六、模块实现：登录控制模块（4）_package com.example.demo;-CSDN博客

本文链接：https://blog.csdn.net/gjq246/article/details/100558209

1. 登录控制模块
  1. 登录拦截器

在包“com.example.demo”中新建一个“LoginInterceptor”类，代码如下：

package com.example.demo;

import java.io.PrintWriter;

/**

* 登录拦截器

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.stereotype.Component;

import org.springframework.web.servlet.HandlerInterceptor;

import com.example.demo.vo.Json;

import com.fasterxml.jackson.databind.ObjectMapper;

@Component

public class LoginInterceptor implements HandlerInterceptor {

private final Logger logger = LoggerFactory.getLogger(this.getClass());

@Autowired

private ObjectMapper mapper;//Jackson使用ObjectMapper类将POJO对象序列化成JSON字符串，也能将JSON字符串反序列化成POJO对象。

@Override

public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception { //请求进入这个拦截器

logger.info("进入拦截器...");

HttpSession session = request.getSession();

if(session.getAttribute("user") == null){//判断session中有没有user信息

logger.info("session中没有user信息");

//ajax异步请求

if("XMLHttpRequest".equalsIgnoreCase(request.getHeader("X-Requested-With"))){

logger.info("ajax异步请求");

Json j = new Json();

j.setSuccess(false);

j.setMsg("session会话超时，请重新登录！");

response.setContentType("application/json;charset=UTF-8");

PrintWriter writer = response.getWriter();

writer.write(mapper.writeValueAsString(j));//将对象转成字符串

logger.info(mapper.writeValueAsString(j));

writer.close();

response.flushBuffer();

return false;

}else {

logger.info("页面请求");

response.sendRedirect("/login");//没有user信息的话进行路由重定向到登录页面

return false;

}

logger.info("登录拦截验证通过。");

return true;//有的话就继续操作

}

每一个配置为拦截的http请求都会执行preHandle方法，可以在这里检查用户的session是否为空来进行登录验证，因为请求有可能是异步的，所以对于异步的请求不能直接跳转页面，而是返回json数据。

修改在包“com.example.demo”中新建一个“WebConfig”类，代码如下：

package com.example.demo;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.context.annotation.Configuration;

import org.springframework.web.servlet.config.annotation.InterceptorRegistration;

import org.springframework.web.servlet.config.annotation.InterceptorRegistry;

import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;

import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

@Configuration

public class WebConfig implements WebMvcConfigurer {

@Autowired

private LoginInterceptor loginInterceptor;//登录拦截器

//图片存放根路径，从application.yml中读取upload

@Value("${upload}")

private String UPLOAD_PATH;

/**

* 文件上传

@Override

public void addResourceHandlers(ResourceHandlerRegistry registry) {

//外部静态资源映射路径，用来上传文件

String filePath = "file:" + UPLOAD_PATH;

registry.addResourceHandler("/upload/**").addResourceLocations(filePath);

}

//拦截器

@Override

public void addInterceptors(InterceptorRegistry registry) {

//登录拦截的管理器

InterceptorRegistration registration = registry.addInterceptor(loginInterceptor);//拦截的对象会进入这个类中进行判断

registration.addPathPatterns("/**");//所有路径都被拦截

registration.excludePathPatterns("/","/login","/UserController/login","/kaptcha","/static/**","/UserController/logout","/upload/**");//添加不拦截路径

}

在WebConfig中增加了拦截器的设置。

1. 1. 验证码接口

修改在包“com.example.demo.controller”中新建一个“HomeController”类，代码如下：

package com.example.demo.controller;

/**

* 后台管理主页，登录页面，验证码生成

import java.awt.image.BufferedImage;

import javax.imageio.ImageIO;

import javax.servlet.ServletOutputStream;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.stereotype.Controller;

import org.springframework.ui.Model;

import org.springframework.web.bind.annotation.RequestMapping;

import org.springframework.web.servlet.ModelAndView;

import com.example.demo.model.User;

import com.example.demo.service.PermissionService;

import com.google.code.kaptcha.Constants;

import com.google.code.kaptcha.Producer;

@Controller

public class HomeController {

private final Logger logger = LoggerFactory.getLogger(this.getClass());

@Autowired

private Producer captchaProducer;//验证码

@Autowired

private PermissionService permissionService;// 注入业务层的service

// 未加入@ResponseBody用来返回数据给页面

@RequestMapping("/index")

public String index(HttpServletRequest request,Model model) {

HttpSession session = request.getSession();

