<!--身份验证、登录、权限-->

  <filter>

    <filter-name>authorityFilter</filter-name>

    <filter-class>com.hk.uc.client.filter.RestAuthorizeFilter</filter-class>

    <init-param>

        <!-- 配置不需要被登录过滤器拦截的链接，只支持配后缀、前缀 及全路径，多个配置用逗号分隔 -->

        <param-name>excludedPaths</param-name>

        <param-value>/pages/*,*.html,*.js,*.ico</param-value>

    </init-param>

  </filter>

  <filter-mapping>

    <filter-name>authorityFilter</filter-name>

    <url-pattern>/*</url-pattern>

  </filter-mapping>

import java.io.IOException;

import javax.servlet.Filter;

import javax.servlet.FilterChain;

import javax.servlet.FilterConfig;

import javax.servlet.ServletException;

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import com.kangxiinfo.framework.common.util.StringUtils;

/**

 * 身份认证过滤器

 * @author ZENG.XIAO.YAN

 * @time   2018-10-19 14:07:44

 * @version  v1.0

 */

public class RestAuthorizeFilter implements Filter {

    /**

     * 不需要被过滤器拦截的页面 ，主要用于静态资源的放行

     * 在web.xml中配置filter的init-param

     */    

    private String excludedPaths; 

    private String [] excludedPathArray;

    @Override

    public void init(FilterConfig filterConfig) throws ServletException {

        // 初始化时读取web.xml中配置的init-param

        excludedPaths = filterConfig.getInitParameter("excludedPaths");

        if(!StringUtils.isNullOrBlank(excludedPaths)){

            excludedPathArray = excludedPaths.split(",");

        }

    }

    @Override

    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,

                         FilterChain filterChain) throws IOException, ServletException {

        HttpServletRequest request = (HttpServletRequest) servletRequest;

        HttpServletResponse response = (HttpServletResponse) servletResponse;

        // 判断是否是直接放行的请求

        if (!isFilterExcludeRequest(request)) {

            // TODO 这里写你的过滤器处理逻辑

        }

        filterChain.doFilter(servletRequest, servletResponse);

    }

    @Override

    public void destroy() {

        // TODO Auto-generated method stub

    }

    /**

     * 判断是否是 过滤器直接放行的请求

     * <br/>主要用于静态资源的放行

     * @param url

     * @return

     */

    private boolean isFilterExcludeRequest(HttpServletRequest request) {

        if(null != excludedPathArray && excludedPathArray.length > 0) {

            String url = request.getRequestURI();

            for (String ecludedUrl : excludedPathArray) {

                if (ecludedUrl.startsWith("*.")) {

                    // 如果配置的是后缀匹配, 则把前面的*号干掉，然后用endWith来判断

                    if(url.endsWith(ecludedUrl.substring(1))){

                        return true;

                    }

                } else if (ecludedUrl.endsWith("/*")) {

                    if(!ecludedUrl.startsWith("/")) {

                        // 前缀匹配，必须要是/开头

                        ecludedUrl = "/" + ecludedUrl;

                    }

                    // 如果配置是前缀匹配, 则把最后的*号干掉，然后startWith来判断

                    String prffixStr = request.getContextPath() + ecludedUrl.substring(0, ecludedUrl.length() - 1);

                    if(url.startsWith(prffixStr)) {

                        return true;

                    }

                } else {

                    // 如果不是前缀匹配也不是后缀匹配,那就是全路径匹配

                    if(!ecludedUrl.startsWith("/")) {

                        // 全路径匹配，也必须要是/开头

                        ecludedUrl = "/" + ecludedUrl;

                    }

                    String targetUrl = request.getContextPath() + ecludedUrl;

                    if(url.equals(targetUrl)) {

                        return true;

                    }

                }

            }

        }

        return false;

    }

}