Spring AOP验证用户权限 -

bjtdeyx

浏览: 169804 次
性别:
来自: 成都

最近访客更多访客>>

wxf0322

fengling4

james1110

xiangkun

博主相关

博客

微博

相册

留言

关于我

文章分类

社区版块

存档分类

Spring AOP验证用户权限

AOP Spring Access

1.新建一个Java普通工程，并需导入spring-aop.jar包； 
2.建UserInfo类： 
package aop.secure; 

public class UserInfo { 
    
    private String userName; 
    private String password; 
    
    public UserInfo(String userName, String password){ 
        this.userName = userName; 
        this.password = password; 
    } 

    public String getPassword() { 
        return password; 
    } 

    public String getUserName() { 
        return userName; 
    } 
} 

3.建安全信息提示类SecureBean： 
package aop.secure; 

public class SecureBean { 

    public void writeSecureMessage(){ 
        System.out.println("Every time I learn something new and it pushes some old stuff out of my brain."); 
    } 
} 

4.建切面类SecurityAdvice实现org.springframework.aop.MethodBeforeAdvice： 
package aop.secure; 

import java.lang.reflect.Method; 

import org.springframework.aop.MethodBeforeAdvice; 

public class SecurityAdvice implements MethodBeforeAdvice { 

    private SecurityManager securityManager; 
    
    public SecurityAdvice(){ 
        this.securityManager = new SecurityManager(); 
    } 

    public void before(Method method, Object[] args, Object target) throws Throwable { 
        UserInfo user = securityManager.getLoggedOnUser(); 
        if(user == null){ 
            System.out.println("No user authenticated."); 
            throw new SecurityException("Method name: " + method.getName()); 
        }else if("chigo".equals(user.getUserName()) && "chigo".equals(user.getPassword())){ 
            System.out.println("OKAY!"); 
        }else{ 
            System.out.println("Logged in user is: " + user.getUserName()); 
            throw new SecurityException("User " + user.getUserName() + " is not allowed access to method " + method.getName()); 
        } 
    } 

} 

5.建登陆与注销管理类SecurityManager： 
package aop.secure; 

public class SecurityManager { 
    
    private static ThreadLocal local = new ThreadLocal(); 
    
    public void login(String userName, String password){ 
        local.set(new UserInfo(userName,password)); 
    } 
    
    public void logout(){ 
        local.set(null); 
    } 
    
    public UserInfo getLoggedOnUser(){ 
        return (UserInfo)local.get(); 
    } 
} 

6.最后建测试类SecurityExample： 
package aop.secure; 

import org.springframework.aop.framework.ProxyFactory; 

public class SecurityExample { 

    private static SecureBean getSecureBean(){ 
        SecureBean sbean = new SecureBean(); 
        SecurityAdvice sadvice = new SecurityAdvice(); 
        ProxyFactory pf = new ProxyFactory(); 
        pf.setTarget(sbean); 
        pf.addAdvice(sadvice); 
        SecureBean factory = (SecureBean)pf.getProxy(); 
        return factory; 
    } 
    
    public static void main(String[] args) { 
        SecurityManager mgr = new SecurityManager(); 
        SecureBean sbean = getSecureBean(); 
        
        mgr.login("chigo","chigo"); 
        sbean.writeSecureMessage(); 
        mgr.logout(); 
        
        try{ 
            mgr.login("kkk",""); 
            sbean.writeSecureMessage(); 
        }catch(SecurityException ex){ 
            System.out.println("Exception caught: " + ex.getMessage()); 
        }finally{ 
            mgr.logout(); 
        } 
        
        try{ 
            sbean.writeSecureMessage(); 
        }catch(SecurityException ex){ 
            System.out.println("Exception caught: " + ex.getMessage()); 
        } 
    } 

}

附上100%完整的系统项目源码：

JSP图书馆管理系统：http://blog.sina.com.cn/s/blog_4b5bc0110101a97e.html

JSP酒店宾馆管理系统：http://blog.sina.com.cn/s/blog_4b5bc0110101a97m.html

JSP学生信息管理系统：http://blog.sina.com.cn/s/blog_4b5bc0110101a97r .html

JSP房屋出售租赁管理系统：http://blog.sina.com.cn/s/blog_4b5bc0110101a98c.html

J2EE酒店在线预订系统：http://blog.sina.com.cn/s/blog_4b5bc0110101a97v.html

SSH/J2EE人力资源管理系统：http://blog.sina.com.cn/s/blog_4b5bc01101019ztu.html

ssh2图书管理系统（图书馆管理系统）： http://blog.sina.com.cn/s/blog_4b5bc0110101adf0.html

毕业设计-JSP图书馆管理系统：http://blog.sina.com.cn/s/blog_4b5bc0110101a979.html

毕业设计-JSP酒店宾馆管理系统：http://blog.sina.com.cn/s/blog_4b5bc0110101a97z.html

毕业设计-JSP学生信息管理系统：http://blog.sina.com.cn/s/blog_4b5bc0110101a987.html

毕业设计-JSP房屋出售租赁管理系统：http://blog.sina.com.cn/s/blog_4b5bc0110101a98a.html