java 獲取HttpRequest Header的幾種方法(必看篇)
在開發(fā)應(yīng)用程序的過程中,如果有多個(gè)應(yīng)用,通常會(huì)通過一個(gè)portal 門戶來集成,這個(gè)portal 是所有應(yīng)用程序的入口,用戶一旦在portal 登錄之后,進(jìn)入另外一個(gè)系統(tǒng),就需要類似的單點(diǎn)登錄(SSO). 進(jìn)入各個(gè)子系統(tǒng)的時(shí)候,就不需要再次登錄, 當(dāng)然類似的功能,你可以通過專業(yè)的單點(diǎn)登錄軟件來實(shí)現(xiàn),也可以自己寫數(shù)據(jù)庫token 等方式來實(shí)現(xiàn)。其實(shí)還有一個(gè)比較簡單的方法,就是通過 portal 封裝已經(jīng)登錄過的用戶的消息,寫到http header 之中,然后把請求forward 到各個(gè)子系統(tǒng)中去,而各子系統(tǒng)從 http header 中獲取用戶名,作為是否登錄過的校驗(yàn)或者合法的校驗(yàn)。
總結(jié)了幾種處理http Header 的方法:
利用 HttpServletRequest
import javax.servlet.http.HttpServletRequest;
//...
private HttpServletRequest request;
//get request headers
private Map<String, String> getHeadersInfo() {
Map<String, String> map = new HashMap<String, String>();
Enumeration headerNames = request.getHeaderNames();
while (headerNames.hasMoreElements()) {
String key = (String) headerNames.nextElement();
String value = request.getHeader(key);
map.put(key, value);
}
return map;
}
一個(gè)典型的例子如下:
"headers" : {
"Host" : "yihaomen.com",
"Accept-Encoding" : "gzip,deflate",
"X-Forwarded-For" : "66.249.x.x",
"X-Forwarded-Proto" : "http",
"User-Agent" : "Mozilla/5.0 (compatible; Googlebot/2.1; +
http://www.google.com/bot.html
)",
"X-Request-Start" : "1389158003923",
"Accept" : "*/*",
"Connection" : "close",
"X-Forwarded-Port" : "80",
"From" : "googlebot(at)googlebot.com"
}
獲取 user-agent
import javax.servlet.http.HttpServletRequest;
//...
private HttpServletRequest request;
private String getUserAgent() {
return request.getHeader("user-agent");
}
一個(gè)典型的例子如下:
Mozilla/5.0 (compatible; Googlebot/2.1; + http://www.google.com/bot.html )
利用 spring mvc 獲取 HttpRequest Header 的例子
import java.util.Enumeration;
import java.util.HashMap;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.servlet.ModelAndView;
@Controller
@RequestMapping("/site")
public class SiteController {
@Autowired
private HttpServletRequest request;
@RequestMapping(value = "/{input:.+}", method = RequestMethod.GET)
public ModelAndView getDomain(@PathVariable("input") String input) {
ModelAndView modelandView = new ModelAndView("result");
modelandView.addObject("user-agent", getUserAgent());
modelandView.addObject("headers", getHeadersInfo());
return modelandView;
}
//get user agent
private String getUserAgent() {
return request.getHeader("user-agent");
}
//get request headers
private Map<String, String> getHeadersInfo() {
Map<String, String> map = new HashMap<String, String>();
Enumeration headerNames = request.getHeaderNames();
while (headerNames.hasMoreElements()) {
String key = (String) headerNames.nextElement();
String value = request.getHeader(key);
map.put(key, value);
}
return map;
}
}
也許有人會(huì)說,Http Header 是可以模擬的,那么自己可以構(gòu)造一個(gè)用來欺騙這些系統(tǒng), 是的,的確是這樣,所以在用Http Header 來傳值得時(shí)候,一定要記得,所有的請求都必須經(jīng)過 portal 來處理,然后 forward 到各子系統(tǒng),就不會(huì)出現(xiàn)這個(gè)問題了。因?yàn)閜ortal 首先攔截用戶發(fā)起的所有的請求,如果是構(gòu)造的用戶,在portal 的sessiion 也是沒有記錄的,仍然會(huì)跳轉(zhuǎn)到登錄頁面,如果在protal 的 session 中記錄,而且 Http Header 中也有記錄,那么在子系統(tǒng)就是合法的用戶,然后自己可以根據(jù)一些要求處理業(yè)務(wù)邏輯了
JSP/Java獲取HTTP header信息(request)例子
<%
//header.jsp
out.println("Protocol: " + request.getProtocol() + "<br>");
out.println("Scheme: " + request.getScheme() + "<br>");
out.println("Server Name: " + request.getServerName() + "<br>" );
out.println("Server Port: " + request.getServerPort() + "<br>");
out.println("Protocol: " + request.getProtocol() + "<br>");
out.println("Server Info: " + getServletConfig().getServletContext().getServerInfo() + "<br>");
out.println("Remote Addr: " + request.getRemoteAddr() + "<br>");
out.println("Remote Host: " + request.getRemoteHost() + "<br>");
out.println("Character Encoding: " + request.getCharacterEncoding() + "<br>");
out.println("Content Length: " + request.getContentLength() + "<br>");
out.println("Content Type: "+ request.getContentType() + "<br>");
out.println("Auth Type: " + request.getAuthType() + "<br>");
out.println("HTTP Method: " + request.getMethod() + "<br>");
out.println("Path Info: " + request.getPathInfo() + "<br>");
out.println("Path Trans: " + request.getPathTranslated() + "<br>");
out.println("Query String: " + request.getQueryString() + "<br>");
out.println("Remote User: " + request.getRemoteUser() + "<br>");
out.println("Session Id: " + request.getRequestedSessionId() + "<br>");
out.println("Request URL: " + request.getRequestURL() + "<br>");
out.println("Request URI: " + request.getRequestURI() + "<br>");
out.println("Servlet Path: " + request.getServletPath() + "<br>");
out.println("Created : " + session.getCreationTime() + "<br>");
out.println("LastAccessed : " + session.getLastAccessedTime() + "<br>");
out.println("Accept: " + request.getHeader("Accept") + "<br>");
out.println("Host: " + request.getHeader("Host") + "<br>");
out.println("Referer : " + request.getHeader("Referer") + "<br>");
out.println("Accept-Language : " + request.getHeader("Accept-Language") + "<br>");
out.println("Accept-Encoding : " + request.getHeader("Accept-Encoding") + "<br>");
out.println("User-Agent : " + request.getHeader("User-Agent") + "<br>");
out.println("Connection : " + request.getHeader("Connection") + "<br>");
out.println("Cookie : " + request.getHeader("Cookie") + "<br>");
%>
關(guān)于request.getHeader("Referer")的說明
request.getHeader("Referer")獲取來訪者地址。只有通過鏈接訪問當(dāng)前頁的時(shí)候,才能獲取上一頁的地址;否則request.getHeader("Referer")的值為Null,通過window.open打開當(dāng)前頁或者直接輸入地址,也為Null。
以上就是小編為大家?guī)淼膉ava 獲取HttpRequest Header的幾種方法(必看篇)的全部內(nèi)容了,希望對大家有所幫助,多多支持腳本之家~
相關(guān)文章
java開發(fā)validate方法中校驗(yàn)工具類詳解
這篇文章主要為大家介紹了java開發(fā)validate方法中校驗(yàn)工具類詳解,有需要的朋友可以借鑒參考下,希望能夠有所幫助,祝大家多多進(jìn)步,早日升職加薪2022-09-09
Java?Map.values()方法之如何獲取Map集合中的所有鍵值對象
這篇文章主要介紹了Java?Map.values()方法之如何獲取Map集合中的所有鍵值對象問題,具有很好的參考價(jià)值,希望對大家有所幫助。如有錯(cuò)誤或未考慮完全的地方,望不吝賜教2023-03-03
SpringBoot實(shí)現(xiàn)郵件發(fā)送功能的姿勢分享
我們在日常開發(fā)中,經(jīng)常會(huì)碰到email郵件發(fā)送的場景,如發(fā)送驗(yàn)證碼,向客戶發(fā)送郵件等等,這篇文章主要給大家介紹了關(guān)于SpringBoot實(shí)現(xiàn)郵件發(fā)送的相關(guān)資料,需要的朋友可以參考下2021-08-08
SpringBoot整合Vue實(shí)現(xiàn)微信掃碼支付以及微信退款功能詳解
最近公司要在微信公眾號上做一個(gè)活動(dòng)預(yù)報(bào)名,活動(dòng)的門票等需要在微信中支付,下面這篇文章主要給大家介紹了關(guān)于SpringBoot整合Vue實(shí)現(xiàn)微信掃碼支付以及微信退款功能的相關(guān)資料,需要的朋友可以參考下2022-05-05
SpringBoot中@EnableAutoConfiguration和@Configuration的區(qū)別
這篇文章主要介紹了SpringBoot中@EnableAutoConfiguration和@Configuration的區(qū)別,@SpringBootApplication相當(dāng)于@EnableAutoConfiguration,@ComponentScan,@Configuration三者的集合,需要的朋友可以參考下2023-08-08

