package com.bookStore.admin.filter;



import com.bookStore.commons.beans.User;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;

public class LoginFilter implements Filter {
    /*不进行过滤的页面或处理器方法*/
    private String[] IG_URI = {"/login.jsp","/login.do","/"};
    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        /*强制类型转换*/
        HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;
        /*获取本次请求的URI*/
        String requestURI = request.getRequestURI();
        //boolean flag = false;
        /*循环判断本次请求是否是数组中定义的页面或处理器方法*/
        for (String s:IG_URI){
            /*如果是，放行*/
            if (requestURI.endsWith(s)){
                //flag = true;
                filterChain.doFilter(request,response);
                //break;
                return;
            }
        }

        // (!flag){
            /*获取当前登录用户的信息*/
            User login_user = (User) request.getSession().getAttribute("login_user");
            /*如果用户已经登录*/
            if (login_user != null){
                /*通过放行*/
                if("超级管理员".equals(login_user.getRole())){
                    filterChain.doFilter(request,response);
                }else {
                    response.sendRedirect(request.getContextPath()+"/admin/error/privilege.jsp");
                }
            }else {
                request.setAttribute("message","权限不足");
                response.sendRedirect(request.getContextPath()+"/admin/error/privilege.jsp");
            }
       // }
       /* HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;
        String requestURI = request.getRequestURI();
        if(requestURI.endsWith("/login.jsp") || requestURI.endsWith("/login.do")){
            filterChain.doFilter(request,response);
        }*/
    }
}