spring mvc +cookie+攔截器功能 實現系統自動登陸

先看看我遇到的問題：

@ResponseBody
    @RequestMapping("/logout")
    public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
        Json j = new Json();
        if (session != null) {
//          session.invalidate();
            session.removeAttribute("U");
        }
        Cookie[] cookies = request.getCookies();
        if (cookies != null) {
            for (Cookie cookie : cookies) {
                if ("userCookie".equals(cookie.getName())) {
                    cookie.setValue("");
                    cookie.setMaxAge(0);
                    response.addCookie(cookie);
                }
            }
        }
        j.setSuccess(true);
        j.setMsg("注銷成功！");
        return j;
    }

然后看到的cookie是：

攔截器這邊：

public class PermissionInterceptor implements HandlerInterceptor {
 
 
@Override
    public boolean preHandle(HttpServletRequest request,
            HttpServletResponse response, Object handler) throws Exception {
        String requestUri = request.getRequestURI();
        String contextPath = request.getContextPath();
        String url = requestUri.substring(contextPath.length());
        if (excludeUrls.contains(url)) {
            return true;
        }
        HttpSession session = request.getSession();
        User u = (User) session.getAttribute("U");
        if (null==u) {
            Cookie[] cookies = request.getCookies();
            if (cookies!=null && cookies.length>0) {
                for (Cookie cookie : cookies) {
                    if ("userCookie".equals(cookie.getName())) {
                        String name = cookie.getValue();
                        if (BaseUtil.isEmpty(name)) {
                            String[] ss = name.split(",");
                            if (userService.exsit("name", ss[0].trim(), "pwd", ss[1].trim())) {
                                u = userService.findEntity("name", ss[0].trim(), "pwd", ss[1].trim());
                                session.setAttribute("U", u);
                                break;
                            }
                        }
                    }
                }
            }
        }
 
 
}

看到的結果是：

看出問題了吧，cookie 竟然不一樣，不知道看到此處，你是否知道問題出在哪里。

我還發表了一個問題討論：http://www.oschina.net/question/6556_233128

下面我們就進入正題了。

先看spring mvc 的攔截器：

package com.tw.interceptor;

import java.util.List;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

import com.tw.entity.sys.Permission;
import com.tw.entity.sys.RolesPermissionRel;
import com.tw.entity.sys.User;
import com.tw.entity.sys.UserRoleRel;
import com.tw.service.sys.PermissionService;
import com.tw.service.sys.RolesPermissionRelService;
import com.tw.service.sys.UserRoleRelService;
import com.tw.service.sys.UserService;
import com.tw.util.BaseUtil;
import com.tw.util.MD5;

public class PermissionInterceptor implements HandlerInterceptor {

    @Autowired
    private UserRoleRelService userRoleRelService;
    @Autowired
    private RolesPermissionRelService rolesPermissionRelService;
    @Autowired
    private PermissionService permissionService;
    @Autowired
    private UserService userService;
    private ListexcludeUrls;
    
    public ListgetExcludeUrls() {
        return excludeUrls;
    }

    public void setExcludeUrls(ListexcludeUrls) {
        this.excludeUrls = excludeUrls;
    }

    @Override
    public boolean preHandle(HttpServletRequest request,
            HttpServletResponse response, Object handler) throws Exception {
        String requestUri = request.getRequestURI();
        String contextPath = request.getContextPath();
        String url = requestUri.substring(contextPath.length());
        if (excludeUrls.contains(url)) {
            return true;
        }
        HttpSession session = request.getSession();
        User u = (User) session.getAttribute("U");
        if (null==u) {
            Cookie[] cookies = request.getCookies();
            if (cookies!=null && cookies.length>0) {
                for (Cookie cookie : cookies) {
                    if ("userCookie".equals(cookie.getName())) {
                        String name = cookie.getValue();
                        if (BaseUtil.isEmpty(name)) {
                            String[] ss = name.split(",");
                            if (userService.exsit("name", ss[0].trim(), "pwd", ss[1].trim())) {
                                u = userService.findEntity("name", ss[0].trim(), "pwd", ss[1].trim());
                                session.setAttribute("U", u);
                                break;
                            }
                        }
                    }
                }
            }
        }
        if (null==u) {
            response.sendRedirect("login.jsp");
            return false;
        }
        
