/** 
 * 
 * @ClassName: LoginListenner 
 * @Description: 登錄監(jiān)聽類-處理同一時間只允許賬號，單地點登錄 
 * @author mr_smile2014 605051929@qq.com 
 * @date 2014年11月12日 下午2:23:41 
 * 
 */ 
public class LoginListenner implements HttpSessionAttributeListener { 
 /** 
 * 用于存放賬號和session對應(yīng)關(guān)系的map 
 */ 
 private Map<String, HttpSession> map = new HashMap<String, HttpSession>(); 
 
 /** 
 * 當(dāng)向session中放入數(shù)據(jù)觸發(fā) 
 */ 
 public void attributeAdded(HttpSessionBindingEvent event) { 
 String name = event.getName(); 
 
 if (name.equals("loginuser")) { 
  User user = (User) event.getValue(); 
  if (map.get(user.getUserName()) != null) { 
  HttpSession session = map.get(user.getUserName()); 
  session.removeAttribute(user.getUserName()); 
  session.invalidate(); 
  } 
  map.put(user.getUserName(), event.getSession()); 
 } 
 
 } 
 /** 
 * 當(dāng)向session中移除數(shù)據(jù)觸發(fā) 
 */ 
 public void attributeRemoved(HttpSessionBindingEvent event) { 
 String name = event.getName(); 
 
 if (name.equals("loginuser")) { 
  User user = (User) event.getValue(); 
  map.remove(user.getUserName()); 
 
 } 
 } 
 
 public void attributeReplaced(HttpSessionBindingEvent event) { 
 
 } 
 
 public Map<String, HttpSession> getMap() { 
 return map; 
 } 
 
 public void setMap(Map<String, HttpSession> map) { 
 this.map = map; 
 } 
 
} 

/** 
 * 登錄 
 * 
 * @param userName 
 * @param passWord 
 * @param code 
 *  驗證碼 
 * @param type 
 *  登陸類型（商戶，操作員） 
 * @param model 
 * @return 
 */ 
 @RequestMapping("/login") 
 public String login(String account, String passWord, String code, 
  Model model, HttpServletRequest request) { 
  //登錄驗證并返回登錄成功用戶對象 
  User user=loginResult(userPhone, passWord, code, request); 
  //把用戶對象放入到session中，將會觸發(fā)LoginListenner中的attributeAdded事件 
  request.getSession().setAttribute("loginuser", user); 
  
  } 

<!--一個用戶只能在一個主機(jī)登錄 --> 
 <listener> 
 <listener-class>com.test.listenner.LoginListenner</listener-class> 
</listener>