spring mvc +cookie+拦截器功能 实现系统自动登陆

先看看我遇到的问题：

@ResponseBody
    @RequestMapping("/logout")
    public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
        Json j = new Json();
        if (session != null) {
//          session.invalidate();
            session.removeAttribute("U");
        }
        Cookie[] cookies = request.getCookies();
        if (cookies != null) {
            for (Cookie cookie : cookies) {
                if ("userCookie".equals(cookie.getName())) {
                    cookie.setValue("");
                    cookie.setMaxAge(0);
                    response.addCookie(cookie);
                }
            }
        }
        j.setSuccess(true);
        j.setMsg("注销成功！");
        return j;
    }

然后看到的cookie是：

拦截器这边：

public class PermissionInterceptor implements HandlerInterceptor {

@Override
    public boolean preHandle(HttpServletRequest request,
            HttpServletResponse response, Object handler) throws Exception {
        String requestUri = request.getRequestURI();
        String contextPath = request.getContextPath();
        String url = requestUri.substring(contextPath.length());
        if (excludeUrls.contains(url)) {
            return true;
        }
        HttpSession session = request.getSession();
        User u = (User) session.getAttribute("U");
        if (null==u) {
            Cookie[] cookies = request.getCookies();
            if (cookies!=null && cookies.length>0) {
                for (Cookie cookie : cookies) {
                    if ("userCookie".equals(cookie.getName())) {
                        String name = cookie.getValue();
                        if (BaseUtil.isEmpty(name)) {
                            String[] ss = name.split(",");
                            if (userService.exsit("name", ss[0].trim(), "pwd", ss[1].trim())) {
                                u = userService.findEntity("name", ss[0].trim(), "pwd", ss[1].trim());
                                session.setAttribute("U", u);
                                break;
                            }
                        }
                    }
                }
            }
        }

}

看到的结果是：

看出问题了吧，cookie 竟然不一样，不知道看到此处，你是否知道问题出在哪里。

我还发表了一个问题讨论：http://www.oschina.net/question/6556_233128

下面我们就进入正题了。

先看spring mvc 的拦截器：

package com.tw.interceptor;

import java.util.List;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

import com.tw.entity.sys.Permission;
import com.tw.entity.sys.RolesPermissionRel;
import com.tw.entity.sys.User;
import com.tw.entity.sys.UserRoleRel;
import com.tw.service.sys.PermissionService;
import com.tw.service.sys.RolesPermissionRelService;
import com.tw.service.sys.UserRoleRelService;
import com.tw.service.sys.UserService;
import com.tw.util.BaseUtil;
import com.tw.util.MD5;

public class PermissionInterceptor implements HandlerInterceptor {

    @Autowired
    private UserRoleRelService userRoleRelService;
    @Autowired
    private RolesPermissionRelService rolesPermissionRelService;
    @Autowired
    private PermissionService permissionService;
    @Autowired
    private UserService userService;
    private ListexcludeUrls;

    public ListgetExcludeUrls() {
        return excludeUrls;
    }

    public void setExcludeUrls(ListexcludeUrls) {
        this.excludeUrls = excludeUrls;
    }

    @Override
    public boolean preHandle(HttpServletRequest request,
            HttpServletResponse response, Object handler) throws Exception {
        String requestUri = request.getRequestURI();
        String contextPath = request.getContextPath();
        String url = requestUri.substring(contextPath.length());
        if (excludeUrls.contains(url)) {
            return true;
        }
        HttpSession session = request.getSession();
        User u = (User) session.getAttribute("U");
        if (null==u) {
            Cookie[] cookies = request.getCookies();
            if (cookies!=null && cookies.length>0) {
                for (Cookie cookie : cookies) {
                    if ("userCookie".equals(cookie.getName())) {
                        String name = cookie.getValue();
                        if (BaseUtil.isEmpty(name)) {
                            String[] ss = name.split(",");
                            if (userService.exsit("name", ss[0].trim(), "pwd", ss[1].trim())) {
                                u = userService.findEntity("name", ss[0].trim(), "pwd", ss[1].trim());
                                session.setAttribute("U", u);
                                break;
                            }
                        }
                    }
                }
            }
        }
        if (null==u) {
            response.sendRedirect("login.jsp");
            return false;
        }

        HandlerMethod method = (HandlerMethod)handler;
        Perm perm = method.getMethodAnnotation(Perm.class);
        if (perm==null) {
            return true;
        }
        Listur = userRoleRelService.findByProperty("id.userId", u.getId());
        for (UserRoleRel userRoleRel : ur) {
            Listrp = rolesPermissionRelService.findByProperty("id.roleId", userRoleRel.getId().getRoleId());
            for (RolesPermissionRel rolesPermissionRel : rp) {
                Permission permission = permissionService.find(rolesPermissionRel.getId().getPermissionId());
                if (perm.privilegeValue().equals(permission.getPermissionCode())) {
                    return true;
                }
            }
        }
        request.getRequestDispatcher("/error/noSecurity.jsp").forward(request, response);

        return false;
    }

    @Override
    public void postHandle(HttpServletRequest request,
            HttpServletResponse response, Object handler,
            ModelAndView modelAndView) throws Exception {

    }

    @Override
    public void afterCompletion(HttpServletRequest request,
            HttpServletResponse response, Object handler, Exception ex)
            throws Exception {

    }
}

再看登录实现：

@ResponseBody
    @RequestMapping("/login")
    public Json login(String name,String pwd,String remember,Model model,HttpSession session,
            HttpServletRequest request,HttpServletResponse response) {
        Json json = new Json();

        if (userService.exsit("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()))) {
            User u = userService.findEntity("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()));
            if (u.getCancel().equals("1")) {
                if ("yes".equals(remember.trim())) {
                    Cookie cookie = new Cookie("userCookie", u.getName() + ","  + u.getPwd());
                    cookie.setMaxAge(60 * 60 * 24 * 14);//保存两周
                    cookie.setPath("/");
                    response.addCookie(cookie);
                }
                session.setAttribute("U", u);
//                return "redirect:/main";
                json.setMsg("登陆成功");
                json.setSuccess(true);
                return json;
            }else {
                json.setMsg("对不起你的账号还没有通过邮箱验证");
//                model.addAttribute("errorMsg", "对不起你的账号还没有通过邮箱验证");
            }
        }else {
            json.setMsg("用户名或密码错误");
//            model.addAttribute("errorMsg", "用户名或密码错误");
        }
        return json;
//        return "login";
    }

还有注销的：

@ResponseBody
    @RequestMapping("/logout")
    public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
        Json j = new Json();
        if (session != null) {
//            session.invalidate();
            session.removeAttribute("U");
        }
        Cookie[] cookies = request.getCookies();
        if (cookies != null) {
            for (Cookie cookie : cookies) {
                if ("userCookie".equals(cookie.getName())) {
                    Cookie cookie2 = new Cookie("userCookie", null);
                    cookie2.setMaxAge(0);
                    cookie2.setPath("/");
                    response.addCookie(cookie2);
                    break;
                }
            }
        }
        j.setSuccess(true);
        j.setMsg("注销成功！");
        return j;
    }

看到这里你是否已经知道了之前问题的存在原因呢？

我先不考诉你们，谁知道这里面的错误原因可以在上面留言哦！

我想页面就简单多了，因为是执行方法之前拦截判断的，所以只要你存放有cookie无论调用那个页面都可以自动实现登陆。

补充一个问题：HTTP Status 500 - Request processing failed; nested exception is java.lang.IllegalArgumentException: Control character in cookie value or attribute.

看到这样的错误你知道是怎么回事么？