AdminFilter.java 文件源码

public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
    HttpServletRequest request = (HttpServletRequest) req;
    HttpServletResponse response = (HttpServletResponse) res;
    HttpSession session = request.getSession(false);

    if (session == null || session.getAttribute("LoggedUser") == null) {
        response.sendRedirect(request.getContextPath() + "/index.jsp"); // No logged-in user found, so redirect to login page.
    } else {
        DynUser currentUser = (DynUser) session.getAttribute("LoggedUser");
        if (!currentUser.isAdmin()) {
            response.sendRedirect(request.getContextPath() + "/app/dashboard.jsp"); // No admin user found, so redirect to dashboard page.
        } else {            
            chain.doFilter(req, res); // Logged-in user found, so just continue request.
        }
    }
}