        HandlerMethod method = (HandlerMethod)handler;
        Perm perm = method.getMethodAnnotation(Perm.class);
        if (perm==null) {
            return true;
        }
        Listur = userRoleRelService.findByProperty("id.userId", u.getId());
        for (UserRoleRel userRoleRel : ur) {
            Listrp = rolesPermissionRelService.findByProperty("id.roleId", userRoleRel.getId().getRoleId());
            for (RolesPermissionRel rolesPermissionRel : rp) {
                Permission permission = permissionService.find(rolesPermissionRel.getId().getPermissionId());
                if (perm.privilegeValue().equals(permission.getPermissionCode())) {
                    return true;
                }
            }
        }
        request.getRequestDispatcher("/error/noSecurity.jsp").forward(request, response);
        
        return false;
    }

    @Override
    public void postHandle(HttpServletRequest request,
            HttpServletResponse response, Object handler,
            ModelAndView modelAndView) throws Exception {
        
    }

    @Override
    public void afterCompletion(HttpServletRequest request,
            HttpServletResponse response, Object handler, Exception ex)
            throws Exception {
        
    }
}

再看登錄實現：

@ResponseBody
    @RequestMapping("/login")
    public Json login(String name,String pwd,String remember,Model model,HttpSession session,
            HttpServletRequest request,HttpServletResponse response) {
        Json json = new Json();
        
        if (userService.exsit("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()))) {
            User u = userService.findEntity("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()));
            if (u.getCancel().equals("1")) {
                if ("yes".equals(remember.trim())) {
                    Cookie cookie = new Cookie("userCookie", u.getName() + ","  + u.getPwd());
                    cookie.setMaxAge(60 * 60 * 24 * 14);//保存兩周
                    cookie.setPath("/");
                    response.addCookie(cookie);
                }
                session.setAttribute("U", u);
//                return "redirect:/main";
                json.setMsg("登陸成功");
                json.setSuccess(true);
                return json;
            }else {
                json.setMsg("對不起你的賬號還沒有通過郵箱驗證");
//                model.addAttribute("errorMsg", "對不起你的賬號還沒有通過郵箱驗證");
            }
        }else {
            json.setMsg("用戶名或密碼錯誤");
//            model.addAttribute("errorMsg", "用戶名或密碼錯誤");
        }
        return json;
//        return "login";
    }

還有注銷的：

@ResponseBody
    @RequestMapping("/logout")
    public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
        Json j = new Json();
        if (session != null) {
//            session.invalidate();
            session.removeAttribute("U");
        }
        Cookie[] cookies = request.getCookies();
        if (cookies != null) {
            for (Cookie cookie : cookies) {
                if ("userCookie".equals(cookie.getName())) {
                    Cookie cookie2 = new Cookie("userCookie", null);
                    cookie2.setMaxAge(0);
                    cookie2.setPath("/");
                    response.addCookie(cookie2);
                    break;
                }
            }
        }
        j.setSuccess(true);
        j.setMsg("注銷成功！");
        return j;
    }

看到這里你是否已經知道了之前問題的存在原因呢？

我先不考訴你們，誰知道這里面的錯誤原因可以在上面留言哦！

我想頁面就簡單多了，因為是執行方法之前攔截判斷的，所以只要你存放有cookie無論調用那個頁面都可以自動實現登陸。

補充一個問題：HTTP Status 500 - Request processing failed; nested exception is java.lang.IllegalArgumentException: Control character in cookie value or attribute.

看到這樣的錯誤你知道是怎么回事么？