security - 当已通过身份验证的用户访问登录页面时如何重定向到另一个页面

Question

我想知道如果某个 c:if 子句为 true 是否可以重定向用户？

<c:if test="#{loginController.authenticated}">
 //redirect to index page
</c:if>

Answer 1

是的，这是可能的。

但是，我建议您对/login.jsp 应用过滤器，如果用户已经登录，则在过滤器中转发到其他页面。

以下示例说明了如何使用过滤器执行此操作:

public class LoginPageFilter implements Filter
{
   public void init(FilterConfig filterConfig) throws ServletException
   {

   }

   public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,   FilterChain filterChain) throws IOException, ServletException
   {
       HttpServletRequest request = (HttpServletRequest) servletRequest;
       HttpServletResponse response = (HttpServletResponse) servletResponse;

       if(request.getUserPrincipal() != null){ //If user is already authenticated
           response.sendRedirect("/index.jsp");// or, forward using RequestDispatcher
       } else{
           filterChain.doFilter(servletRequest, servletResponse);
       }
   }

   public void destroy()
   {

   }
}

在 web.xml 中添加此过滤器条目

<filter>
    <filter-name>LoginPageFilter</filter-name>
    <filter-class>
        com.sample.LoginPageFilter
    </filter-class>
    <init-param>
       <param-name>test-param</param-name>
       <param-value>This parameter is for testing.</param-value>
    </init-param>
</filter>

<filter-mapping>
    <filter-name>LoginPageFilter</filter-name>
    <url-pattern>/login.jsp</url-pattern>
</filter-mapping>