一、cookie二级域名共享
1.方法一
Cookie cookie = new Cookie("name", "value");
//设置cookie路径
cookie.setPath("/");
cookie.setDomain("xxx.com");
//不设置的话,则cookies不写入硬盘,而是写在内存,只在当前页面有用,以秒为单位
cookie.setMaxAge(1 * 24 * 60 * 60);
//HTTPOnly是限制js中获取不了这个cookie,这样能有效的防止XSS攻击,窃取cookie内容
cookie.isHttpOnly();
response.addCookie(cookie);
2.方法二
response.setHeader("Set-Cookie", "name=value; Path=/;Domain=.XXX.com;Max-Age=seconds;HTTPOnly");
二、RedisTemplate获取共享session
@Autowired
private RedisTemplate<String,String> redisTemplate;
//key=spring:session:sessions:xxxxxxx
HashOperations<String, Object, Object> oo = redisTemplate.opsForHash();
Set<Object> keys = oo.keys(key);
Object creationTime = oo.get(key, hashKey);