同一賬號在不同瀏覽器不能同時登錄

用的是首先到map（存到一級緩存）里面去找是否有當前賬號，如果沒有則加入map,參數是賬號和sessionid,如果有賬號則判斷sessionid是否相同，如果不相同則刪除之前的賬號，加入新的賬號和sessionId

1.在登陸的時候判斷當前用戶有么有在其他瀏覽器登陸，如果有登陸則把之前的瀏覽器的賬號進行登出

// 登錄成功,保存當前用戶登錄的sessionId
            String sessionID = request.getRequestedSessionId();
            String userAccount = userLoginRsp.getUserAccount();
            if (!SessionSave.getSessionIdSave().containsKey(userAccount)) {
                SessionSave.getSessionIdSave().put(userAccount, sessionID);
            }else if(SessionSave.getSessionIdSave().containsKey(userAccount)&&!sessionID.equals(SessionSave.getSessionIdSave().get(userAccount))){
                SessionSave.getSessionIdSave().remove(userAccount);
                SessionSave.getSessionIdSave().put(userAccount, sessionID);
            }

2.在其他頁面進行請求的時候進行監聽過濾、攔截是否該賬號在其他的瀏覽器重新登陸，如果重新登陸，則該頁面的請求終止跳轉到首頁

在過濾器和攔截器中判斷當前map的sessionid和當前sessionid是否相同，如果不同，之前的sessionId被登出

在servlet-context.xml配置攔截器

<!-- 攔截器 --> 
<mvc:interceptors>
<!-- 登錄攔截 -->
<mvc:interceptor>
<mvc:mapping path="/**"/>
<bean class="com.gta.scm.common.login.LoginInterceptor" />
</mvc:interceptor>
</mvc:interceptors>

在web.xml中配置過濾器

<!-- 過濾JSP頁面，處理session過期用途 -->

<filter>
<filter-name>sessionFilter</filter-name>
<filter-class>com.gta.scm.common.login.CheckSessionFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>sessionFilter</filter-name>
<url-pattern>*.jsp</url-pattern>
</filter-mapping>

過濾器具體實現

public class CheckSessionFilter implements Filter {

    @Override
    public void destroy() {
        // TODO Auto-generated method stub
        
    }

    @Override
    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain)
            throws IOException, ServletException {
        
        HttpServletRequest request = (HttpServletRequest) servletRequest;
        HttpServletResponse response = (HttpServletResponse) servletResponse;
        HttpSession session = request.getSession();
        request.setCharacterEncoding("UTF-8");  
        response.setCharacterEncoding("UTF-8");  
        response.setContentType("text/html;charset=UTF-8");
        
        // 后台session控制 ,無需登錄，允許訪問的地址
        String[] allowUrls = new String[] {"/page/login/loginHelp.jsp","/page/login/login.jsp","/page/common/sessionrun.jsp","page/common/sessionOut.jsp"};  
        //獲取請求地址   
        String url = request.getServletPath().toString();
        String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+request.getContextPath()+"/";
        UserLoginRsp user =(UserLoginRsp) session.getAttribute("user");
        //System.out.println(url);
        boolean b = false;
        for (String strUrl : allowUrls) {  
            if(url.contains(strUrl))  
            {  
                b = true;
                break;
            }  
        } 
        if(!b){
            //獲得session中的用戶  
            boolean buser = true;
            try {
                if(null == user){
                    buser = false;
                    
                }
                
            } catch (Exception e) {
                buser = false;
            }
            if(!buser){
                // 未登錄  
                /*Map<String, HttpSession> map=LoginListenner.getMap();
                if(map!=null&&map.size()>0)
                {
                    if()
                    response.sendRedirect(basePath + "page/common/sessionOut.jsp");//重定向到指定的錯誤界面
                }
                else
                {*/
                    response.sendRedirect(basePath + "page/common/sessionrun.jsp");//重定向到指定的錯誤界面
                /*}*/
                return ;
            }else{
                String sessionId = SessionSave.getSessionIdSave().get(user.getUserAccount());//獲取全局類SessionSave保存賬戶的靜態sessionId
                String currentSessionId = session.getId();//獲取當前的sessionId
                if (!currentSessionId.equals(sessionId)) {//如果兩個sessionId不等，則當前賬戶強制下線，需要重新登錄
                    response.sendRedirect(basePath + "page/common/sessionOut.jsp");//重定向到指定的強制登陸頁面
                }else {// 如果是同一賬戶session則放行請求

                filterChain.doFilter(servletRequest, servletResponse);
                return;
                }
            }
        }else{
            filterChain.doFilter(servletRequest, servletResponse);
            return;
        }
        
