git-svn-id: https://192.168.57.71/svn/jsgkj@1935 931142cf-59ea-a443-aa0e-51397b428577

gkaqv2/trunk/modules/web/src/main/java/com/xt/js/gkaq/common/HttpFilter.java

@@ -0,0 +1,102 @@
+package com.xt.js.gkaq.common;
+
+import java.io.IOException;
+
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+import javax.servlet.http.HttpServletRequest;
+
+import org.apache.shiro.SecurityUtils;
+import org.apache.shiro.subject.Subject;
+import org.apache.shiro.web.filter.authz.PortFilter;
+import org.apache.shiro.web.filter.authz.SslFilter;
+import org.apache.shiro.web.util.WebUtils;
+
+/**
+ * http协议请求过滤器，参考{@link org.apache.shiro.web.filter.authz.SslFilter}
+ * 
+ * @author 袁晓冬
+ *
+ */
+public class HttpFilter extends PortFilter {
+
+    public static final int DEFAULT_HTTP_PORT = 80;
+    public static final String HTTPS_SCHEME = "http";
+
+    public HttpFilter() {
+        setPort(DEFAULT_HTTP_PORT);
+    }
+
+    @Override
+    protected String getScheme(String requestScheme, int port) {
+        if (port == DEFAULT_HTTP_PORT) {
+            return PortFilter.HTTP_SCHEME;
+        }
+        else {
+            return HTTPS_SCHEME;
+        }
+    }
+
+    /**
+     * Retains the parent method's port-matching behavior but additionally guarantees that the
+     * {@code ServletRequest.}{@link javax.servlet.ServletRequest#isSecure() isSecure()}. If the port does not match or
+     * the request is not secure, access is denied.
+     *
+     * @param request
+     *            the incoming {@code ServletRequest}
+     * @param response
+     *            the outgoing {@code ServletResponse} - ignored in this implementation
+     * @param mappedValue
+     *            the filter-specific config value mapped to this filter in the URL rules mappings - ignored by this
+     *            implementation.
+     * @return {@code true} if the request is received on an expected SSL port and the
+     *         {@code request.}{@link javax.servlet.ServletRequest#isSecure() isSecure()}, {@code false} otherwise.
+     * @throws Exception
+     *             if the call to {@code super.isAccessAllowed} throws an exception.
+     * @since 1.2
+     */
+    @Override
+    protected boolean isAccessAllowed(ServletRequest request, ServletResponse response, Object mappedValue)
+            throws Exception {
+        return super.isAccessAllowed(request, response, mappedValue);
+    }
+
+    /**
+     * Redirects the request to the same exact incoming URL, but with the port listed in the filter's configuration.
+     *
+     * @param request
+     *            the incoming <code>ServletRequest</code>
+     * @param response
+     *            the outgoing <code>ServletResponse</code>
+     * @param mappedValue
+     *            the config specified for the filter in the matching request's filter chain.
+     * @return {@code false} always to force a redirect.
+     */
+    protected boolean onAccessDenied2(ServletRequest request, ServletResponse response, Object mappedValue)
+            throws IOException {
+
+        //just redirect to the specified port:
+        int port = toPort(mappedValue);
+        Subject subject = SecurityUtils.getSubject();
+        String scheme = getScheme(request.getScheme(), port);
+
+        StringBuilder sb = new StringBuilder();
+        sb.append(scheme).append("://");
+        sb.append(request.getServerName());
+        if (port != PortFilter.DEFAULT_HTTP_PORT && port != SslFilter.DEFAULT_HTTPS_PORT) {
+            sb.append(":");
+            sb.append(port);
+        }
+        if (request instanceof HttpServletRequest) {
+            sb.append(WebUtils.toHttp(request).getRequestURI());
+            String query = WebUtils.toHttp(request).getQueryString();
+            if (query != null) {
+                sb.append("?").append(query);
+            }
+        }
+        System.err.println(sb.toString() + " isAuthenticated:" + subject.isAuthenticated());
+        WebUtils.issueRedirect(request, response, sb.toString());
+
+        return false;
+    }
+}