爱威尔-spring mvc +cookie+拦截器功能实现系统自动登陆

先看看我遇到的问题： 
 
<pre class="prettyprint lang-java">@ResponseBody
 @RequestMapping("/logout")
 public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
 Json j = new Json();
 if (session != null) {
// session.invalidate();
 session.removeAttribute("U");
 }
 Cookie[] cookies = request.getCookies();
 if (cookies != null) {
 for (Cookie cookie : cookies) {
 if ("userCookie".equals(cookie.getName())) {
 cookie.setValue("");
 cookie.setMaxAge(0);
 response.addCookie(cookie);
 }
 }
 }
 j.setSuccess(true);
 j.setMsg("注销成功！");
 return j;
 }</pre> 然后看到的cookie是： 
 
 <img src="31/20150422090441_541.png" alt=""> 
 
 拦截器这边： 
 
<pre class="prettyprint lang-java">public class PermissionInterceptor implements HandlerInterceptor {
 
 
@Override
 public boolean preHandle(HttpServletRequest request,
 HttpServletResponse response, Object handler) throws Exception {
 String requestUri = request.getRequestURI();
 String contextPath = request.getContextPath();
 String url = requestUri.substring(contextPath.length());
 if (excludeUrls.contains(url)) {
 return true;
 }
 HttpSession session = request.getSession();
 User u = (User) session.getAttribute("U");
 if (null==u) {
 Cookie[] cookies = request.getCookies();
 if (cookies!=null && cookies.length>0) {
 for (Cookie cookie : cookies) {
 if ("userCookie".equals(cookie.getName())) {
 String name = cookie.getValue();
 if (BaseUtil.isEmpty(name)) {
 String[] ss = name.split(",");
 if (userService.exsit("name", ss[0].trim(), "pwd", ss[1].trim())) {
 u = userService.findEntity("name", ss[0].trim(), "pwd", ss[1].trim());
 session.setAttribute("U", u);
 break;
 }
 }
 }
 }
 }
 }
 
 
}</pre> 看到的结果是： 
 
 <img src="31/20150422090547_639.png" alt=""> 
 
 看出问题了吧，cookie 竟然不一样，不知道看到此处，你是否知道问题出在哪里。 
 我还发表了一个问题讨论：<a href="http://www.oschina.net/question/6556_233128" target="_blank">http://www.oschina.net/question/6556_233128</a> 
 
 下面我们就进入正题了。 
 先看spring mvc 的拦截器： 
 
 
<pre class="prettyprint lang-java">package com.tw.interceptor;

import java.util.List;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

import com.tw.entity.sys.Permission;
import com.tw.entity.sys.RolesPermissionRel;
import com.tw.entity.sys.User;
import com.tw.entity.sys.UserRoleRel;
import com.tw.service.sys.PermissionService;
import com.tw.service.sys.RolesPermissionRelService;
import com.tw.service.sys.UserRoleRelService;
import com.tw.service.sys.UserService;
import com.tw.util.BaseUtil;
import com.tw.util.MD5;

public class PermissionInterceptor implements HandlerInterceptor {

@Autowired
	private UserRoleRelService userRoleRelService;
	@Autowired
	private RolesPermissionRelService rolesPermissionRelService;
	@Autowired
	private PermissionService permissionService;
	@Autowired
	private UserService userService;
	private ListexcludeUrls;
	
	public ListgetExcludeUrls() {
		return excludeUrls;
	}

public void setExcludeUrls(ListexcludeUrls) {
		this.excludeUrls = excludeUrls;
	}

@Override
	public boolean preHandle(HttpServletRequest request,
			HttpServletResponse response, Object handler) throws Exception {
		String requestUri = request.getRequestURI();
		String contextPath = request.getContextPath();
		String url = requestUri.substring(contextPath.length());
		if (excludeUrls.contains(url)) {
			return true;
		}
		HttpSession session = request.getSession();
		User u = (User) session.getAttribute("U");
		if (null==u) {
			Cookie[] cookies = request.getCookies();
			if (cookies!=null && cookies.length>0) {
				for (Cookie cookie : cookies) {
					if ("userCookie".equals(cookie.getName())) {
						String name = cookie.getValue();
						if (BaseUtil.isEmpty(name)) {
							String[] ss = name.split(",");
							if (userService.exsit("name", ss[0].trim(), "pwd", ss[1].trim())) {
								u = userService.findEntity("name", ss[0].trim(), "pwd", ss[1].trim());
								session.setAttribute("U", u);
								break;
							}
						}
					}
				}
			}
		}
		if (null==u) {
			response.sendRedirect("login.jsp");
			return false;
		}
		
