redis+session单一登录实现

1.redis缓存的方法

package com.zywlw.platform.service.redis.impl;

import com.zywlw.platform.service.redis.RedisService;
import org.apache.log4j.Logger;
import org.springframework.dao.DataAccessException;
import org.springframework.data.redis.core.HashOperations;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.data.redis.core.ValueOperations;
import org.springframework.stereotype.Service;
import org.springframework.util.CollectionUtils;
import org.springframework.util.StringUtils;

import javax.annotation.Resource;
import java.io.Serializable;
import java.util.Set;
import java.util.concurrent.TimeUnit;

/**
 * Created with IntelliJ IDEA.
 * Description:
 * User: lyf
 * Date: 2018/2/26
 */
@Service(value = "redisService")
public class RedisServiceImpl implements RedisService {

    private RedisTemplate redisTemplate;

    private static final Logger LOGGER = Logger.getLogger(RedisService.class);


    @Resource(name = "redisTemplate")
    public void setRedisTemplate(RedisTemplate<String, Object> redisTemplate) {
        this.redisTemplate = redisTemplate;
    }

    /**
     * 批量删除对应的value
     *
     * @param keys key数组
     */
    public void removeBatchKey(final String... keys) {
        for (String key : keys) {
            removeByKey(key);
        }
    }

    /**
     * 批量删除key
     *
     * @param pattern string
     */
    public void removePattern(final String pattern) {
        Set<Serializable> keys = redisTemplate.keys(pattern);
        if (!CollectionUtils.isEmpty(keys)) {
            redisTemplate.delete(keys);
        }
    }

    /**
     * 删除key
     *
     * @param key string
     */
    public void removeByKey(final String key) {
        if (exists(key)) {
            redisTemplate.delete(key);
        }
    }

    /**
     * 判断缓存中是否有对应的value
     *
     * @param key key
     * @return boolean false or true
     */
    public boolean exists(final String key) {
        return redisTemplate.hasKey(key);
    }

    /**
     * 读取缓存
     *
     * @param key string
     * @return object
     */
    public Object get(final String key) {
        Object result;
        ValueOperations<Serializable, Object> operations = redisTemplate
                .opsForValue();
        result = operations.get(key);
        return result == null ? "" : result;
    }

    /**
     * 写入缓存,长久有效
     *
     * @param key string
     * @param value object
     * @return boolean false or true
     */
    public boolean setNoExpire(final String key, Object value) {
        boolean result = false;
        try {
            ValueOperations<Serializable, Object> operations = redisTemplate
                    .opsForValue();
            operations.set(key, value);
            result = true;
        } catch (DataAccessException e) {
            LOGGER.error("Write RedisCache failure:" + e);
            return result;
        }
        return result;
    }

    /**
     * 写入缓存
     *
     * @param key string
     * @param value object
     * @param expireTime 过期时间
     * @return boolean false or true
     */
    public  boolean setTakeOverTime(final String key, Object value, Long expireTime) {
        boolean result = false;
        try {
            ValueOperations<Serializable, Object> operations = redisTemplate
                    .opsForValue();
            operations.set(key, value);
            redisTemplate.expire(key, expireTime, TimeUnit.SECONDS);
            result = true;
        } catch (DataAccessException e) {
            LOGGER.error("Write RedisCache failure:" + e);
            return result;
        }
        return result;
    }

    /**
     * 查询hash表名为key字段名为field的值
     * @param userType 用户类型sysUser/user
     * @param account 账号名
     */
    public void isLogin(String userType, String account) {
        if (StringUtils.isEmpty(userType) || StringUtils.isEmpty(account)) {
            LOGGER.warn("Read RedisCache failure: Parameter cannot Empty");
        }
        try {
            //查询redis中键名为spring:session:sessions:sessionId格式的集合
            Set<String> set = redisTemplate.keys("spring:session:sessions:" +
                    "????????????????????????????????????");
            for (String sessionId : set) {
                HashOperations<String, String, Object> operations = redisTemplate.opsForHash();
                //判断hash中是否有相应字段,若有则比较userType中存储的账号名是否与当前账号名相同，相同则删除
                if (operations.hasKey(sessionId, userType)) {
                    Object value = operations.get(sessionId, userType);
                    if (account.equals(value)) {
                        operations.delete(sessionId, userType);
                    } else {
                        continue;
                    }
                }
            }
        } catch (DataAccessException e) {
            LOGGER.error("Read RedisCache failure:" + e);
        }
    }

