public class CookiendSessionInterceptor implements HandlerInterceptor {  

@Override  
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {   
  log.debug("進(jìn)入攔截器");   
  Cookie[] cookies = request.getCookies();   
  if(cookies!=null && cookies.length>0){    
   for(Cookie cookie:cookies) {    
     log.debug("cookie===for遍歷"+cookie.getName());     
     if (StringUtils.equalsIgnoreCase(cookie.getName(), "isLogin")) {      
      log.debug("有cookie ---isLogin，并且cookie還沒過期...");      
      //遍歷cookie如果找到登錄狀態(tài)則返回true繼續(xù)執(zhí)行原來(lái)請(qǐng)求url到controller中的方法      
      return true;     
        }    
      }   
     }   
   log.debug("沒有cookie-----cookie時(shí)間可能到期，重定向到登錄頁(yè)面后請(qǐng)重新登錄。。。");   
   response.sendRedirect("index.html");   
   //返回false，不執(zhí)行原來(lái)controller的方法   
   return false;  }  

 @Override  
 public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception { 
  }  
 @Override 
 public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception { 
  } 

}

@Configuration 
public class WebConfig implements WebMvcConfigurer {  
// 這個(gè)方法是用來(lái)配置靜態(tài)資源的，比如html，js，css，等等  
@Override  
public void addResourceHandlers(ResourceHandlerRegistry registry) { 
 } 

 // 這個(gè)方法用來(lái)注冊(cè)攔截器，我們自己寫好的攔截器需要通過這里添加注冊(cè)才能生效 
@Override  
public void addInterceptors(InterceptorRegistry registry) {   
//addPathPatterns("/**") 表示攔截所有的請(qǐng)求   
//excludePathPatterns("/firstLogin","/zhuce");設(shè)置白名單，就是攔截器不攔截。首次輸入賬號(hào)密碼登錄和注冊(cè)不用攔截！  
//登錄頁(yè)面在攔截器配置中配置的是排除路徑，可以看到即使放行了，還是會(huì)進(jìn)入prehandle，但是不會(huì)執(zhí)行任何操作。   
registry.addInterceptor(new CookiendSessionInterceptor()).addPathPatterns("/**").excludePathPatterns("/",          
                          "/**/login",          
                          "/**/*.html",          
                          "/**/*.js",          
                          "/**/*.css",          
                          "/**/*.jpg"); 
 } 

 }

<!--測(cè)試cookie和sessionid--> 
<form action="/login" method="post">  
 賬號(hào)：<input type="text" name="name1" placeholder="請(qǐng)輸入賬號(hào)"><br>  
 密碼：<input type="password" name="pass1" placeholder="請(qǐng)輸入密碼"><br>  
 <input type="submit" value="登錄"> 
</form>

@Controller 
@Slf4j 
@RequestMapping(value = "/") 
public class TestCookieAndSessionController {  
@Autowired  JdbcTemplate jdbcTemplate;  
/**  * 首次登錄，輸入賬號(hào)和密碼，數(shù)據(jù)庫(kù)驗(yàn)證無(wú)誤后，響應(yīng)返回你設(shè)置的cookie。再次輸入賬號(hào)密碼登錄或者首次登錄后再請(qǐng)求下一個(gè)頁(yè)面，就會(huì)在請(qǐng)求頭中攜帶cookie,  * 前提是cookie沒有過期。  * 此url請(qǐng)求方法不管是首次登錄還是第n次登錄，攔截器都不會(huì)攔截。  * 但是每次（首次或者第N次）登錄都要進(jìn)行，數(shù)據(jù)庫(kù)查詢驗(yàn)證賬號(hào)和密碼。  * 做這個(gè)目的是如果登錄頁(yè)面A，登錄成功后進(jìn)頁(yè)面B，頁(yè)面B有鏈接進(jìn)頁(yè)面C，如果cookie超時(shí)，重新回到登錄頁(yè)面A。（類似單點(diǎn)登錄）  */  

@PostMapping(value = "login")  
public String test(HttpServletRequest request, HttpServletResponse response, @RequestParam("name1")String name,@RequestParam("pass1")String pass) throws Exception{   
 try {    
 Map<String, Object> result= jdbcTemplate.queryForMap("select * from userinfo where name=? and password=?", new Object[]{name, pass});    
  if(result==null || result.size()==0){     
   log.debug("賬號(hào)或者密碼不正確或者此人賬號(hào)沒有注冊(cè)");     
   throw new Exception("賬號(hào)或者密碼不正確或者此人賬號(hào)沒有注冊(cè)！");    
  }else{     
   log.debug("查詢滿足條數(shù)----"+result);     
   Cookie cookie = new Cookie("isLogin", "success");     
   cookie.setMaxAge(30);     
   cookie.setPath("/");    
   response.addCookie(cookie);     
   request.setAttribute("isLogin", name);     
   log.debug("首次登錄，查詢數(shù)據(jù)庫(kù)用戶名和密碼無(wú)誤，登錄成功，設(shè)置cookie成功");     
   return "loginSuccess";    }   
 } catch (DataAccessException e) {    
   e.printStackTrace();    
   return "error1";   
  } 
 } 
 
/**測(cè)試登錄成功后頁(yè)面loginSuccess ，進(jìn)入次頁(yè)demo.html*/  
@PostMapping(value = "sub")  
public String test() throws Exception{  
 return "demo";  
 }  
/** 能進(jìn)到此方法中，cookie一定沒有過期。因?yàn)閿r截器在前面已經(jīng)判斷力。過期，攔截器重定向到登錄頁(yè)面。過期退出登錄，清空cookie。*/ 
@RequestMapping(value = "exit",method = RequestMethod.POST)  
public String exit(HttpServletRequest request,HttpServletResponse response) throws Exception{   
 Cookie[] cookies = request.getCookies();   
 for(Cookie cookie:cookies){   
 if("isLogin".equalsIgnoreCase(cookie.getName())){    
  log.debug("退出登錄時(shí),cookie還沒過期，清空cookie");     
  cookie.setMaxAge(0);     
  cookie.setValue(null);     
  cookie.setPath("/");    
  response.addCookie(cookie);    
  break;    
  }   
  }   
 //重定向到登錄頁(yè)面   
 return "redirect:index.html";  
  } 

}

/**利用session進(jìn)行登錄驗(yàn)證*/ 
@RequestMapping(value = "login1",method = RequestMethod.POST)  
public String testSession(HttpServletRequest request,
       HttpServletResponse response,
       @RequestParam("name1")String name,      
       @RequestParam("pass1")String pass) throws Exception{   
 try {   
 Map<String, Object> result= jdbcTemplate.queryForMap("select * from userinfo where name=? and password=?", new Object[]{name, pass});    
  if(result!=null && result.size()>0){     
  String requestURI = request.getRequestURI();     
  log.debug("此次請(qǐng)求的url:{}",requestURI);     
  HttpSession session = request.getSession();     
  log.debug("session="+session+"session.getId()="+session.getId()+"session.getMaxInactiveInterval()="+session.getMaxInactiveInterval());     
  session.setAttribute("isLogin1", "true1");    
  }   
 } catch (DataAccessException e) {    
  e.printStackTrace();   
  return "error1";  
 }  
 return "loginSuccess"; 
 } 

 //登出，移除登錄狀態(tài)并重定向的登錄頁(yè)  
@RequestMapping(value = "/exit1", method = RequestMethod.POST)  
public String loginOut(HttpServletRequest request) {   
 request.getSession().removeAttribute("isLogin1");   
 log.debug("進(jìn)入exit1方法，移除isLogin1");   
 return "redirect:index.html";  
 }
 }