shiro 拦截器实现session过期拦截ajax请求的处理

朱雀 2020-10-18 07:11 1281阅读 0赞

拦截器代码：

package com.xlqh.outlook.shirofilter;
    import java.io.IOException;
    import org.apache.shiro.web.filter.PathMatchingFilter;
    import com.xlqh.outlook.MyShiroConstants.MyShiroConstants;
    import com.xlqh.outlook.SessionManagement.SessionManagement;
    import com.xlqh.outlook.entity.yuuser;
    import javax.servlet.ServletRequest;
    import javax.servlet.ServletResponse;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    
    //自定义拦截器,Session过期AJAX处理
    public class SessionExpiredFilter extends PathMatchingFilter { 
    
    
        @Override   
        protected boolean onPreHandle(ServletRequest  request, ServletResponse response, Object mappedValue) throws Exception {
              yuuser sys = (yuuser) SessionManagement.getSession(MyShiroConstants.Session_USER);    
             if(sys==null){
                System.out.println("session过期");
                if ("XMLHttpRequest".equalsIgnoreCase(((HttpServletRequest) request).getHeader("X-Requested-With"))) {
                    //ajax的sesson处理
                    //返回状态码
                     onLoginFail(response);
                    return false;
                    }
                else{
                    //普通的处理，直接给到下一个拦截器
                     return true;   
                }
            }
    
            return true;
        }
    
        //session过期给403状态码
        private void onLoginFail(ServletResponse response) throws IOException {
            HttpServletResponse httpResponse = (HttpServletResponse) response;
            httpResponse.setStatus(403);
            httpResponse.getWriter().write("session超时了");
        }
    
    
    }

前台页面全局需要处理的，基于jquery的ajax请求都会被拦截

全局的js片段：

ajax请求的js：

shiro配置：  
需要把session拦截器放在登录拦截器前面