晒晒积累的点点经验--单点登录

如果用户没有登陆，则登陆，并将登陆信息放到application，
 信息为用户id，用户sessionid，用户登陆时间，登陆IP
 如果用户已登陆，则每次请求要检查application，
 一旦用户id相同而sessionid不同，即表明该用户在其它地方登陆，
 当前登陆无条件注销
 注销过程为：将当前session失效，转到登陆页面，
 提示用户该用户id已在哪台机器什么时间登陆了，当前登陆已注销

在web.xml文件中添加filter:
<filter>
<filter-name>SingleFilter</filter-name>
<filter-class>org.com.filter.SingleFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>SingleFilter</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>

 

Filter 类：

package org.com.filter; import java.io.IOException; import java.util.Map; import javax.servlet.Filter; import javax.servlet.FilterChain; import javax.servlet.FilterConfig; import javax.servlet.ServletException; import javax.servlet.ServletRequest; import javax.servlet.ServletResponse; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import org.apache.log4j.Logger; import org.com.command.role.GoupdateRoleCmd; public class SingleFilter implements Filter { private static Logger log = Logger.getLogger(SingleFilter.class); private FilterConfig filterConfig; public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException { HttpServletRequest request = (HttpServletRequest) req; HttpServletResponse response = (HttpServletResponse) res; HttpSession session = request.getSession(); /** * 如果用户没有登陆，则登陆，并将登陆信息放到application， * <P> * 信息为用户id，用户sessionid，用户登陆时间，登陆IP * <P> * 如果用户已登陆，则每次请求要检查application， * <P> * 一旦用户id相同而sessionid不同，即表明该用户在其它地方登陆， * <P> * 当前登陆无条件注销 * <P> * 注销过程为：将当前session失效，转到登陆页面， * <P> * 提示用户该用户id已在哪台机器什么时间登陆了，当前登陆已注销 */ boolean isLogin = session.getAttribute("NAME") != null; log.info("----SingleFilter.isLogin = "+isLogin); if (isLogin) { String username = (String) session.getAttribute("NAME"); String curSessionid = session.getId(); Map single = (Map) session.getAttribute( "single"); if (single == null) { log.info("----SingleFilter single == null : "+single == null); return; } Map userMap = (Map) single.get(username); // 如果已经有登陆信息 if (userMap != null) { log.info("----SingleFilter.userMap != null"); String hisSesssionid = (String) userMap.get("sessionid"); String ip = (String) userMap.get("ip"); String date1 = (String) userMap.get("date1"); if (!curSessionid.equals(hisSesssionid)) { String jspMess = username + "已于" + date1 + "从" + ip + "登陆到了服务器上，当前登陆已被注销！"; request.setAttribute("ERROR", jspMess); session.removeAttribute("NAME"); session.invalidate(); filterConfig.getServletContext().getRequestDispatcher( "/main.jsp").forward(request, response); return; } log.info("----SingleFilter.hisSessionid not null!"); } } chain.doFilter(request, response); } public void destroy() { } public void init(FilterConfig filterConfig) throws ServletException { this.filterConfig = filterConfig; } }

 

 

Servlet 类：

package org.com.command; import java.io.UnsupportedEncodingException; import java.util.*; import org.apache.log4j.Logger; import org.com.delegate.UserDel; import org.com.exception.AppException; import org.com.factory.DelFactory; import org.com.helper.IHelper; import org.com.listener.OnlineUsers; import org.com.vo.Role; import org.com.vo.Users; public class LoginCmd implements ICommand { private static Logger log = Logger.getLogger(LoginCmd.class); public String excute(IHelper helper) { String page = "/login.jsp"; Map map = helper.getData(); // String userID = (String)map.get("userid"); // String password = (String)map.get("password"); // log.info("------UserID =<"+userID+"> pwd =<"+password+">"); String errorMessage = ""; try { boolean isEnable = false; helper.getRequest().setCharacterEncoding("gbk"); helper.getResponse().setContentType("html/text,charset=GBK"); UserDel login = (UserDel) DelFactory.getInstance().createDelegate( "UserDel"); String userName = (String) map.get("userid"); String userPwd = (String) map.get("password"); String userCode = (String) map.get("checkCode"); String random = ""; if (helper.getSession().getAttribute("code") != null) { random = (String) helper.getSession().getAttribute("code"); } if (helper.getRequest().getSession().getAttribute("NAME") != null) { log.info("-----LoginCmd the Name != null"); return page = "/login/mainframe.jsp"; } else { // 放单点登陆信息 String sessionid = helper.getSession().getId(); String date1 = new java.sql.Date(System.currentTimeMillis()) .toString(); String ip = helper.getRequest().getRemoteAddr(); Map userMap = new HashMap(); userMap.put("sessionid", sessionid); userMap.put("date1", date1); userMap.put("ip", ip); Map singleMap = (Map)helper.getSession().getAttribute("single"); if (singleMap == null) { singleMap = new HashMap(); } singleMap.put(userName, userMap); helper.getSession().setAttribute("single", singleMap); log.info("----LoginCmd userMap date - ip - sessionid = "+userMap.get("date1")+" - "+userMap.get("ip")+" - "+userMap.get("sessionid")); } if (!random.equals(userCode)) { log.info("校验码不正确"); errorMessage = "校验码不正确!"; } else { log.info("LoginCmd.excute.userName = <" + userName + "> userPwd = <" + userPwd + "> random= <" + random + ">"); Users user = new Users(); if (userName != null && !"".equals(userName) && userPwd != null) { user.setUserName(userName.trim()); user.setUserPwd(userPwd.trim()); isEnable = login.findPwdByRoleIDUserName(user); } if (isEnable) { page = "/login/mainframe.jsp"; Users us = (Users) login.findByPatten(user); Role role = (Role) login.findRoleName(us.getRoleID()); helper.getSession().setAttribute("NAME", userName); helper.getSession() .setAttribute("EMAIL", us.getUserEmail()); helper.getSession() .setAttribute("CNAME", us.getUserCName()); helper.getSession().setAttribute("ROLENAME", role.getRoleName()); helper.getSession().setAttribute("ROLECNAME", role.getRoleCName()); helper.getSession().setAttribute("UID", us.getUserID()); helper.getSession().setAttribute(OnlineUsers.ONLINEUSER, new OnlineUsers(userName)); log.info("NAME = <" + userName + "> EMAIL = <" + us.getUserEmail() + "> " + "CNAME = <" + us.getUserCName() + "> ROLENAME = <" + role.getRoleCName() + ">" + "roleID = <" + us.getRoleID() + ">"); } } } catch (UnsupportedEncodingException e) { errorMessage = e.getMessage(); } catch (AppException e) { errorMessage = e.getMessage(); } if (errorMessage != null && !"".equals(errorMessage)) { helper.getRequest().setAttribute("error", errorMessage); } return page; } }