快捷導(dǎo)航

JavaWeb使用Session和Cookie實(shí)現(xiàn)登錄認(rèn)證

更新時(shí)間：2017年03月17日 14:34:42 作者：饑渴計(jì)科極客杰鏗

本篇文章主要介紹了JavaWeb使用Session和Cookie實(shí)現(xiàn)登錄認(rèn)證，具有一定的參考價(jià)值，感興趣的小伙伴們可以參考一下。

后臺(tái)管理頁面往往需要登錄才可以進(jìn)行操作，這時(shí)就需要Seession來記錄登錄狀態(tài)

要實(shí)現(xiàn)起來也是非常簡(jiǎn)單，只需要自定義一個(gè)HandlerInterceptor就行了

自定義的HandlerInterceptor也只有短短幾行代碼

public class LoginInterceptor implements HandlerInterceptor {

  @Override
  public void afterCompletion(HttpServletRequest request,
                HttpServletResponse response, Object obj, Exception err)
      throws Exception {
  }

  @Override
  public void postHandle(HttpServletRequest request, HttpServletResponse response,
              Object obj, ModelAndView mav) throws Exception {

  }

  @Override
  public boolean preHandle(HttpServletRequest request, HttpServletResponse response,
               Object obj) throws Exception {
    //獲取session里的登錄狀態(tài)值
    String str = (String) request.getSession().getAttribute("isLogin");
    //如果登錄狀態(tài)不為空則返回true，返回true則會(huì)執(zhí)行相應(yīng)controller的方法
    if(str!=null){
      return true;
    }
    //如果登錄狀態(tài)為空則重定向到登錄頁面，并返回false，不執(zhí)行原來controller的方法
    response.sendRedirect("/backend/loginPage");
    return false;
  }
}

Controller代碼

@Controller
@RequestMapping("/backend")
public class BackendController {

  @RequestMapping(value = "/loginPage", method = {RequestMethod.GET})
  public String loginPage(HttpServletRequest request,String account, String password){
    return "login";
  }

  @RequestMapping(value = "/login", method = {RequestMethod.POST})
  public String login(HttpServletRequest request,RedirectAttributes model, String account, String password){
    //驗(yàn)證賬號(hào)密碼，如果符合則改變session里的狀態(tài)，并重定向到主頁
    if ("jack".equals(account)&&"jack2017".equals(password)){
      request.getSession().setAttribute("isLogin","yes");
      return "redirect:IndexPage";
    }else {
      //密碼錯(cuò)誤則重定向回登錄頁，并返回錯(cuò)誤，因?yàn)槭侵囟ㄏ蛩玫絉edirectAttributes
      model.addFlashAttribute("error","密碼錯(cuò)誤");
      return "redirect:loginPage";
    }
  }
  //登出，移除登錄狀態(tài)并重定向的登錄頁
  @RequestMapping(value = "/loginOut", method = {RequestMethod.GET})
  public String loginOut(HttpServletRequest request) {
    request.getSession().removeAttribute("isLogin");
    return "redirect:loginPage";
  }
  @RequestMapping(value = "/IndexPage", method = {RequestMethod.GET})
  public String IndexPage(HttpServletRequest request){
    return "Index";
  }

}

spring的配置

  <!--省略其他基本配置-->

  <!-- 配置攔截器 -->
  <mvc:interceptors>
    <!-- 配置登陸攔截器 -->
    <mvc:interceptor>
      <!--攔截后臺(tái)頁面的請(qǐng)求-->
      <mvc:mapping path="/backend/**"/>
      <!--不攔截登錄頁和登錄的請(qǐng)求-->
      <mvc:exclude-mapping path="/backend/loginPage"/>
      <mvc:exclude-mapping path="/backend/login"/>
      <bean class="com.ima.Interceptor.LoginInterceptor"></bean>
    </mvc:interceptor>
  </mvc:interceptors>

一個(gè)簡(jiǎn)單的Session實(shí)現(xiàn)登錄認(rèn)證系統(tǒng)就這樣完成了，如果想登錄狀態(tài)退出瀏覽器后仍保留一段時(shí)間的可以將Session改為Cookie

一般情況下我們都會(huì)使用Cookie

Cookie和Session的方法差不多

使用Cookie的自定義HandlerInterceptor

public class LoginInterceptor implements HandlerInterceptor {

  @Override
  public void afterCompletion(HttpServletRequest request,
                HttpServletResponse response, Object obj, Exception err)
      throws Exception {
  }

  @Override
  public void postHandle(HttpServletRequest request, HttpServletResponse response,
              Object obj, ModelAndView mav) throws Exception {

  }

  @Override
  public boolean preHandle(HttpServletRequest request, HttpServletResponse response,
               Object obj) throws Exception {
//    獲取request的cookie
    Cookie[] cookies = request.getCookies();
    if (null==cookies) {
      System.out.println("沒有cookie==============");
    } else {
//      遍歷cookie如果找到登錄狀態(tài)則返回true執(zhí)行原來controller的方法
      for(Cookie cookie : cookies){
        if(cookie.getName().equals("isLogin")){
          return true;
        }
      }
    }
//    沒有找到登錄狀態(tài)則重定向到登錄頁，返回false，不執(zhí)行原來controller的方法
    response.sendRedirect("/backend/loginPage");
    return false;
  }
}

Controller的變化也不大

@Controller
@RequestMapping("/backend")
public class BackendController {

  @RequestMapping(value = "/loginPage", method = {RequestMethod.GET})
  public String loginPage(HttpServletRequest request, String account, String password) {
    return "login";
  }

  @RequestMapping(value = "/login", method = {RequestMethod.POST})
  public String login(HttpServletRequest request, HttpServletResponse response, RedirectAttributes model, String account, String password) {
    if ("edehou".equals(account) && "aidou2017".equals(password)) {
      Cookie cookie = new Cookie("isLogin", "yes");
      cookie.setMaxAge(30 * 60);// 設(shè)置為30min
      cookie.setPath("/");
      response.addCookie(cookie);
      return "redirect:IndexPage";
    } else {
      model.addFlashAttribute("error", "密碼錯(cuò)誤");
      return "redirect:loginPage";
    }
  }

  @RequestMapping(value = "/logOut", method = {RequestMethod.GET})
  public String loginOut(HttpServletRequest request, HttpServletResponse response) {
    Cookie[] cookies = request.getCookies();
    for (Cookie cookie : cookies) {
      if (cookie.getName().equals("isLogin")) {
        cookie.setValue(null);
        cookie.setMaxAge(0);// 立即銷毀cookie
        cookie.setPath("/");
        response.addCookie(cookie);
        break;
      }
    }
    return "redirect:loginPage";
  }

  @RequestMapping(value = "/IndexPage", method = {RequestMethod.GET})
  public String IndexPage(HttpServletRequest request) {
    return "Index";
  }

}

spring的配置和之前的一模一樣

注意

這里只是演示,建議在實(shí)際項(xiàng)目中Cookie的鍵和值要經(jīng)過特殊處理，否則會(huì)引發(fā)安全問題

以上就是本文的全部?jī)?nèi)容，希望對(duì)大家的學(xué)習(xí)有所幫助，也希望大家多多支持腳本之家。

您可能感興趣的文章: