package comm;
import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.*;
import javax.servlet.http.*;
public class AccessControlFilter implements Filter {
private FilterConfig filterConfig = null;
public void init(FilterConfig config) throws ServletException {
this.filterConfig = config;
}
public void doFilter(ServletRequest request, ServletResponse response,
FilterChain chain) throws IOException, ServletException,
IOException {
HttpServletRequest req = (HttpServletRequest) request;
req.getSession().getAttribute("oms_user");
System.out.println("filter start ........ " + "Chain=:" + chain);
System.out.println("Session oms_user : " + req.getSession().getAttribute("oms_user"));
String path = req.getServletPath();
if (path.equalsIgnoreCase("/LoginServlet")) {
chain.doFilter(request, response);
} else {
// String islogin = (String) session.getAttribute("passed");
if (req.getSession().getAttribute("oms_user") != null) {
chain.doFilter(request, response);
} else {
req.getSession().invalidate();
PrintWriter out = response.getWriter();
out.println("<script language=javascript>");
out.println("alert('Session is timeout, pleas login again')");
out.println("</script>");
out.println("<html><head></head>");
out.println("<Script LANGUAGE='javascript'> self.parent.location= '/woms/webpage/index.htm';</script>");
out.println("</head>");
out.println("<body>");
out.println("<h1>please login first</h1>");
out.println("</body></html>");
}
}
}
public void destroy() {
this.filterConfig = null;
}
}
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
<filter>
<filter-name>loginfilter</filter-name>
<filter-class>comm.AccessControlFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>loginfilter</filter-name>
<url-pattern>*.jsp</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>loginfilter</filter-name>
<url-pattern>*.do</url-pattern>
</filter-mapping>
<session-config>
<session-timeout>36000</session-timeout>
</session-config>
</web-app>