关于拦截器超时的使用

最新推荐文章于 2023-09-07 16:11:28 发布

aini593612180

最新推荐文章于 2023-09-07 16:11:28 发布

阅读量825

点赞数

分类专栏： session 文章标签： session-管理

本文链接：https://blog.csdn.net/aini593612180/article/details/73618546

版权

session 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

本文介绍了一个使用Spring MVC实现的拦截器案例，该拦截器用于处理用户登录验证及Session超时的情况。通过配置特定的URL映射规则，实现了对指定路径的访问控制，并对Session超时进行了有效管理。

摘要由CSDN通过智能技术生成

拦截器：

<!-- 拦截器集合 --> 
    <mvc:interceptors>
      <!-- mvc 登陆鉴权拦截器 -->   
      <mvc:interceptor>
       <!-- 需要拦截的URL -->
         <mvc:mapping path="/*/**" />
         <bean class="com.suning.rca.common.interceptor.AuthLoginInterceptor">
          <!-- 登陆页面 -->
            <property name="loginUrl" value="/index.html" />
           <!--放行URL配置 -->
            <property name="excludeList">
               <list>
                  <value>/login.do</value>
                  <value>/generateQrCode.do</value>
                  <value>/doLogin.do</value> 
                  <value>/checkDeviceLogin.do</value>
                  <value>/index.do</value>
                  <value>/error.do</value>
                  <value>/checkPosBindState.do</value>
                  <value>/logout.do</value>
               </list>
            </property>
         </bean>
      </mvc:interceptor>
       <!-- session超时 -->  
      <mvc:interceptor>  
          <mvc:mapping path="/*/**" />  
          <bean class="com.suning.sdipospc.interceptor.SessionTimeoutInterceptor">  
              <property name="allowUrls">  
                  <list>  
                      <!-- 如果请求中包含以下路径，则不进行拦截 -->  
                      <value>/login.do</value>
                      <value>/generateQrCode.do</value> 
                      <value>/doLogin.do</value> 
                      <value>/checkDeviceLogin.do</value>
                      <value>/error.do</value>
                      <value>/checkPosBindState.do</value>
                      <value>/logout.do</value>
                  </list>  
              </property>  
          </bean>  
      </mvc:interceptor>    
   </mvc:interceptors>

拦截器

public class SessionTimeoutInterceptor implements HandlerInterceptor {

    private static final Logger LOGGER = LoggerFactory
            .getLogger(SessionTimeoutInterceptor.class);

    @Autowired
    private LoginService loginService;  

    /**
     * 放行URL
     */
    private List<String> allowUrls;

    public void setAllowUrls(List<String> allowUrls) {
        this.allowUrls = allowUrls;
    }

    @Override
    public boolean preHandle(HttpServletRequest request,
            HttpServletResponse response, Object handler) throws Exception {
        LOGGER.info("SessionTimeoutInterceptor.preHandle enter.");
        String requestUrl = request.getRequestURI().replace(
                request.getContextPath(), "");
        response.setContentType("text/html; charset=utf-8");
        HttpSession session = request.getSession(true);
        if (null != allowUrls && allowUrls.size() >= 1)
            for (String url : allowUrls) {
                if (requestUrl.contains(url)) {
                    return true;
                }
            }
        Object obj = session.getAttribute(SystemConstants.SEESION_IUSER);
        LOGGER.info("====session对象currentUser="+obj);
        LOGGER.info("====sessionId="+session.getId());
        if (obj == null) {
            String loginToken = CookiesUtil.getLoginTokenFromCookie(request);
            String userId = CookiesUtil.getLoginUserIdFromCookie(request);
            loginService.logout(loginToken, userId);
            loginService.operatorLog(WebposConstants.StringCon.TWO,userId);
            CookiesUtil.delCookie(request);
            CookiesUtil.delOperator(request);
            PrintWriter out = response.getWriter();
            StringBuilder builder = new StringBuilder();
            builder.append("<script type=\"text/javascript\" charset=\"UTF-8\">");
//          builder.append("alert(\"页面过期，请重新登录\");");
            builder.append("window.top.location.href=\""
                    + SystemConstants.LOGIN_URL + "\"");
            builder.append("</script>");
            out.print(builder.toString());
            out.close();
        }
        // 返回true，则这个方面调用后会接着调用postHandle(), afterCompletion()
        return true; 
    }

    @Override
    public void postHandle(HttpServletRequest request,
            HttpServletResponse response, Object handler,
            ModelAndView modelAndView) throws Exception {
        LOGGER.info("SessionTimeoutInterceptor.postHandle enter.");
    }

    @Override
    public void afterCompletion(HttpServletRequest request,
            HttpServletResponse response, Object handler, Exception ex)
            throws Exception {
        LOGGER.info("SessionTimeoutInterceptor.afterCompletion enter.");
    }
}

web.xml
 <session-config>
    <session-timeout>15</session-timeout>
    <cookie-config>
        <path>/</path>
    </cookie-config>
  </session-config>