		HandlerMethod method = (HandlerMethod)handler;
        Perm perm = method.getMethodAnnotation(Perm.class);
		if (perm==null) {
			return true;
		}
		Listur = userRoleRelService.findByProperty("id.userId", u.getId());
		for (UserRoleRel userRoleRel : ur) {
			Listrp = rolesPermissionRelService.findByProperty("id.roleId", userRoleRel.getId().getRoleId());
			for (RolesPermissionRel rolesPermissionRel : rp) {
				Permission permission = permissionService.find(rolesPermissionRel.getId().getPermissionId());
				if (perm.privilegeValue().equals(permission.getPermissionCode())) {
					return true;
				}
			}
		}
		request.getRequestDispatcher("/error/noSecurity.jsp").forward(request, response);
		
		return false;
	}

@Override
	public void postHandle(HttpServletRequest request,
			HttpServletResponse response, Object handler,
			ModelAndView modelAndView) throws Exception {
		
	}

@Override
	public void afterCompletion(HttpServletRequest request,
			HttpServletResponse response, Object handler, Exception ex)
			throws Exception {
		
	}
}
</pre> 再看登录实现： 
 
 
 
<pre class="prettyprint lang-java">@ResponseBody
	@RequestMapping("/login")
	public Json login(String name,String pwd,String remember,Model model,HttpSession session,
			HttpServletRequest request,HttpServletResponse response) {
		Json json = new Json();
		
		if (userService.exsit("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()))) {
			User u = userService.findEntity("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()));
			if (u.getCancel().equals("1")) {
				if ("yes".equals(remember.trim())) {
					Cookie cookie = new Cookie("userCookie", u.getName() + "," + u.getPwd());
					cookie.setMaxAge(60 * 60 * 24 * 14);//保存两周
					cookie.setPath("/");
					response.addCookie(cookie);
				}
				session.setAttribute("U", u);
//				return "redirect:/main";
				json.setMsg("登陆成功");
				json.setSuccess(true);
				return json;
			}else {
				json.setMsg("对不起你的账号还没有通过邮箱验证");
//				model.addAttribute("errorMsg", "对不起你的账号还没有通过邮箱验证");
			}
		}else {
			json.setMsg("用户名或密码错误");
//			model.addAttribute("errorMsg", "用户名或密码错误");
		}
		return json;
//		return "login";
	}</pre> 还有注销的： 
 
 
 
<pre class="prettyprint lang-java">@ResponseBody
	@RequestMapping("/logout")
	public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {
		Json j = new Json();
		if (session != null) {
//			session.invalidate();
			session.removeAttribute("U");
		}
		Cookie[] cookies = request.getCookies();
 if (cookies != null) {
 for (Cookie cookie : cookies) {
 if ("userCookie".equals(cookie.getName())) {
 	Cookie cookie2 = new Cookie("userCookie", null);
 cookie2.setMaxAge(0);
 cookie2.setPath("/");
 response.addCookie(cookie2);
 break;
 }
 }
 }
		j.setSuccess(true);
		j.setMsg("注销成功！");
		return j;
	}</pre> 看到这里你是否已经知道了之前问题的存在原因呢？ 
 
 我先不考诉你们，谁知道这里面的错误原因可以在上面留言哦！ 
 我想页面就简单多了，因为是执行方法之前拦截判断的，所以只要你存放有cookie无论调用那个页面都可以自动实现登陆。 
 补充一个问题：HTTP Status 500 - Request processing failed; nested exception is java.lang.IllegalArgumentException: Control character in cookie value or attribute. 
 看到这样的错误你知道是怎么回事么？

spring mvc +cookie+拦截器功能 实现系统自动登陆

spring mvc +cookie+拦截器功能实现系统自动登陆