Filter的用法

public interface Filter {
    //初始化方法，整個(gè)生命周期中只執(zhí)行一次。
    //在init方法成功(失敗如拋異常等)執(zhí)行完前，不能提供過(guò)濾服務(wù)。
    //參數(shù)FilterConfig用于獲取初始化參數(shù)
    public void init(FilterConfig filterConfig) throws ServletException;

    //執(zhí)行過(guò)濾任務(wù)的方法，參數(shù)FilterChain表示過(guò)濾器鏈，doFilter方法中只有執(zhí)行chain.doFilter()后才能調(diào)用下一個(gè)過(guò)濾器的doFilter方法
    //才能將請(qǐng)求交經(jīng)下一個(gè)Filter或Servlet執(zhí)行
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException;

    //銷毀方法，當(dāng)移出服務(wù)時(shí)由web容器調(diào)用。整個(gè)生命周期中destroy方法只會(huì)執(zhí)行一次
    //destroy方法可用于釋放持有的資源，如內(nèi)存、文件句柄等
    public void destroy();
}

• Filter的接口定義包含init、doFilter、destroy等接口。

@Component
public class TimeFilter implements Filter {
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {
        System.out.println("time filter init");
    }

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
        System.out.println("time filter start");
        long startTime = System.currentTimeMillis();

        filterChain.doFilter(servletRequest, servletResponse);

        long endTime = System.currentTimeMillis();
        System.out.println("time filter consume " + (endTime - startTime) + " ms");
        System.out.println("time filter end");
    }

    @Override
    public void destroy() {
        System.out.println("time filter init");
    }
}

• 自定義 Filter對(duì)象需要實(shí)現(xiàn)Filter的接口并實(shí)現(xiàn)其中的方法。

Filter的初始化

public class StandardContext extends ContainerBase
        implements Context, NotificationEmitter {

    private HashMap<String, FilterDef> filterDefs = new HashMap<>();
    private HashMap<String, ApplicationFilterConfig> filterConfigs = new HashMap<>();

    @Override
    protected synchronized void startInternal() throws LifecycleException {
            // 省略其他代碼
            if (ok) {
                if (!filterStart()) {
                    log.error(sm.getString("standardContext.filterFail"));
                    ok = false;
                }
            }
    }

    public boolean filterStart() {
        boolean ok = true;
        synchronized (filterConfigs) {
            filterConfigs.clear();
            // 遍歷filterDefs的map初始化Filter對(duì)象
            for (Entry<String,FilterDef> entry : filterDefs.entrySet()) {
                String name = entry.getKey();
                try {
                    ApplicationFilterConfig filterConfig =
                            new ApplicationFilterConfig(this, entry.getValue());
                    filterConfigs.put(name, filterConfig);
                } catch (Throwable t) {
                    ok = false;
                }
            }
        }

        return ok;
    }
}

• StandardContext#filterStart負(fù)責(zé)遍歷filterDefs并創(chuàng)建ApplicationFilterConfig對(duì)象。
• ApplicationFilterConfig是包含 Filter 實(shí)例的對(duì)象，F(xiàn)ilterDef是包含的過(guò)濾器的定義。
• StandardContext的filterDefs保存 Filter 的定義，filterConfigs保存 Filter 的實(shí)例包裝對(duì)象ApplicationFilterConfig。

Filter核心類定義

public class FilterDef implements Serializable {

    private static final long serialVersionUID = 1L;
    private static final StringManager sm = StringManager.getManager(Constants.PACKAGE_NAME);

    private String description = null;
    private String displayName = null;
    private transient Filter filter = null;
    private String filterClass = null;
    private String filterName = null;
    private String largeIcon = null;
    private final Map<String, String> parameters = new HashMap<>();
    private String smallIcon = null;
    private String asyncSupported = null;
}

• FilterDef是Filter的定義類，filterClass表示過(guò)濾器的定義類。

public final class ApplicationFilterConfig implements FilterConfig, Serializable {

    private static final long serialVersionUID = 1L;
    static final StringManager sm = StringManager.getManager(Constants.Package);
    private static final List<String> emptyString = Collections.emptyList();
    private final transient Context context;
    private transient Filter filter = null;
    private final FilterDef filterDef;
    private transient InstanceManager instanceManager;
    private ObjectName oname;

    ApplicationFilterConfig(Context context, FilterDef filterDef)
            throws ClassCastException, ClassNotFoundException, IllegalAccessException,
            InstantiationException, ServletException, InvocationTargetException, NamingException,
            IllegalArgumentException, NoSuchMethodException, SecurityException {

        super();

        this.context = context;
        this.filterDef = filterDef;
        if (filterDef.getFilter() == null) {
            getFilter();
        } else {
            this.filter = filterDef.getFilter();
            getInstanceManager().newInstance(filter);
            initFilter();
        }
    }

    Filter getFilter() throws ClassCastException, ClassNotFoundException, IllegalAccessException,
            InstantiationException, ServletException, InvocationTargetException, NamingException,
            IllegalArgumentException, NoSuchMethodException, SecurityException {

        if (this.filter != null)
            return (this.filter);

        // 創(chuàng)建 并初始化 Filter 對(duì)象
        String filterClass = filterDef.getFilterClass();
        this.filter = (Filter) getInstanceManager().newInstance(filterClass);
        initFilter();

        return (this.filter);
    }


    private void initFilter() throws ServletException {
        if (context instanceof StandardContext &&
                context.getSwallowOutput()) {
            try {
                SystemLogHandler.startCapture();
                filter.init(this);
            } finally {
                String capturedlog = SystemLogHandler.stopCapture();
                if (capturedlog != null && capturedlog.length() > 0) {
                    getServletContext().log(capturedlog);
                }
            }
        } else {
            filter.init(this);
        }

        registerJMX();
    }
}

• ApplicationFilterConfig的創(chuàng)建過(guò)程就是通過(guò)實(shí)例化FilterDef的 filterClass的類并調(diào)用 Filter 的 init 方法初始化 Filter 對(duì)象。
• initFilter方法負(fù)責(zé)初始化 Filter 對(duì)象，也就是調(diào)用 filter 的 init 方法。
• ApplicationFilterConfig的filter字段保存實(shí)例話后的 Filter 實(shí)例。

FilterDef的加載

FilterDef 的來(lái)源需要如果是 web.xml 定義那么就從 webxml 中獲取，如果是springboot 工程，就通過(guò)ApplicationContextFacade類型進(jìn)行獲取。

public class ContextConfig implements LifecycleListener {

    private void configureContext(WebXml webxml) {
        // 省略相關(guān)代碼
        for (FilterDef filter : webxml.getFilters().values()) {
            if (filter.getAsyncSupported() == null) {
                filter.setAsyncSupported("false");
            }
            context.addFilterDef(filter);
        }
    }
}

• 通過(guò)webxml.getFilters()獲取過(guò)濾器的FilterDef并添加到StandardContext對(duì)象當(dāng)中。
• 上述方式一般在 spring MVC 項(xiàng)目在 web.xml 配置過(guò)濾器的時(shí)候使用。

public class ApplicationContextFacade implements org.apache.catalina.servlet4preview.ServletContext {

    @Override
    public FilterRegistration.Dynamic addFilter(String filterName,
            Filter filter) {
        if (SecurityUtil.isPackageProtectionEnabled()) {
            return (FilterRegistration.Dynamic) doPrivileged("addFilter",
                    new Class[]{String.class, Filter.class},
                    new Object[]{filterName, filter});
        } else {
            return context.addFilter(filterName, filter);
        }
    }
}


public class ApplicationContext implements org.apache.catalina.servlet4preview.ServletContext {

    private FilterRegistration.Dynamic addFilter(String filterName,
            String filterClass, Filter filter) throws IllegalStateException {

        FilterDef filterDef = context.findFilterDef(filterName);
        // context是StandardContext對(duì)象
        if (filterDef == null) {
            filterDef = new FilterDef();
            filterDef.setFilterName(filterName);
            context.addFilterDef(filterDef);
        } else {
            if (filterDef.getFilterName() != null &&
                    filterDef.getFilterClass() != null) {
                return null;
            }
        }

        if (filter == null) {
            filterDef.setFilterClass(filterClass);
        } else {
            filterDef.setFilterClass(filter.getClass().getName());
            filterDef.setFilter(filter);
        }

        return new ApplicationFilterRegistration(filterDef, context);
    }
}

• 通過(guò)ApplicationContextFacade的addFilter方法并最終調(diào)用ApplicationContext的addFilter方法將過(guò)濾器的FilterDef并添加到StandardContext對(duì)象當(dāng)中。
• 是上述方式一般在springboot 工程中的加載過(guò)程。

