src/com/cms/intercept/SecurityInterceptor.java

微信扫码关注公众号，代码整理好后第一时间通知你。

package com.cms.intercept;

import java.util.List;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

import com.cms.entity.Auth;
import com.cms.entity.User;
import com.cms.utils.StrUtil;
/**
 * 拦截器
 * 权限验证
 * data access ob
 *data tra  ob
 */
public class SecurityInterceptor implements HandlerInterceptor {

	@Override
	public boolean preHandle(HttpServletRequest request,
			HttpServletResponse response, Object handler) throws Exception {
		
		HttpSession session = request.getSession();
		User user = (User) session.getAttribute(StrUtil.USER);
        if (user == null) {
            response.sendRedirect(request.getContextPath()+"/");
            return false;
        } else {
        	String url = request.getRequestURI();
        	List<Auth> list = user.getUrlList();
        	for (Auth auth: list) {
        		if (url.indexOf(auth.getUrl()) >= 0) return true;
        	}
        	response.sendRedirect(request.getContextPath()+"/404");
        }
        return false;
	}

	@Override
	public void postHandle(HttpServletRequest request,
			HttpServletResponse response, Object handler,
			ModelAndView modelAndView) throws Exception {
		// TODO Auto-generated method stub
	}

	@Override
	public void afterCompletion(HttpServletRequest request,
			HttpServletResponse response, Object handler, Exception ex)
			throws Exception {
		// TODO Auto-generated method stub
	}

}