From 5078599fb6c6622d902d7639a475b5911bb3d031 Mon Sep 17 00:00:00 2001
From: renfufei <renfufei@qq.com>
Date: Fri, 9 Dec 2016 10:05:52 +0800
Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0=E6=A0=A1=E9=AA=8C=E7=99=BB?=
 =?UTF-8?q?=E5=BD=95=E5=AF=86=E7=A0=81=E7=9A=84=E6=96=B9=E6=B3=95:Resource?=
 =?UTF-8?q?Servlet.checkLoginParam(request),=E5=85=81=E8=AE=B8=E5=8D=95?=
 =?UTF-8?q?=E6=AC=A1=E8=B0=83=E7=94=A8=E9=89=B4=E6=9D=83?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../alibaba/druid/support/http/ResourceServlet.java  | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/main/java/com/alibaba/druid/support/http/ResourceServlet.java b/src/main/java/com/alibaba/druid/support/http/ResourceServlet.java
index cbe2cde756..1e4217db12 100644
--- a/src/main/java/com/alibaba/druid/support/http/ResourceServlet.java
+++ b/src/main/java/com/alibaba/druid/support/http/ResourceServlet.java
@@ -214,6 +214,7 @@ public abstract class ResourceServlet extends HttpServlet {
 
         if (isRequireAuth() //
             && !ContainsUser(request)//
+            && !checkLoginParam(request)//
             && !("/login.html".equals(path) //
                  || path.startsWith("/css")//
                  || path.startsWith("/js") //
@@ -262,6 +263,17 @@ public abstract class ResourceServlet extends HttpServlet {
         return session != null && session.getAttribute(SESSION_USER_KEY) != null;
     }
 
+    public boolean checkLoginParam(HttpServletRequest request) {
+        String usernameParam = request.getParameter(PARAM_NAME_USERNAME);
+        String passwordParam = request.getParameter(PARAM_NAME_PASSWORD);
+        if(null == username || null == password){
+            return false;
+        } else if (username.equals(usernameParam) && password.equals(passwordParam)) {
+            return true;
+        }
+        return false;
+    }
+
     public boolean isRequireAuth() {
         return this.username != null;
     }