spring mvc +cookie+拦截器功能 实现系统自动登陆

时间:2021-09-01 14:33:14

先看看我遇到的问题:

@ResponseBody
@RequestMapping("/logout")
public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
Json j = new Json();
if (session != null) {
// session.invalidate();
session.removeAttribute("U");
}
Cookie[] cookies = request.getCookies();
if (cookies != null) {
for (Cookie cookie : cookies) {
if ("userCookie".equals(cookie.getName())) {
cookie.setValue("");
cookie.setMaxAge();
response.addCookie(cookie);
}
}
}
j.setSuccess(true);
j.setMsg("注销成功!");
return j;
}

然后看到的cookie是:

spring mvc +cookie+拦截器功能 实现系统自动登陆

拦截器这边:

public class PermissionInterceptor implements HandlerInterceptor {

@Override
public boolean preHandle(HttpServletRequest request,
HttpServletResponse response, Object handler) throws Exception {
String requestUri = request.getRequestURI();
String contextPath = request.getContextPath();
String url = requestUri.substring(contextPath.length());
if (excludeUrls.contains(url)) {
return true;
}
HttpSession session = request.getSession();
User u = (User) session.getAttribute("U");
if (null==u) {
Cookie[] cookies = request.getCookies();
if (cookies!=null && cookies.length>) {
for (Cookie cookie : cookies) {
if ("userCookie".equals(cookie.getName())) {
String name = cookie.getValue();
if (BaseUtil.isEmpty(name)) {
String[] ss = name.split(",");
if (userService.exsit("name", ss[].trim(), "pwd", ss[].trim())) {
u = userService.findEntity("name", ss[].trim(), "pwd", ss[].trim());
session.setAttribute("U", u);
break;
}
}
}
}
}
} }

看到的结果是:

spring mvc +cookie+拦截器功能 实现系统自动登陆

看出问题了吧,cookie 竟然不一样,不知道看到此处,你是否知道问题出在哪里。

我还发表了一个问题讨论:http://www.oschina.net/question/6556_233128

下面我们就进入正题了。

先看spring mvc 的拦截器:

package com.tw.interceptor;

import java.util.List;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView; import com.tw.entity.sys.Permission;
import com.tw.entity.sys.RolesPermissionRel;
import com.tw.entity.sys.User;
import com.tw.entity.sys.UserRoleRel;
import com.tw.service.sys.PermissionService;
import com.tw.service.sys.RolesPermissionRelService;
import com.tw.service.sys.UserRoleRelService;
import com.tw.service.sys.UserService;
import com.tw.util.BaseUtil;
import com.tw.util.MD5; public class PermissionInterceptor implements HandlerInterceptor { @Autowired
private UserRoleRelService userRoleRelService;
@Autowired
private RolesPermissionRelService rolesPermissionRelService;
@Autowired
private PermissionService permissionService;
@Autowired
private UserService userService;
private ListexcludeUrls; public ListgetExcludeUrls() {
return excludeUrls;
} public void setExcludeUrls(ListexcludeUrls) {
this.excludeUrls = excludeUrls;
} @Override
public boolean preHandle(HttpServletRequest request,
HttpServletResponse response, Object handler) throws Exception {
String requestUri = request.getRequestURI();
String contextPath = request.getContextPath();
String url = requestUri.substring(contextPath.length());
if (excludeUrls.contains(url)) {
return true;
}
HttpSession session = request.getSession();
User u = (User) session.getAttribute("U");
if (null==u) {
Cookie[] cookies = request.getCookies();
if (cookies!=null && cookies.length>) {
for (Cookie cookie : cookies) {
if ("userCookie".equals(cookie.getName())) {
String name = cookie.getValue();
if (BaseUtil.isEmpty(name)) {
String[] ss = name.split(",");
if (userService.exsit("name", ss[].trim(), "pwd", ss[].trim())) {
u = userService.findEntity("name", ss[].trim(), "pwd", ss[].trim());
session.setAttribute("U", u);
break;
}
}
}
}
}
}
if (null==u) {
response.sendRedirect("login.jsp");
return false;
} HandlerMethod method = (HandlerMethod)handler;
Perm perm = method.getMethodAnnotation(Perm.class);
if (perm==null) {
return true;
}
Listur = userRoleRelService.findByProperty("id.userId", u.getId());
for (UserRoleRel userRoleRel : ur) {
Listrp = rolesPermissionRelService.findByProperty("id.roleId", userRoleRel.getId().getRoleId());
for (RolesPermissionRel rolesPermissionRel : rp) {
Permission permission = permissionService.find(rolesPermissionRel.getId().getPermissionId());
if (perm.privilegeValue().equals(permission.getPermissionCode())) {
return true;
}
}
}
request.getRequestDispatcher("/error/noSecurity.jsp").forward(request, response); return false;
} @Override
public void postHandle(HttpServletRequest request,
HttpServletResponse response, Object handler,
ModelAndView modelAndView) throws Exception { } @Override
public void afterCompletion(HttpServletRequest request,
HttpServletResponse response, Object handler, Exception ex)
throws Exception { }
}

再看登录实现:

@ResponseBody
@RequestMapping("/login")
public Json login(String name,String pwd,String remember,Model model,HttpSession session,
HttpServletRequest request,HttpServletResponse response) {
Json json = new Json(); if (userService.exsit("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()))) {
User u = userService.findEntity("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()));
if (u.getCancel().equals("")) {
if ("yes".equals(remember.trim())) {
Cookie cookie = new Cookie("userCookie", u.getName() + "," + u.getPwd());
cookie.setMaxAge( * * * );//保存两周
cookie.setPath("/");
response.addCookie(cookie);
}
session.setAttribute("U", u);
// return "redirect:/main";
json.setMsg("登陆成功");
json.setSuccess(true);
return json;
}else {
json.setMsg("对不起你的账号还没有通过邮箱验证");
// model.addAttribute("errorMsg", "对不起你的账号还没有通过邮箱验证");
}
}else {
json.setMsg("用户名或密码错误");
// model.addAttribute("errorMsg", "用户名或密码错误");
}
return json;
// return "login";
}

还有注销的:

@ResponseBody
@RequestMapping("/logout")
public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
Json j = new Json();
if (session != null) {
// session.invalidate();
session.removeAttribute("U");
}
Cookie[] cookies = request.getCookies();
if (cookies != null) {
for (Cookie cookie : cookies) {
if ("userCookie".equals(cookie.getName())) {
Cookie cookie2 = new Cookie("userCookie", null);
cookie2.setMaxAge();
cookie2.setPath("/");
response.addCookie(cookie2);
break;
}
}
}
j.setSuccess(true);
j.setMsg("注销成功!");
return j;
}

看到这里你是否已经知道了之前问题的存在原因呢?

我先不考诉你们,谁知道这里面的错误原因可以在上面留言哦!

我想页面就简单多了,因为是执行方法之前拦截判断的,所以只要你存放有cookie无论调用那个页面都可以自动实现登陆。

补充一个问题:HTTP Status 500 - Request processing failed; nested exception is java.lang.IllegalArgumentException: Control character in cookie value or attribute.

看到这样的错误你知道是怎么回事么?