51CTO-Struts读书笔记.docVIP

Struts读书笔记 南京航空航天大学 CS 蒋俊锋 2004.5.10 框架纵览 一个在线银行的例子 这个文档中我们不必提供很强壮的安全服务。 Example 3-1. The IAuthentication Interface used by the banking application package com.oreilly.struts.banking.service; import com.oreilly.struts.banking.view.UserView; /** * Provides methods that the banking security service should implement. */ public interface IAuthentication { /** * The login method is called when a user wishes to login to * the online banking application. * @param accessNumber The account access number. * @param pinNumber The account private id number. * @returns A ValueHolder object representing the users personal data. * @throws InvalidLoginException if the credentials are invalid. */ public UserView login( String accessNumber, String pinNumber ) throws InvalidLoginException; } 因为java接口是不能被实例化的，我们需要一个类继承它。 在例子3-2中的类com.oreilly.struts.banking.service.SecurityService， 功能是验证用户，继承了接口IAuthentication.当时既然我们无需要提供任何安全服务， 我们允许任何人登陆。 Example 3-2. The SecurityService used by the banking application for authentication package com.oreilly.struts.banking.service; import com.oreilly.struts.banking.view.UserView; /** * Used by the example banking application to simulate a security service. */ public class SecurityService implements IAuthentication { /** * The login method is called when a user wishes to login to * the online banking application. * @param accessNumber The account access number. * @param pinNumber The account private id number. * @returns A ValueHolder object representing the users personal data. * @throws InvalidLoginException if the credentials are invalid. */ public UserView login(String accessNbr, String pinNbr) throws InvalidLoginException { // A real security service would check the login against a security realm // This example is hard coded to only let in 123/456 if( (accessNbr != null accessNbr.equalsIgnoreCase(123)) (pinNbr != null pinNbr.equalsIgnoreCase(456)) ){ /* Dummy a UserView for this example. * This data/