop

public boolean isPreventDispatchLoop()

setPreventDispatchLoop

public void setPreventDispatchLoop(boolean preventDispatchLoop)

isHttp10Compatible

public boolean isHttp10Compatible()

setHttp10Compatible

public void setHttp10Compatible(boolean http10Compatible)

getPatternsInclude

public java.util.List<java.lang.String> getPatternsInclude()

Returns:

the patternsInclude

setPatternsInclude

public void setPatternsInclude(java.util.List<java.lang.String> patternsInclude)

Parameters:

patternsInclude - the patternsInclude to set

getPatternsExclude

public java.util.List<java.lang.String> getPatternsExclude()

Returns:

the patternsExclude

setPatternsExclude

public void setPatternsExclude(java.util.List<java.lang.String> patternsExclude)

Parameters:

patternsExclude - the patternsExclude to set

getDirecttype

public java.lang.String getDirecttype()

setDirecttype

public void setDirecttype(java.lang.String directtype)

destroy

public void destroy()

Filter接口实现开始

Specified by:

destroy in interface javax.servlet.Filter

Overrides:

destroy in class TokenFilter

doFilter

public void doFilter(javax.servlet.ServletRequest arg0,
                     javax.servlet.ServletResponse arg1,
                     javax.servlet.FilterChain arg2)
              throws java.io.IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Overrides:

doFilter in class TokenFilter

Throws:

java.io.IOException

javax.servlet.ServletException

init

public void init(javax.servlet.FilterConfig arg0)
          throws javax.servlet.ServletException

Description copied from class: TokenFilter

tokenstore 指定令牌存储机制，目前提供两种机制： mem：将令牌直接存储在内存空间中 session：将令牌存储在session中 默认存储在session中

Specified by:

init in interface javax.servlet.Filter

Overrides:

init in class TokenFilter

Throws:

javax.servlet.ServletException

isEnablePermissionCheck

public boolean isEnablePermissionCheck()

setEnablePermissionCheck

public void setEnablePermissionCheck(boolean enablePermissionCheck)

getPermissionExclude

public java.util.List<java.lang.String> getPermissionExclude()

setPermissionExclude

public void setPermissionExclude(java.util.List<java.lang.String> permissionExclude)

getPermissionInclude

public java.util.List<java.lang.String> getPermissionInclude()

setPermissionInclude

public void setPermissionInclude(java.util.List<java.lang.String> permissionInclude)

getAuthorfailedurl

public java.lang.String getAuthorfailedurl()

setAuthorfailedurl

public void setAuthorfailedurl(java.lang.String authorfailedurl)

isFailedback

public boolean isFailedback()

setFailedback

public void setFailedback(boolean failedback)

getFailedbackurlpattern

public java.lang.String[] getFailedbackurlpattern()

setFailedbackurlpattern

public void setFailedbackurlpattern(java.lang.String failedbackurlpattern_)