拦截器实现简单的登录功能
1、拦截器实现简单登录功能
1.1、登录controller
将登陆后的信息放到session中去,因为一次登录的话,session是不会变的,因为已经和我们的服务器产生了联系
package com.healerjean.moudle;
import com.healerjean.Exceptions.AppException;
import com.healerjean.bean.ResponseBean;
import com.healerjean.utils.ExceptionLogUtils;
import com.healerjean.utils.wechat.WeChatBusinessNoUtil;
import io.swagger.annotations.Api;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.codec.binary.StringUtils;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ResponseBody;
import javax.servlet.http.HttpServletRequest;
@Controller
@Slf4j
@Api(hidden = true,description = "登录控制器")
public class LoginController {
@RequestMapping("login")
@ResponseBody
public ResponseBean login(String username, String password, HttpServletRequest request){
try {
if (StringUtils.equals(username,"healerjean") && StringUtils.equals(password,"password")){
request.getSession().setAttribute("healerjean","healerjean");
return ResponseBean.buildSuccess();
}else {
return ResponseBean.buildFailure();
}
}catch (AppException e){
ExceptionLogUtils.log(e, this.getClass());
return ResponseBean.buildFailure(e.getCode(),e.getMessage());
} catch (Exception e) {
ExceptionLogUtils.log(e, this.getClass());
return ResponseBean.buildFailure(e.getMessage());
}
}
@RequestMapping("loginError")
@ResponseBody
public ResponseBean loginError(){
return ResponseBean.buildFailure("请登录");
}
}
1.2、拦截器进行拦截
package com.healerjean.config.interceptor;
import org.apache.commons.lang.StringUtils;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.IOException;
public class SessionInterceptor implements HandlerInterceptor {
private final String[] NO_FILTER_PAGES = {"/","/login"};
@Override
public boolean preHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o) throws Exception {
String uri = httpServletRequest.getRequestURI();
for (String c : NO_FILTER_PAGES){
if (c.equals(uri)){
return true;
}
}
HttpSession session = httpServletRequest.getSession();
if (session.getAttribute("healerjean") == null){
invalidate(httpServletRequest,httpServletResponse);
return false;
}
return true;
}
@Override
public void postHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o, ModelAndView modelAndView) throws Exception {
}
@Override
public void afterCompletion(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o, Exception e) throws Exception {
}
private void invalidate(HttpServletRequest request, HttpServletResponse response) throws IOException {
request.getSession().invalidate();
String ajax = request.getHeader("X-Requested-With");
if (StringUtils.equals(ajax,"XMLHttpRequest")) {
//设置登陆超时header
response.addHeader("sessionout","true");
} else {
response.sendRedirect("/loginError");
}
}
}
1.3、拦截器配置
package com.healerjean.config;
import com.healerjean.config.interceptor.SessionInterceptor;
import com.healerjean.config.interceptor.UrlInterceptor;
import org.springframework.context.annotation.Configuration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
import javax.annotation.Resource;
/**
* 登录认证拦截器
* 作者: HealerJean
* 日期: 2018/11/8 下午3:57.
* 类描述:
*/
@Configuration
public class InterceptorConfig extends WebMvcConfigurerAdapter {
@Resource
private UrlInterceptor urlInterceptor;
@Override
public void addInterceptors(InterceptorRegistry registry) {
registry.addInterceptor(new SessionInterceptor()).addPathPatterns("/**")
.excludePathPatterns("/healerjean/hui/**")
.excludePathPatterns("/healerjean/taokeData/uploadExcel/**")
.excludePathPatterns("/loginError") ;
super.addInterceptors(registry);
}
}
感兴趣的,欢迎添加博主微信,
哈,博主很乐意和各路好友交流,如果满意,请打赏博主任意金额,感兴趣的在微信转账的时候,备注您的微信或者其他联系方式。添加博主微信哦。
请下方留言吧。可与博主自由讨论哦
微信 | 微信公众号 | 支付宝 |
---|---|---|