`

仿造的acegi threadlocal

    博客分类：
  • ssh
AcegiSecurityJBPMthreadJavaScript 
阅读更多
<script type="text/javascript"> new Draggable(&quot;related_topics&quot;); </script> 用过acegi的都知道acegi的用户登陆信息（用户id 角色）等放在threadLocal 中
下面是自己土制的threadLocal 比acegi的简单很多，更容易明白它的原理
用过OpenSessionInView的就不用看了，原理完全一样
下面给出关键代码
Java代码 复制代码
  1. //安全上下文，保存用户登陆数据   
  2. public   class  SecurityContext {   
  3.      public   final   static  String SECURITY_CONTEXT_KEY =  "cn.lottery.sale.security.securityContext" ;   
  4.      private  Long userId;   
  5.      private  String username;   
  6.      private  List<String> roles =  new  ArrayList<String>();   
  7. }   
//安全上下文，保存用户登陆数据
public class SecurityContext {
	public final static String SECURITY_CONTEXT_KEY = "cn.lottery.sale.security.securityContext";
	private Long userId;
	private String username;
	private List<String> roles = new ArrayList<String>();
}

Java代码 复制代码
  1. LoginAction中的login方法   
  2.      public  String login(){   
  3.         SecurityContext sc =  new  SecurityContext();   
  4.         sc.setUsername(username);   
  5.         getRequest().getSession().setAttribute(SecurityContext.SECURITY_CONTEXT_KEY, sc);   
  6.          return  SUCCESS;   
  7.     }   
LoginAction中的login方法
	public String login(){
		SecurityContext sc = new SecurityContext();
		sc.setUsername(username);
		getRequest().getSession().setAttribute(SecurityContext.SECURITY_CONTEXT_KEY, sc);
		return SUCCESS;
	}


Java代码 复制代码
  1. //安全过滤器。绑定session中用户信息到threadLocal   
  2. public   class  SecurityFilter  implements  Filter {   
  3.      private   final   static  Logger logger = LoggerFactory.getLogger(SecurityFilter. class );   
  4.        
  5.      public   void  doFilter(ServletRequest request, ServletResponse response,   
  6.             FilterChain chain)  throws  IOException, ServletException {   
  7.            
  8.         HttpServletRequest req = (HttpServletRequest)request;   
  9.         HttpSession session = req.getSession();   
  10.            
  11.          if (session !=  null ){   
  12.             SecurityContext context = (SecurityContext)session.getAttribute(SecurityContext.SECURITY_CONTEXT_KEY);   
  13.             logger.debug( "绑定用户信息到线程"  + Thread.currentThread().getId());   
  14.             SecurityContextHolder.set(context);   
  15.         }   
  16.          try {   
  17.             chain.doFilter(request, response);   
  18.         } finally {   
  19.             logger.debug( "删除绑定到当前线程的用户信息"  + Thread.currentThread().getId());   
  20.             SecurityContextHolder.remove();   
  21.         }   
  22.            
  23.     }   
  24. }   
//安全过滤器。绑定session中用户信息到threadLocal

public class SecurityFilter implements Filter {
	private final static Logger logger = LoggerFactory.getLogger(SecurityFilter.class);
	
	public void doFilter(ServletRequest request, ServletResponse response,
			FilterChain chain) throws IOException, ServletException {
		
		HttpServletRequest req = (HttpServletRequest)request;
		HttpSession session = req.getSession();
		
		if(session != null){
			SecurityContext context = (SecurityContext)session.getAttribute(SecurityContext.SECURITY_CONTEXT_KEY);
			logger.debug("绑定用户信息到线程" + Thread.currentThread().getId());
			SecurityContextHolder.set(context);
		}
		try{
			chain.doFilter(request, response);
		}finally{
			logger.debug("删除绑定到当前线程的用户信息" + Thread.currentThread().getId());
			SecurityContextHolder.remove();
		}
		
	}
}


Java代码 复制代码
  1. //逻辑类   
  2. public   class  LotteryManager {   
  3.      private   final   static  Logger logger = LoggerFactory.getLogger(LotteryManager. class );   
  4.      private  LotteryDAO lotteryDAO;   
  5.        
  6.      @Transactional (readOnly =  true )   
  7.      public  List<Lottery> findLotteryByName(String lotteryName){   
  8.         logger.debug( SecurityContextHolder.get().getUsername() );  //看这儿啦 获取用户名。省去传递参数哪么麻烦   
  9.          return  lotteryDAO.findByProperty( "shortName" , lotteryName);   
  10.     }   
  11.        
  12. } 
分享到：
| servlet是多线程的
评论
发表评论

您还没有登录,请您登录后再发表评论

相关推荐

Magicbox
Global site tag (gtag.js) - Google Analytics