java的权限拦截和javascipt判断是否登陆时的跳转

java 过滤器 优先级的权限拦截和javascipt判断是否登陆时的跳转

相同的url-pattern时要把自定义的权限放在strust2的前面。

1.WEB.xml

<!-- 权限 -->

<filter>
<filter-name>permission</filter-name>
<filter-class>com.ids.project.base.permission.filter.PermissionFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>permission</filter-name>
<url-pattern>*.action</url-pattern>
</filter-mapping>

<filter>
<filter-name>struts2</filter-name>
<filter-class>org.apache.struts2.dispatcher.FilterDispatcher</filter-class>
</filter>

<filter-mapping>
<filter-name>characterEncodingFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

<filter-mapping>
<filter-name>struts-cleanup</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>struts2</filter-name>
<url-pattern>*.action</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>struts2</filter-name>
<url-pattern>*.jsp</url-pattern>
</filter-mapping>

权限过滤器增加

if (request.getHeader("x-requested-with") != null
&& request.getHeader("x-requested-with")
.equalsIgnoreCase("XMLHttpRequest")) {
response.addHeader("SessionStatus", "timeout");
}

ajax实现获取

error:function(xhr, message) {
if(xhr.getResponseHeader("sessionstatus")){
location.href="login.jsp";
};
var json = eval("(" + xhr.responseText + ")");
$.confirmDialog("错误信息"+ json.error);
}