User user = (User)session.getAttribute("user");

logger.info(user.getUsername());

logger.info(user.getId());

model.addAttribute("username", user.getUsername());

model.addAttribute("userid", user.getId());

model.addAttribute("menulist", permissionService.getUserMenu(user.getId()));

return "admin/index";

}

// 未加入@ResponseBody用来返回数据给页面

@RequestMapping("/home")

public String home(Model model) {

return "admin/home";

}

// 未加入@ResponseBody用来返回数据给页面

@RequestMapping("/")

public String login(Model model) {

return "admin/login";

}

// 未加入@ResponseBody用来返回数据给页面

@RequestMapping("/login")

public String login2(Model model) {

return "admin/login";

}

@RequestMapping("/kaptcha")

public ModelAndView getKaptchaImage(HttpServletRequest request, HttpServletResponse response) throws Exception {

HttpSession session = request.getSession();

String code = (String)session.getAttribute(Constants.KAPTCHA_SESSION_KEY);

logger.info("******************验证码是: " + code + "******************");

response.setDateHeader("Expires", 0);

// Set standard HTTP/1.1 no-cache headers.

response.setHeader("Cache-Control", "no-store, no-cache, must-revalidate");

// Set IE extended HTTP/1.1 no-cache headers (use addHeader).

response.addHeader("Cache-Control", "post-check=0, pre-check=0");

// Set standard HTTP/1.0 no-cache header.

response.setHeader("Pragma", "no-cache");

// return a jpeg

response.setContentType("image/jpeg");

// create the text for the image

String capText = captchaProducer.createText();

// store the text in the session

session.setAttribute(Constants.KAPTCHA_SESSION_KEY, capText);

// create the image with the text

BufferedImage bi = captchaProducer.createImage(capText);

ServletOutputStream out = response.getOutputStream();

// write the data out

ImageIO.write(bi, "jpg", out);

try {

out.flush();

} finally {

out.close();

}

return null;

}

增加了登录页面路径映射以及验证码生成接口。

修改在包“com.example.demo”中新建一个“MisApplication”类，代码如下：

package com.example.demo;

import java.util.Properties;

import org.springframework.boot.SpringApplication;

import org.springframework.boot.autoconfigure.SpringBootApplication;

import org.springframework.context.annotation.Bean;

import com.google.code.kaptcha.Constants;

import com.google.code.kaptcha.impl.DefaultKaptcha;

import com.google.code.kaptcha.util.Config;

@SpringBootApplication

public class MisApplication {

public static void main(String[] args) {

SpringApplication.run(MisApplication.class, args);

}

/**

* 验证码

* @return

@Bean

public DefaultKaptcha captchaProducer() {

DefaultKaptcha captchaProducer = new DefaultKaptcha();

Properties properties = new Properties();

// properties.setProperty(Constants.KAPTCHA_BORDER, "yes");

// properties.setProperty(Constants.KAPTCHA_BORDER_COLOR, "red");

// properties.setProperty(Constants.KAPTCHA_TEXTPRODUCER_FONT_COLOR, "blue");

properties.setProperty(Constants.KAPTCHA_TEXTPRODUCER_FONT_SIZE, "50");

properties.setProperty(Constants.KAPTCHA_TEXTPRODUCER_FONT_NAMES, "宋体,楷体,微软雅黑");

properties.setProperty(Constants.KAPTCHA_TEXTPRODUCER_CHAR_LENGTH, "4");

properties.setProperty(Constants.KAPTCHA_TEXTPRODUCER_CHAR_STRING, "0123456789");

properties.setProperty(Constants.KAPTCHA_IMAGE_WIDTH, "120");

properties.setProperty(Constants.KAPTCHA_IMAGE_HEIGHT, "50");

properties.setProperty(Constants.KAPTCHA_SESSION_CONFIG_KEY, "code");

Config config = new Config(properties);

captchaProducer.setConfig(config);

return captchaProducer;

}

对验证码的生成进行配置。

1. 1. 登录与注销接口

修改在包“com.example.demo.controller”中新建一个“UserController”类，代码如下：

package com.example.demo.controller;

import java.io.File;

import java.io.IOException;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpSession;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.stereotype.Controller;

import org.springframework.ui.Model;

import org.springframework.util.StringUtils;

import org.springframework.web.bind.annotation.RequestMapping;

import org.springframework.web.bind.annotation.RequestParam;

import org.springframework.web.bind.annotation.ResponseBody;

import org.springframework.web.multipart.MultipartFile;

import com.example.demo.model.User;

import com.example.demo.service.UserService;

import com.example.demo.util.SnowflakeIdWorker;

import com.example.demo.vo.DataTableResult;

import com.example.demo.vo.Json;

import com.example.demo.vo.UserVO;

import com.google.code.kaptcha.Constants;

