初学SpringMVC之登录验证判断

时间:2024-07-16 07:14:44

在 WEB-INF 目录下创建 jsp 目录,再创建两个 jsp 页面

login.jsp:

在 WEB-INF 目录下所有页面或资源,只能通过 controller,或是 servlet 进行访问

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
	<head>
		<meta charset="utf-8">
		<title></title>
	</head>
	<body>

	<%-- 在 WEB-INF 目录下所有页面或资源,只能通过 controller,或是 servlet 进行访问 --%>
		<h1>登录</h1>
		<form action="${pageContext.request.contextPath}/user/login" method="post">
			用户名:<input type="text" name="username"/>
			密码:<input type="text" name="password"/>
			<input type="submit" value="登录">
		</form>
	</body>
</html>

main.jsp 随便写点,比如首页

写个控制器,获取用户 Session 值

package com.demo.controller;

import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;

import javax.servlet.http.HttpSession;

@Controller
@RequestMapping("/user")
public class LoginController {

    @RequestMapping("/main")
    public String ma(){
        return "main";
    }

    @RequestMapping("/go")
    public String go(){
        return "login";
    }

    @RequestMapping("/login")
    public String login(HttpSession session,String username,String password){
        //把用户信息存在 session 中
        session.setAttribute("userLoginInfo",username);
        return "main";
    }
}

index.jsp:写两个链接

<%@ page contentType="text/html;charset=UTF-8" language="java" %>
<html>
	<head>
		<meta charset="utf-8">
		<title></title>
	</head>
	<body>
		<h1>
			<a href="${pageContext.request.contextPath}/user/go">登录</a>
		</h1>
		<h1>
			<a href="${pageContext.request.contextPath}/user/main">首页</a>
		</h1>
	</body>
</html>

如果想要未登录不准进首页的话,可以加拦截器

实现 HandlerInterceptor 拦截器接口

重写 preHandle() 方法

没有 SessionId,forward 转发去登录页

package com.demo.config;

import org.springframework.web.servlet.HandlerInterceptor;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

public class LoginInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

        HttpSession session = request.getSession();

        if(request.getRequestURI().contains("login")){
            return true;
        }

        if(session.getAttribute("userLoginInfo")!=null){
            return true;
        }

        request.getRequestDispatcher("/WEB-INF/jsp/login.jsp").forward(request,response);
        return false;

    }
}

配置拦截器:

    <mvc:interceptors>
        <mvc:interceptor>
            <mvc:mapping path="/user/**"/>
            <bean class="com.demo.config.LoginInterceptor"/>
        </mvc:interceptor>
    </mvc:interceptors>

记录一下遇到的 bug:

点击链接报了这个错,表示已经在 controller 包下的另一个类用了相同的地址,修改自己配置的地址即可