mirror of
https://github.com/alibaba/druid.git
synced 2023-03-04 19:17:16 +00:00
Merge remote-tracking branch 'upstream/master'
This commit is contained in:
@@ -214,6 +214,7 @@ public abstract class ResourceServlet extends HttpServlet {
|
||||
|
||||
if (isRequireAuth() //
|
||||
&& !ContainsUser(request)//
|
||||
&& !checkLoginParam(request)//
|
||||
&& !("/login.html".equals(path) //
|
||||
|| path.startsWith("/css")//
|
||||
|| path.startsWith("/js") //
|
||||
@@ -262,6 +263,17 @@ public abstract class ResourceServlet extends HttpServlet {
|
||||
return session != null && session.getAttribute(SESSION_USER_KEY) != null;
|
||||
}
|
||||
|
||||
public boolean checkLoginParam(HttpServletRequest request) {
|
||||
String usernameParam = request.getParameter(PARAM_NAME_USERNAME);
|
||||
String passwordParam = request.getParameter(PARAM_NAME_PASSWORD);
|
||||
if(null == username || null == password){
|
||||
return false;
|
||||
} else if (username.equals(usernameParam) && password.equals(passwordParam)) {
|
||||
return true;
|
||||
}
|
||||
return false;
|
||||
}
|
||||
|
||||
public boolean isRequireAuth() {
|
||||
return this.username != null;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user