    }

    @Override
    public void init(FilterConfig arg0) throws ServletException {
        // TODO Auto-generated method stub
        
    }
    
}

攔截器具體實現

public class LoginInterceptor implements HandlerInterceptor {

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
            throws Exception {
        //創建session  
        HttpSession session =request.getSession(); 
        
        request.setCharacterEncoding("UTF-8");  
        response.setCharacterEncoding("UTF-8");  
        response.setContentType("text/html;charset=UTF-8");
        
        // 后台session控制 ,無需登錄，允許訪問的地址
        String[] allowUrls = new String[] { "login/loginInfo", "login/doLogin","login/loginOut","login/sessionLoginRun","page/common/sessionOut.jsp" };  
        //獲取請求地址   
        String url = request.getServletPath().toString();
        String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+request.getContextPath()+"/";
       System.out.println(url);
        for (String strUrl : allowUrls) {  
            if(url.contains(strUrl))  
            {  
                return true;  
            }  
        } 
        boolean b = true;
        //獲得session中的用戶  
        try {
            UserLoginRsp user =(UserLoginRsp) session.getAttribute("user");
            if(null == user){
                b = false;
                 /**
                 * 攔截目錄下請求，是否為ajax請求
                 *   是：無需登錄，直接訪問（因為我是用於首頁的ajax登錄請求）
                 *   否：跳轉至登錄界面
                 */
                if (request.getHeader("x-requested-with") != null && request.getHeader("x-requested-with").equalsIgnoreCase("XMLHttpRequest")){ 
                    /*Map<String, HttpSession> map=LoginListenner.getMap();
                    if(map!=null&&map.size()>0)
                    {
                        response.getWriter().write("該賬號已在其它地方登錄，請重新登錄！");

                    }
                    else
                    {*/
                        response.getWriter().write("登錄超時");
                    /*}*/
                    return false;
                }
            }
            else
            {
                String sessionId = SessionSave.getSessionIdSave().get(user.getUserAccount());//獲取全局類SessionSave保存賬戶的靜態sessionId
                String currentSessionId = session.getId();//獲取當前的sessionId
                if (!currentSessionId.equals(sessionId)) {//如果兩個sessionId不等，則當前賬戶強制下線，需要重新登錄
                    response.sendRedirect(basePath + "page/common/sessionOut.jsp");//重定向到指定的強制登陸頁面
                }
                // 如果是同一賬戶session則放行請求
            }
            
        } catch (Exception e) {
            b = false;
        }
        if(!b){
            // 未登錄  
            /*Map<String, HttpSession> map=LoginListenner.getMap();
            if(map!=null&&map.size()>0)
            {
                response.sendRedirect(basePath + "page/common/sessionOut.jsp");//重定向到指定的錯誤界面
            }
            else
            {*/
                response.sendRedirect(basePath + "page/common/sessionrun.jsp");//重定向到指定的錯誤界面
            /*}*/
            return false;
        }
        return b;
        
    }

    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler,
            ModelAndView modelAndView) throws Exception {
        // TODO Auto-generated method stub
        
    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex)
            throws Exception {
        // TODO Auto-generated method stub
        
    }
    
}

添加SessionSave類，存儲靜態map

public class SessionSave {
    private static Map<String, String> SessionIdSave = new HashMap<String,String>();
     
    public static Map<String, String> getSessionIdSave() {
        return SessionIdSave;
    }
 
    public static void setSessionIdSave(Map<String, String> sessionIdSave) {
        SessionIdSave = sessionIdSave;
    }


}