Filter的加載流程

• Filter的定義的加載順序如上圖所示，包括解析 web.xml 文件生成 FilterDef并保存到 StandardContext 當(dāng)中，遍歷 StandardContext 的 FilterDef 生成ApplicationFilterConfig并保存到StandardContext當(dāng)中。
• StandardContext負(fù)責(zé)保存核心的FilterDef和ApplicationFilterConfig。

Filter執(zhí)行

Filter整體流程

final class StandardWrapperValve
    extends ValveBase {

    @Override
    public final void invoke(Request request, Response response)
        throws IOException, ServletException {

        // 省略相關(guān)代碼
        ApplicationFilterChain filterChain =
                ApplicationFilterFactory.createFilterChain(request, wrapper, servlet);

        try {
            if ((servlet != null) && (filterChain != null)) {
                if (context.getSwallowOutput()) {
                    try {
                        SystemLogHandler.startCapture();
                        if (request.isAsyncDispatching()) {
                            request.getAsyncContextInternal().doInternalDispatch();
                        } else {
                            filterChain.doFilter(request.getRequest(),
                                    response.getResponse());
                        }
                    } finally {
                    }
                } else {
                    if (request.isAsyncDispatching()) {
                        request.getAsyncContextInternal().doInternalDispatch();
                    } else {
                        filterChain.doFilter
                            (request.getRequest(), response.getResponse());
                    }
                }

            }
        } catch (Throwable e) {

        }

        // Release the filter chain (if any) for this request
        if (filterChain != null) {
            filterChain.release();
        }
    }
}

• Filter 執(zhí)行流程在StandardWrapperValve#invoke 方法當(dāng)中，核心流程包括創(chuàng)建 Filter 調(diào)用鏈和執(zhí)行 Filter 調(diào)用鏈。
• ApplicationFilterFactory.createFilterChain負(fù)責(zé)創(chuàng)建調(diào)用鏈對(duì)象ApplicationFilterChain。
• filterChain.doFilter負(fù)責(zé)執(zhí)行 Filter 調(diào)用鏈。

filterChain的構(gòu)建

public final class ApplicationFilterChain implements FilterChain {
    public static final int INCREMENT = 10;
    private ApplicationFilterConfig[] filters = new ApplicationFilterConfig[0];
    private int pos = 0;
    private int n = 0;
    private Servlet servlet = null;
    private boolean servletSupportsAsync = false;
    private static final StringManager sm = StringManager.getManager(Constants.Package);

    void addFilter(ApplicationFilterConfig filterConfig) {
        for(ApplicationFilterConfig filter:filters)
            if(filter==filterConfig)
                return;

        if (n == filters.length) {
            ApplicationFilterConfig[] newFilters =
                new ApplicationFilterConfig[n + INCREMENT];
            System.arraycopy(filters, 0, newFilters, 0, n);
            filters = newFilters;
        }
        filters[n++] = filterConfig;
    }
}

• ApplicationFilterChain的內(nèi)部維護(hù)ApplicationFilterConfig[] filters來(lái)保存 Filter 對(duì)象。

public final class ApplicationFilterFactory {

    public static ApplicationFilterChain createFilterChain(ServletRequest request,
            Wrapper wrapper, Servlet servlet) {

        ApplicationFilterChain filterChain = null;
        if (request instanceof Request) {
            Request req = (Request) request;
            if (Globals.IS_SECURITY_ENABLED) {
                filterChain = new ApplicationFilterChain();
            } else {
                filterChain = (ApplicationFilterChain) req.getFilterChain();
                if (filterChain == null) {
                    filterChain = new ApplicationFilterChain();
                    req.setFilterChain(filterChain);
                }
            }
        } else {
            filterChain = new ApplicationFilterChain();
        }

        filterChain.setServlet(servlet);
        filterChain.setServletSupportsAsync(wrapper.isAsyncSupported());

        // 通過(guò)StandardContext#findFilterMaps獲取所有的Filter對(duì)象
        StandardContext context = (StandardContext) wrapper.getParent();
        FilterMap filterMaps[] = context.findFilterMaps();

        if ((filterMaps == null) || (filterMaps.length == 0))
            return (filterChain);

        DispatcherType dispatcher =
                (DispatcherType) request.getAttribute(Globals.DISPATCHER_TYPE_ATTR);