@Controller

@RequestMapping("/UserController")

public class UserController {

private final Logger logger = LoggerFactory.getLogger(this.getClass());

private String prefix = "admin/user";// 页面的路径，注意admin前面不要有/

// 图片存放根路径，从application.yml中读取upload

@Value("${upload}")

private String UPLOAD_PATH;

@Autowired

private UserService userService;// 注入业务层的service

// 未加入@ResponseBody用来返回数据给页面

@RequestMapping("view")

public String view(Model model) {

// String str="个人";

// model用来回传数据给前端页面

// setTitle(model, new TitleVo("列表", str+"管理", true,"欢迎进入"+str+"页面", true, false));

return prefix + "/view";

}

// @ResponseBody，直接通过js异步返回数据给页面

@RequestMapping("list")

@ResponseBody

public DataTableResult list(HttpServletRequest request, UserVO userVO) {

// DataTableResult返回给datatables控件的数据格式

DataTableResult result = new DataTableResult();

// 获取分页参数

int start = Integer.parseInt(request.getParameter("start"));

int length = Integer.parseInt(request.getParameter("length"));

// 获取排序字段

String orderIdx = request.getParameter("order[0][column]");

// 获取排序字段名

String orderField = request.getParameter("columns[" + orderIdx + "][name]");

// 获取排序方式，降序desc或者升序asc

String orderDir = request.getParameter("order[0][dir]");

// 调用分页查询方法

result = userService.selectUserListPage(userVO, start, length, orderField, orderDir);

// result.setDraw(userVO.getDraw());

return result;

}

// @ResponseBody，直接通过js异步返回数据给页面

@RequestMapping("insert")

@ResponseBody

public Json insert(User user) {

Json j = new Json();

if (userService.insert(user) > 0) {

j.setSuccess(true);

j.setMsg("添加成功！");

} else {

j.setSuccess(false);

j.setMsg("添加失败！");

}

return j;

}

// @ResponseBody，直接通过js异步返回数据给页面

@RequestMapping("update")

@ResponseBody

public Json updateById(User user) {

Json j = new Json();

if (userService.updateById(user) > 0) {

j.setSuccess(true);

j.setMsg("修改成功！");

} else {

j.setSuccess(false);

j.setMsg("修改失败！");

}

return j;

}

// @ResponseBody，直接通过js异步返回数据给页面

@RequestMapping("select")

@ResponseBody

public Json selectById(User user) {

Json j = new Json();

j.setSuccess(true);

j.setObj(userService.selectById(user.getId()));

return j;

}

// @ResponseBody，直接通过js异步返回数据给页面

@RequestMapping("delete")

@ResponseBody

public Json delete(HttpServletRequest request) {

Json j = new Json();

String ids = request.getParameter("ids");

if (!StringUtils.isEmpty(ids)) {

j.setSuccess(true);

j.setObj("成功删除" + userService.delete(ids) + "条记录");

} else {

j.setSuccess(false);

j.setMsg("没有需要删除的记录！");

}

return j;

}

// @ResponseBody，直接通过js异步返回数据给页面

// @RequestParam("file[]") MultipartFile[] file 多个文件

@RequestMapping("upload")

@ResponseBody

public Json upload(HttpServletRequest request, @RequestParam("file") MultipartFile file) {

Json j = new Json();

if (!file.isEmpty()) {

try {

String originalFilename = file.getOriginalFilename();

// 随机文件名

String newFileName = SnowflakeIdWorker.getUUID()

+ originalFilename.substring(originalFilename.lastIndexOf("."));

// 上传文件路径

File upload = new File(UPLOAD_PATH, "images/");

if (!upload.exists())

upload.mkdirs();

String uploadPath = upload + "\\";

logger.info("uploadPath = " + uploadPath);

File uploadfile = new File(uploadPath + newFileName);

// 将上传文件保存到一个目标文件当中

file.transferTo(uploadfile);

j.setSuccess(true);

j.setObj("/upload/images/" + newFileName);

} catch (IllegalStateException | IOException e) {

// TODO Auto-generated catch block

e.printStackTrace();

j.setSuccess(false);

j.setObj("上传异常");

}

} else {

j.setSuccess(false);

j.setObj("上传失败");