    /**
     * 向hash表写入数据
     * @param key 键名，即hash表名
     * @param field 字段名
     * @param value 值
     */
    public void setKeyValue(String key, String field, String value) {
        if (StringUtils.isEmpty(key) || StringUtils.isEmpty(field) || StringUtils.isEmpty(value)) {
            LOGGER.warn("Read RedisCache failure: Parameter cannot Empty");
        }
        redisTemplate.opsForHash().put(key, field, value);
    }

    /**
     * 判断hash中是否有相应字段
     * @param key 键名，即hash表名
     * @param field 字段名
     * @return
     */
    public boolean existKeyValue(String key, String field) {
        if (StringUtils.isEmpty(key) || StringUtils.isEmpty(field)) {
            return false;
        } else {
            HashOperations<String, String, Object> operations = redisTemplate.opsForHash();
            //redis中存储的sessionId前缀spring:session:sessions:
            return operations.hasKey("spring:session:sessions:" + key, field);
        }
    }
}

2.    login控制层的逻辑判断

3.拦截器interceptor 

package com.zywlw.platform.interceptor;

import com.zywlw.platform.bean.SysUser;
import com.zywlw.platform.constant.CommonConstant;
import com.zywlw.platform.service.redis.RedisService;
import com.zywlw.platform.util.UserSessionUtil;
import org.apache.commons.lang3.StringUtils;
import org.apache.log4j.Logger;
import org.springframework.http.HttpStatus;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

import javax.annotation.Resource;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

/**
 * Created with IntelliJ IDEA.
 * Description:系统用户操作拦截器
 * User: lyf
 * Date: 2018/2/26
 */
public class SysAuthorityInterceptor implements HandlerInterceptor {

    /**
     * Log4j日志处理
     */
    private static final Logger LOGGER = Logger.getLogger(SysAuthorityInterceptor.class);

    @Resource(name = "redisService")
    private RedisService redisService;

    @Override
    public boolean preHandle(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Object o) {
        String token = httpServletRequest.getHeader("token");
        if (StringUtils.isEmpty(token)) {
            LOGGER.warn("sorry, you don't have the right to do it");
            //返回状态码401
            httpServletResponse.setStatus(HttpStatus.UNAUTHORIZED.value());
            return false;
        }
        SysUser sysuser = UserSessionUtil.getCurrentSysUserInfo();
        HttpSession session = UserSessionUtil.getSession();
        if (sysuser == null) {
            LOGGER.warn("Sorry, your information has expired, please login again");
            //返回状态码401
            httpServletResponse.setStatus(HttpStatus.UNAUTHORIZED.value());
            return false;
        } else if (!redisService.existKeyValue(session.getId(), CommonConstant.SYS_USER)) {
            LOGGER.warn("Sorry, this sysUserAccount is login in other place, please login again");
            redisService.removeByKey("spring:session:sessions:" + session.getId());
            session.invalidate();
            //返回状态码406，掉线提示
            httpServletResponse.setStatus(HttpStatus.NOT_ACCEPTABLE.value());
            return false;
        } else {
            LOGGER.debug("SysAuthorityInterceptor pass :" + httpServletRequest.getRequestURL());
            return true;
        }
    }

    @Override
    public void postHandle(HttpServletRequest httpServletRequest, HttpServletResponse
            httpServletResponse, Object o, ModelAndView modelAndView) {

    }

    @Override
    public void afterCompletion(HttpServletRequest httpServletRequest, HttpServletResponse
            httpServletResponse, Object o, Exception e) {

    }
}