        String requestPath = null;
        Object attribute = request.getAttribute(Globals.DISPATCHER_REQUEST_PATH_ATTR);
        if (attribute != null){
            requestPath = attribute.toString();
        }

        String servletName = wrapper.getName();

        // 匹配路徑  Add the relevant path-mapped filters to this filter chain
        for (int i = 0; i < filterMaps.length; i++) {
            if (!matchDispatcher(filterMaps[i] ,dispatcher)) {
                continue;
            }
            if (!matchFiltersURL(filterMaps[i], requestPath))
                continue;

            // 通過(guò)StandardContext#findFilterConfig獲取Filter對(duì)象
            ApplicationFilterConfig filterConfig = (ApplicationFilterConfig)
                context.findFilterConfig(filterMaps[i].getFilterName());
            if (filterConfig == null) {
                continue;
            }
            filterChain.addFilter(filterConfig);
        }

        // 匹配servlet的名字 Add filters that match on servlet name second
        for (int i = 0; i < filterMaps.length; i++) {
            if (!matchDispatcher(filterMaps[i] ,dispatcher)) {
                continue;
            }
            if (!matchFiltersServlet(filterMaps[i], servletName))
                continue;
            ApplicationFilterConfig filterConfig = (ApplicationFilterConfig)
                context.findFilterConfig(filterMaps[i].getFilterName());
            if (filterConfig == null) {
                // FIXME - log configuration problem
                continue;
            }
            filterChain.addFilter(filterConfig);
        }

        // Return the completed filter chain
        return filterChain;
    }
}

• 獲取StandardContext的FilterMap[] 對(duì)象，遍歷FilterMap[]后進(jìn)行規(guī)則匹配，匹配后通過(guò) StandardContext 獲取ApplicationFilterConfig對(duì)象添加到ApplicationFilterChain當(dāng)中。
• StandardContext本身維護(hù)的ApplicationFilterConfig的加載流程已經(jīng)分析，需要了解FilterMap的加載過(guò)程。

Filter 執(zhí)行流程

public final class ApplicationFilterChain implements FilterChain {

    public static final int INCREMENT = 10;
    private ApplicationFilterConfig[] filters = new ApplicationFilterConfig[0];
    private int pos = 0;
    private int n = 0;
    private Servlet servlet = null;
    private boolean servletSupportsAsync = false;
    private static final StringManager sm = StringManager.getManager(Constants.Package);


    @Override
    public void doFilter(ServletRequest request, ServletResponse response)
        throws IOException, ServletException {

        if( Globals.IS_SECURITY_ENABLED ) {
            // 省略相關(guān)代碼
        } else {
            internalDoFilter(request,response);
        }
    }

    private void internalDoFilter(ServletRequest request,
                                  ServletResponse response)
        throws IOException, ServletException {

        if (pos < n) {
            ApplicationFilterConfig filterConfig = filters[pos++];
            try {
                Filter filter = filterConfig.getFilter();

                if( Globals.IS_SECURITY_ENABLED ) {
                    // 省略相關(guān)代碼
                } else {
                    filter.doFilter(request, response, this);
                }
            } catch (IOException | ServletException | RuntimeException e) {

            } catch (Throwable e) {

            }
            return;
        }

        try {
            if ((request instanceof HttpServletRequest) &&
                    (response instanceof HttpServletResponse) &&
                    Globals.IS_SECURITY_ENABLED ) {
                // 省略相關(guān)代碼
            } else {
                servlet.service(request, response);
            }
        } catch (IOException | ServletException | RuntimeException e) {

        } catch (Throwable e) {

        } finally {

        }
    }
}

• ApplicationFilterChain#internalDoFilter負(fù)責(zé) Filter 調(diào)用鏈的執(zhí)行，內(nèi)部通過(guò)維護(hù) Filter 的對(duì)象數(shù)組filters和下標(biāo)pos依次執(zhí)行 Filter。

