SpringMVC，用户登录状态判断，统一拦截处理方法。(SpringBoot搭建项目)

0、登录时将用户信息放入session；退出登录时，清除session.

1、写一个拦截器LoginInterceptor，实现HandlerInterceptor（org.springframework.web.servlet.HandlerInterceptor）接口，重写preHandle方法，根据session判断是否登录。

由于是前后端分离，未登录时，后端代码无法直接重定向至前端，所以返回头部做一些设置，前端去判断并跳转。

//import省略
@Component
public class LoginInterceptor implements HandlerInterceptor {
    
	@Override
	public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler)
			throws Exception {
		//用Session提取userId来验证登陆
        HttpSession session = request.getSession();
        //userId，登陆时放入session的
        Long userId = (Long) session.getAttribute("userKey");
        //未登陆
        if (userId == null){
                //在返回头部设置标志
                response.addHeader("FLAG", "-1");
                response.setHeader("SESSIONSTATUS", "TIMEOUT");
                //重定向目标地址
                response.setHeader("CONTEXTPATH", "/");    
            //这个方法返回false表示忽略当前请求
            return false;
        }else {
        	//放行，用户即可继续调用自己需要的接口
            return true;    
        }
	}

	@Override
	public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler,
			ModelAndView modelAndView) throws Exception {
		// TODO Auto-generated method stub
		HandlerInterceptor.super.postHandle(request, response, handler, modelAndView);
	}

	@Override
	public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex)
			throws Exception {
		// TODO Auto-generated method stub
		HandlerInterceptor.super.afterCompletion(request, response, handler, ex);
	}

}

2、写一个WebConfig，实现WebMvcConfigurer（org.springframework.web.servlet.config.annotation.WebMvcConfigurer），注册拦截器LoginInterceptor，重写addInterceptors即可。

//import省略
@Configuration
public class WebConfig implements WebMvcConfigurer {
    @Autowired
    private LoginInterceptor loginInterceptor;

    /**静态资源处理*/
    @Override
	public void addResourceHandlers(ResourceHandlerRegistry registry) {
		WebMvcConfigurer.super.addResourceHandlers(registry);
	}
    
	/**注册自定义的拦截器loginInterceptor*/
	
	  @Override 
	  public void addInterceptors(InterceptorRegistry registry) {
	  registry.addInterceptor(loginInterceptor).addPathPatterns( 	      
         "/**"
	  ).excludePathPatterns( 
		  "/users/login", "/users/logout"
	  ); 
	  }
	 
}

3、前端如何判断是否登陆，并进行跳转？

//例如，一个fetch请求
       fetch('/api/user/getUser',{
           method:'get',
           headers: {      
           },
           credentials: 'include'
       }) 
         .then(this.handleResponse.bind(this))
         .then(res => {
            this.setState({total:res});        //更新state
      });


//handleResponse是一个函数，对fetch的返回进行处理

    //处理请求响应，看是否需要进行跳转
    handleResponse(response){
        { 
            //从头部获取字段
            let flag = response.headers.get("FLAG");
            let sessionStatus =  response.headers.get("SESSIONSTATUS");
            if(flag==="-1"&&sessionStatus==="TIMEOUT"){
                let url = response.headers.get("CONTEXTPATH");
                message.info("登录已失效，请重新登录！");
                window.location.href = url;      //跳转到这个地址
            }else{
               return response.json();    //否则，解析返回json数据
            }
        }
    }