先看看我遇到的问题:
@ResponseBody
@RequestMapping("/logout")
public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
Json j = new Json();
if (session != null) {
// session.invalidate();
session.removeAttribute("U");
}
Cookie[] cookies = request.getCookies();
if (cookies != null) {
for (Cookie cookie : cookies) {
if ("userCookie".equals(cookie.getName())) {
cookie.setValue("");
cookie.setMaxAge();
response.addCookie(cookie);
}
}
}
j.setSuccess(true);
j.setMsg("注销成功!");
return j;
}
然后看到的cookie是:
拦截器这边:
public class PermissionInterceptor implements HandlerInterceptor { @Override
public boolean preHandle(HttpServletRequest request,
HttpServletResponse response, Object handler) throws Exception {
String requestUri = request.getRequestURI();
String contextPath = request.getContextPath();
String url = requestUri.substring(contextPath.length());
if (excludeUrls.contains(url)) {
return true;
}
HttpSession session = request.getSession();
User u = (User) session.getAttribute("U");
if (null==u) {
Cookie[] cookies = request.getCookies();
if (cookies!=null && cookies.length>) {
for (Cookie cookie : cookies) {
if ("userCookie".equals(cookie.getName())) {
String name = cookie.getValue();
if (BaseUtil.isEmpty(name)) {
String[] ss = name.split(",");
if (userService.exsit("name", ss[].trim(), "pwd", ss[].trim())) {
u = userService.findEntity("name", ss[].trim(), "pwd", ss[].trim());
session.setAttribute("U", u);
break;
}
}
}
}
}
} }
看到的结果是:
看出问题了吧,cookie 竟然不一样,不知道看到此处,你是否知道问题出在哪里。
我还发表了一个问题讨论:http://www.oschina.net/question/6556_233128
下面我们就进入正题了。
先看spring mvc 的拦截器:
package com.tw.interceptor; import java.util.List; import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession; import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView; import com.tw.entity.sys.Permission;
import com.tw.entity.sys.RolesPermissionRel;
import com.tw.entity.sys.User;
import com.tw.entity.sys.UserRoleRel;
import com.tw.service.sys.PermissionService;
import com.tw.service.sys.RolesPermissionRelService;
import com.tw.service.sys.UserRoleRelService;
import com.tw.service.sys.UserService;
import com.tw.util.BaseUtil;
import com.tw.util.MD5; public class PermissionInterceptor implements HandlerInterceptor { @Autowired
private UserRoleRelService userRoleRelService;
@Autowired
private RolesPermissionRelService rolesPermissionRelService;
@Autowired
private PermissionService permissionService;
@Autowired
private UserService userService;
private ListexcludeUrls; public ListgetExcludeUrls() {
return excludeUrls;
} public void setExcludeUrls(ListexcludeUrls) {
this.excludeUrls = excludeUrls;
} @Override
public boolean preHandle(HttpServletRequest request,
HttpServletResponse response, Object handler) throws Exception {
String requestUri = request.getRequestURI();
String contextPath = request.getContextPath();
String url = requestUri.substring(contextPath.length());
if (excludeUrls.contains(url)) {
return true;
}
HttpSession session = request.getSession();
User u = (User) session.getAttribute("U");
if (null==u) {
Cookie[] cookies = request.getCookies();
if (cookies!=null && cookies.length>) {
for (Cookie cookie : cookies) {
if ("userCookie".equals(cookie.getName())) {
String name = cookie.getValue();
if (BaseUtil.isEmpty(name)) {
String[] ss = name.split(",");
if (userService.exsit("name", ss[].trim(), "pwd", ss[].trim())) {
u = userService.findEntity("name", ss[].trim(), "pwd", ss[].trim());
session.setAttribute("U", u);
break;
}
}
}
}
}
}
if (null==u) {
response.sendRedirect("login.jsp");
return false;
} HandlerMethod method = (HandlerMethod)handler;
Perm perm = method.getMethodAnnotation(Perm.class);
if (perm==null) {
return true;
}
Listur = userRoleRelService.findByProperty("id.userId", u.getId());
for (UserRoleRel userRoleRel : ur) {
Listrp = rolesPermissionRelService.findByProperty("id.roleId", userRoleRel.getId().getRoleId());
for (RolesPermissionRel rolesPermissionRel : rp) {
Permission permission = permissionService.find(rolesPermissionRel.getId().getPermissionId());
if (perm.privilegeValue().equals(permission.getPermissionCode())) {
return true;
}
}
}
request.getRequestDispatcher("/error/noSecurity.jsp").forward(request, response); return false;
} @Override
public void postHandle(HttpServletRequest request,
HttpServletResponse response, Object handler,
ModelAndView modelAndView) throws Exception { } @Override
public void afterCompletion(HttpServletRequest request,
HttpServletResponse response, Object handler, Exception ex)
throws Exception { }
}
再看登录实现:
@ResponseBody
@RequestMapping("/login")
public Json login(String name,String pwd,String remember,Model model,HttpSession session,
HttpServletRequest request,HttpServletResponse response) {
Json json = new Json(); if (userService.exsit("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()))) {
User u = userService.findEntity("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()));
if (u.getCancel().equals("")) {
if ("yes".equals(remember.trim())) {
Cookie cookie = new Cookie("userCookie", u.getName() + "," + u.getPwd());
cookie.setMaxAge( * * * );//保存两周
cookie.setPath("/");
response.addCookie(cookie);
}
session.setAttribute("U", u);
// return "redirect:/main";
json.setMsg("登陆成功");
json.setSuccess(true);
return json;
}else {
json.setMsg("对不起你的账号还没有通过邮箱验证");
// model.addAttribute("errorMsg", "对不起你的账号还没有通过邮箱验证");
}
}else {
json.setMsg("用户名或密码错误");
// model.addAttribute("errorMsg", "用户名或密码错误");
}
return json;
// return "login";
}
还有注销的:
@ResponseBody
@RequestMapping("/logout")
public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
Json j = new Json();
if (session != null) {
// session.invalidate();
session.removeAttribute("U");
}
Cookie[] cookies = request.getCookies();
if (cookies != null) {
for (Cookie cookie : cookies) {
if ("userCookie".equals(cookie.getName())) {
Cookie cookie2 = new Cookie("userCookie", null);
cookie2.setMaxAge();
cookie2.setPath("/");
response.addCookie(cookie2);
break;
}
}
}
j.setSuccess(true);
j.setMsg("注销成功!");
return j;
}
看到这里你是否已经知道了之前问题的存在原因呢?
我先不考诉你们,谁知道这里面的错误原因可以在上面留言哦!
我想页面就简单多了,因为是执行方法之前拦截判断的,所以只要你存放有cookie无论调用那个页面都可以自动实现登陆。
补充一个问题:HTTP Status 500 - Request processing failed; nested exception is java.lang.IllegalArgumentException: Control character in cookie value or attribute.
看到这样的错误你知道是怎么回事么?