FilterMap介紹

/**
 * 來(lái)看下這個(gè)類的官方解釋：
 * Web應(yīng)用程序的過(guò)濾器映射的表示形式，如部署描述符中<filter-mapping>元素中的所示
 * 每個(gè)過(guò)濾器映射都必須包含過(guò)濾器名稱以及URL模式或servlet名稱
 * 例如以下配置：
 * <filter-mapping>  
 *    <filter-name>MyFilter</filter-name>  
 *    <url-pattern>/my</url-pattern> 
 * </filter-mapping> 
 * 
 * 說(shuō)白了，這個(gè)FilterMap就是封裝了配置信息中<filter-mapping>標(biāo)簽中的元素
 * 其中還包含了兩個(gè)重點(diǎn)屬性：過(guò)濾器名、過(guò)濾器對(duì)應(yīng)過(guò)濾的url
 */
public class FilterMap extends XmlEncodingBase implements Serializable {
    private boolean matchAllUrlPatterns = false;
    private boolean matchAllServletNames = false;

    // serverlet的名字，對(duì)應(yīng)多個(gè)
    private String[] servletNames = new String[0];
    // 過(guò)濾器名，對(duì)應(yīng)的是<filter-name>中的內(nèi)容
    private String filterName = null; 
    // 過(guò)濾url，對(duì)應(yīng)的是<url-pattern>中的內(nèi)容（可配置多個(gè)<filter-mapping>匹配不同的url，因此是數(shù)組形式）
    private String[] urlPatterns = new String[0]; 
}

• FilterMap的核心字段包括匹配的 Url格式，對(duì)應(yīng)的 Filter 對(duì)象的filterName等。

FilterMap的加載

public class ContextConfig implements LifecycleListener {

    private void configureContext(WebXml webxml) {
        // 省略相關(guān)代碼

        for (FilterMap filterMap : webxml.getFilterMappings()) {
            context.addFilterMap(filterMap);
        }
    }
}

• 通過(guò)webxml.getFilterMappings()獲取過(guò)濾器的filterMap并添加到StandardContext中。
• 上述方式一般在 spring MVC 項(xiàng)目在 web.xml 配置過(guò)濾器的時(shí)候使用。

public class ApplicationFilterRegistration
        implements FilterRegistration.Dynamic {

    private static final StringManager sm =
      StringManager.getManager(Constants.Package);

    private final FilterDef filterDef;
    private final Context context;

    public ApplicationFilterRegistration(FilterDef filterDef,
            Context context) {
        this.filterDef = filterDef;
        this.context = context;
    }

    @Override
    public void addMappingForServletNames(
            EnumSet<DispatcherType> dispatcherTypes, boolean isMatchAfter,
            String... servletNames) {

        FilterMap filterMap = new FilterMap();
        filterMap.setFilterName(filterDef.getFilterName());

        if (dispatcherTypes != null) {
            for (DispatcherType dispatcherType : dispatcherTypes) {
                filterMap.setDispatcher(dispatcherType.name());
            }
        }

        if (servletNames != null) {
            for (String servletName : servletNames) {
                filterMap.addServletName(servletName);
            }

            if (isMatchAfter) {
                context.addFilterMap(filterMap);
            } else {
                context.addFilterMapBefore(filterMap);
            }
        }
    }

    @Override
    public void addMappingForUrlPatterns(
            EnumSet<DispatcherType> dispatcherTypes, boolean isMatchAfter,
            String... urlPatterns) {

        FilterMap filterMap = new FilterMap();
        filterMap.setFilterName(filterDef.getFilterName());

        if (dispatcherTypes != null) {
            for (DispatcherType dispatcherType : dispatcherTypes) {
                filterMap.setDispatcher(dispatcherType.name());
            }
        }

        if (urlPatterns != null) {
            for (String urlPattern : urlPatterns) {
                filterMap.addURLPattern(urlPattern);
            }

            if (isMatchAfter) {
                context.addFilterMap(filterMap);
            } else {
                context.addFilterMapBefore(filterMap);
            }
        }
    }
}

• addMappingForServletNames和addMappingForUrlPatterns負(fù)責(zé)獲取過(guò)濾器的filterMap并添加到StandardContext中。
• 上述方式一般在 spring boot 工程中加載FilterMap使用。

Filter執(zhí)行流程圖

• 通過(guò)解析 web.xml 文件生成 FilterMap并保存到 StandardContext 當(dāng)中。
• ApplicationFilterChaiFactory 負(fù)責(zé)創(chuàng)建 Filter 對(duì)象 ApplicationFilterChain，然后遍歷FilterMap s并添加符合的 Filter 包裝對(duì)象 ApplicationFilterConfig。
• 執(zhí)行ApplicationFilterChain的doFilter方法調(diào)用過(guò)濾器。