}

return j;

}

/**

* 登录验证

* @param request

* @param user

* @return

// @ResponseBody，直接通过js异步返回数据给页面

@RequestMapping("login")

@ResponseBody

public Json login(HttpServletRequest request, User user) {

Json j = new Json();

HttpSession session = request.getSession();

String code = (String) session.getAttribute(Constants.KAPTCHA_SESSION_KEY);

String kaptcha = request.getParameter("kaptcha");

if (kaptcha.equals(code)) {

// 验证码正确

User loginUser = userService.selectByUser(user);

if (loginUser != null) {

j.setSuccess(true);

loginUser.setPassword("");// 密码不回传

j.setObj(loginUser);

j.setMsg("登录成功！");

session.setAttribute("user", loginUser);// 保存session会话

} else {

j.setSuccess(false);

j.setMsg("登录失败！");

}

} else {

j.setSuccess(false);

j.setMsg("验证码错误！");

}

return j;

}

/**

* 注销

* @param request

* @param model

* @return

// 未加入@ResponseBody用来返回数据给页面

@RequestMapping("logout")

public String logout(HttpServletRequest request,Model model) {

HttpSession session = request.getSession();

session.removeAttribute("user");

return "admin/login";

}

增加了用户登录与注销接口。

1. 1. 登录界面

添加登录界面文件，在“admin”文件夹-> 右键->new->file，输入“login.html”，代码如下：

<!DOCTYPE html>

<head>

<!--[if lt IE 9]>

<![endif]-->

if (window.top !== window.self) {

window.top.location = window.location;

}

</script>

</head>

<form>

<p class="m-t-md">登录XXX后台管理系统</p>

</div>

<a href="">忘记密码了？</a>

</form>

</div>

</div>

$(document).ready(function () {

//toastr选项

toastr.options = {

"positionClass": "toast-bottom-center",

}

$("#btn_login").click(function(){

var username=$("#username").val();

var password=$("#password").val();

var kaptcha=$("#kaptcha").val();

if(username.length==0 || password.length==0 || kaptcha.length==0){

toastr.error("用户名、密码或者验证码为空！", '错误！');

}else{

//异步添加数据

$.ajax({

type: "post",

data: {

username:$("#username").val(),

password:$("#password").val(),

kaptcha:$("#kaptcha").val(),

url: "/UserController/login",//后台处理地址

success: function (data) {

if(data.success){

toastr.success(data.msg, '登录成功！');

location.href="/index";

}else{

toastr.error(data.msg, '登录失败！');

}

}); // end ajax

}

});//end btn_login

});//end ready

</script>

</body>

</html>

1. 1. 动态加载菜单

修改主界面文件，在“admin”文件夹中的“index.html”，代码如下：

<!DOCTYPE html>

<head>

<title> hAdmin- 主页</title>

<!--[if lt IE 9]>

<![endif]-->

</head>

</div>

</span>

</a>

</div>

<div class="logo-element">管理系统

</div>

</li>

<li>

</a>

</li>

</a>

</li>

</ul>

</li>

</ul>

</div>

</nav>

</div>

</form>

</div>

<li>

</li>

</a>

</a>

<strong>小四</strong> 是不是只有我死了,你们才不骂爵迹

<br>

</div>

</li>

<li>

</a>

<strong>二愣子</strong> 呵呵

<br>

</div>

</li>

<li>

<i class="fa fa-envelope"></i> <strong> 查看所有消息</strong>

</a>

</div>

</li>

</ul>

</li>

</a>

<li>

<div>

<i class="fa fa-envelope fa-fw"></i> 您有16条未读消息

</div>

</a>

</li>

<li>

<div>

<i class="fa fa-qq fa-fw"></i> 3条新回复

</div>

</a>

</li>

<li>

</a>

</div>

</li>

</ul>

</li>

</ul>

</nav>

</div>

</div>

</div>

</body>

</html>

利用“th:each”对后台返回的"${menulist}"数据进行二重遍历，动态构造出用户的菜单。

打开浏览器，先输入地址http://127.0.0.1:8080/index，会发现跳转到登录页面，效果如下：

以不同身份登录时菜单不同，以用户名和密码都为“e”登录：

点击右上角的注销链接后，以用户名和密码都为“a”登录：

还可以通过后台动态修改角色的权限和用户的角色，注意首先是对角色分配权限，然后再把角色分配给用户。

完整的项目源码已经分享在GitHub网站上（https://github.com/gjq246/springboot2author）。