<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-web</artifactId>
</dependency>

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-test</artifactId>
    <scope>test</scope>
</dependency>

<dependency>
    <groupId>org.projectlombok</groupId>
    <artifactId>lombok</artifactId>
    <version>1.18.8</version>
</dependency>

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-redis</artifactId>
    <version>1.4.7.RELEASE</version>
</dependency>

<dependency>
    <groupId>org.springframework.session</groupId>
    <artifactId>spring-session-data-redis</artifactId>
</dependency>

spring.application.name=spring-boot-redis
server.port=9090
# 設(shè)置session的存儲(chǔ)方式，采用redis存儲(chǔ)
spring.session.store-type=redis
# session有效時(shí)長(zhǎng)為15分鐘
server.servlet.session.timeout=PT15M

## Redis 配置
## Redis數(shù)據(jù)庫(kù)索引
spring.redis.database=1
## Redis服務(wù)器地址
spring.redis.host=127.0.0.1
## Redis服務(wù)器連接端口
spring.redis.port=6379
## Redis服務(wù)器連接密碼（默認(rèn)為空）
spring.redis.password=

@Slf4j
@RestController
@RequestMapping(value = "/user")
public class UserController {

    Map<String, User> userMap = new HashMap<>();

    public UserController() {
        //初始化1個(gè)用戶(hù)，用于模擬登錄
        User u1=new User(1,"user1","user1");
        userMap.put("user1",u1);
    }
}

 @GetMapping(value = "/login")
    public String login(String username, String password, HttpSession session) {
        //模擬數(shù)據(jù)庫(kù)的查找
        User user = this.userMap.get(username);
        if (user != null) {
            if (!password.equals(user.getPassword())) {
                return "用戶(hù)名或密碼錯(cuò)誤?。?！";
            } else {
                session.setAttribute(session.getId(), user);
                log.info("登錄成功{}",user);
            }
        } else {
            return "用戶(hù)名或密碼錯(cuò)誤?。?！";
        }
        return "登錄成功！?。?;
    }

    /**
     * 通過(guò)用戶(hù)名查找用戶(hù)
     */
    @GetMapping(value = "/find/{username}")
    public User find(@PathVariable String username) {
        User user=this.userMap.get(username);
        log.info("通過(guò)用戶(hù)名={},查找出用戶(hù){}",username,user);
        return user;
    }

  /**
     *拿當(dāng)前用戶(hù)的session
     */
    @GetMapping(value = "/session")
    public String session(HttpSession session) {
        log.info("當(dāng)前用戶(hù)的session={}",session.getId());
        return session.getId();
    }

  /**
     * 退出登錄
     */
    @GetMapping(value = "/logout")
    public String logout(HttpSession session) {
        log.info("退出登錄session={}",session.getId());
        session.removeAttribute(session.getId());
        return "成功退出??！";
    }

 @Configuration
    public class SecurityInterceptor implements HandlerInterceptor {
        @Override
        public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws IOException {
            HttpSession session = request.getSession();
            //驗(yàn)證當(dāng)前session是否存在，存在返回true true代表能正常處理業(yè)務(wù)邏輯
            if (session.getAttribute(session.getId()) != null){
                log.info("session攔截器，session={}，驗(yàn)證通過(guò)",session.getId());
                return true;
            }
            //session不存在，返回false，并提示請(qǐng)重新登錄。
            response.setCharacterEncoding("UTF-8");
            response.setContentType("application/json; charset=utf-8");
            response.getWriter().write("請(qǐng)登錄！?。。?！");
            log.info("session攔截器，session={}，驗(yàn)證失敗",session.getId());
            return false;
        }
    }

@Slf4j
@Configuration
public class SessionCofig implements WebMvcConfigurer {

    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(new SecurityInterceptor())
                //排除攔截的2個(gè)路徑
                .excludePathPatterns("/user/login")
                .excludePathPatterns("/user/logout")
                //攔截所有URL路徑
                .addPathPatterns("/**");
    }
}