[英]Infinite loop when trying to login using Servlet Filter in JSF
我正在嘗試使用JSF和servlet過濾器創建登錄應用程序,但是當用戶登錄時什么也沒發生。 它再次重定向到登錄頁面。
這是項目目錄:
這是web.xml
<?xml version="1.0" encoding="UTF-8"?>
<web-app version="3.1"
xmlns="http://xmlns.jcp.org/xml/ns/javaee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd">
<context-param>
<param-name>javax.faces.PROJECT_STAGE</param-name>
<param-value>Development</param-value>
</context-param>
<filter>
<filter-name>LoginFilter</filter-name>
<filter-class>javaeetutorial.guessnumber.filters.LoggedInFilter</filter-class>
</filter>
<!-- Set the login filter to secure all the pages in the /secured/* path of the application -->
<filter-mapping>
<filter-name>LoginFilter</filter-name>
<url-pattern>/secured/*</url-pattern>
</filter-mapping>
<servlet>
<servlet-name>Faces Servlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>*.xhtml</url-pattern>
</servlet-mapping>
<session-config>
<session-timeout>
30
</session-timeout>
</session-config>
<welcome-file-list>
<welcome-file>greeting.xhtml</welcome-file>
</welcome-file-list>
</web-app>
這是LoggedInFilter.java
/*
* To change this template, choose Tools | Templates
* and open the template in the editor.
*/
package javaeetutorial.guessnumber.filters;
import java.io.IOException;
import java.util.Enumeration;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import javaeetutorial.guessnumber.TestBean;
/**
*
* @author salih
*/
public class LoggedInFilter implements Filter {
FilterConfig fc;
@Override
public void init(FilterConfig filterConfig) throws ServletException {
fc = filterConfig;
//throw new UnsupportedOperationException("Not supported yet."); //To change body of generated methods, choose Tools | Templates.
}
@Override
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
Enumeration<String> t = ((HttpServletRequest) request).getSession().getAttributeNames();
while(t.hasMoreElements()) { System.out.println(t.nextElement().toString());}
TestBean loginBean = (TestBean) ((HttpServletRequest) request).getSession().getAttribute("testBean");
// For the first application request there is no loginBean in the session so user needs to log in
// For other requests loginBean is present but we need to check if user has logged in successfully
if (loginBean == null || !loginBean.isLoggedIn()) {
String contextPath = ((HttpServletRequest) request).getContextPath();
((HttpServletResponse) response).sendRedirect(contextPath + "/login.xhtml");
}
chain.doFilter(request, response);
}
@Override
public void destroy() {
throw new UnsupportedOperationException("Not supported yet."); //To change body of generated methods, choose Tools | Templates.
}
}
這是TestBean.java
/*
* To change this template, choose Tools | Templates
* and open the template in the editor.
*/
package javaeetutorial.guessnumber;
import java.io.Serializable;
import javax.enterprise.context.SessionScoped;
import javax.faces.application.FacesMessage;
import javax.faces.bean.ManagedProperty;
import javax.faces.context.FacesContext;
import javax.inject.Named;
/**
*
* @author salih
*/
@Named
@SessionScoped
public class TestBean implements Serializable {
private boolean loggedIn;
private String username;
private String password;
private NavigationBean navigationBean = new NavigationBean();
private static final String[] users = {"anna:qazwsx", "kate:123456"};
public String getUsername() {
return username;
}
public void setUsername(String username) {
this.username = username;
}
public String getPassword() {
return password;
}
public void setPassword(String password) {
this.password = password;
}
public boolean isLoggedIn() {
return loggedIn;
}
public void setLoggedIn(boolean loggedIn) {
this.loggedIn = loggedIn;
}
public String doLogin() {
// Get every user from our sample database :)
for (String user : users) {
String dbUsername = user.split(":")[0];
String dbPassword = user.split(":")[1];
// Successful login
if (dbUsername.equals(username) && dbPassword.equals(password)) {
loggedIn = true;
return navigationBean.redirectToWelcome();
}
}
// Set login ERROR
FacesMessage msg = new FacesMessage("Login error!", "ERROR MSG");
msg.setSeverity(FacesMessage.SEVERITY_ERROR);
FacesContext.getCurrentInstance().addMessage(null, msg);
// To to login page
return navigationBean.toLogin();
}
}
這是login.xhtml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"htth://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:h="http://java.sun.com/jsf/html">
<h:head>
<title>Login form</title>
</h:head>
<h:body>
<h3>Login here</h3>
<h:form id="login-form">
<h:outputText value="username:"/>
<h:inputText value="#{testBean.username}" id="username"/>
<br/>
<h:outputText value="password:"/>
<h:inputSecret value="#{testBean.password}" id="password"/>
<br/>
<h:commandButton id="button" value="Login" action="#{testBean.doLogin}"/>
<br/>
<h:commandLink action="#{navigationBean.redirectToInfo}" value="Info page"/>
<br/>
<h:messages />
<br/>
</h:form>
</h:body>
</html>
您正在將JSF托管Bean /概念與CDI托管Bean混合使用。
首先,您忽略了要指定的容器,但是我將為普通的servlet容器寫一個答案,為啟用CDI的Java應用程序服務器(例如TomEE / Wildfly / Glassfish)寫一個答案。
使用@Named
和@SessionScoped
但請確保您具有正確的@SessionScoped。 javax.enterprise.context是程序包名稱。 如果您使用JSF中的SessionScoped,則bean將具有依賴范圍,這是錯誤的。
現在,卸下過濾器並使用測試頁進行快速測試。 使用<h:inputText />
和<h:commandButton>
(均在<h:form>
)設置一個字段。 確保F5之后的值仍然存在,並因此成功@SessionScoped.
如果它不起作用,請確保您正在使用CDI 1.1或已在文檔中相應地包含beans.xml。
最后使用
@Inject
private TestBean testBean;
或者,如果您擁有像Tomcat或Jetty這樣的普通容器,則需要使用Deltaspike Core,然后使用: TestBean testBean = BeanProvider.getContextualReference(TestBean.class, false);
祝好運
聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.