request案例---用户登录

要求:
1.编写login.html。包含两个输入框,分别是用户名和密码
2.使用Druid数据库连接池技术,操作mysql里数据库relogin的tbl_user表
3.使用JdbcTemplate技术封装JDBC
4.登录成功跳转到successServlet展示:登陆成功!用户名,欢迎您
5.登录失败跳转到failServlet展示:登陆失败,用户名或密码错误!

实现过程:
1.创建javaEE项目,编写login.html,导入配置文件,jar包

login.html中form表单的action路径的写法:
虚拟目录+Servlet的资源路径

 <form action="/login/loginServlet" method="post">
        用户名:<input type="text" name="username"> <br>
        密码:<input type="password" name="password"><br>

        <input type="submit" value="登录">

    </form>

2.创建数据库

   CREATE DATABASE relogin;
		USE relogin;
		CREATE TABLE tbl_user(
		
			id INT PRIMARY KEY AUTO_INCREMENT,
			username VARCHAR(32) UNIQUE NOT NULL,
			password VARCHAR(32) NOT NULL
		);

3.参照数据库创建对应的实体类User

package com.web.testlogin.entity;
/*
  用户的实体类
*/
public class User {
    private int id;
    private String username;
    private String password;

    public User() {
    }

    public User(String username, String password) {
        this.username = username;
        this.password = password;
    }

    public int getId() {
        return id;
    }

    public void setId(int id) {
        this.id = id;
    }

    public String getUsername() {
        return username;
    }

    public void setUsername(String username) {
        this.username = username;
    }

    public String getPassword() {
        return password;
    }

    public void setPassword(String password) {
        this.password = password;
    }

    @Override
    public String toString() {
        return "User{" +
                "id=" + id +
                ", username='" + username + '\'' +
                ", password='" + password + '\'' +
                '}';
    }
}

4.编写工具类JDBCUtils
druid.properties

driverClassName=com.mysql.jdbc.Driver
url=jdbc:mysql:///reLogin
username=root
password=root
initialSize=5
maxActive=10
maxWait=3000

工具类

package com.web.testlogin.util;

import com.alibaba.druid.pool.DruidDataSourceFactory;

import javax.sql.DataSource;
import java.io.IOException;
import java.io.InputStream;
import java.sql.Connection;
import java.sql.SQLException;
import java.util.Properties;

/*
* JDBC连接工具类 使用Druid连接池
* */
public class JDBCUtils {
    private static DataSource ds;
    static {
        try {
            //1.加载配置文件
            Properties pro=new Properties();
            //使用ClassLoader加载配置文件,获取字节输入流
            InputStream is = JDBCUtils.class.getClassLoader().getResourceAsStream("druid.properties");
            pro.load(is);

            //2.初始化连接池对象
            ds = DruidDataSourceFactory.createDataSource(pro);
        } catch (IOException e) {
            e.printStackTrace();
        } catch (Exception e) {
            e.printStackTrace();
        }
    }

    /**
     * 获取连接池对象
     * @return DataSource
     */
    public static DataSource getDataSource(){
        return ds;
    }

    /**
     * 获取连接Connection对象
     * @return connection
     * @throws SQLException
     */
    public static Connection getConnection() throws SQLException {
        return ds.getConnection();
    }
}

5.编写UserDao,提供登录方法

public class UserDao {
    //声明JDBCTemplate对象共用
    private static JdbcTemplate template=new JdbcTemplate(JDBCUtils.getDataSource());
    /**
     * 用户登录的方法
     * @param curUser  只包含用户名和密码
     * @return user 包含用户的全部信息
     */
    public User login(User curUser){
        try {
            //1.编写sql
            String sql="select * from tbl_user where username=? and password=?";
            //调用query方法
            User user = template.queryForObject(sql, new BeanPropertyRowMapper<User>(User.class),
                    curUser.getUsername(), curUser.getPassword());
            return user;
        } catch (DataAccessException e) {
            e.printStackTrace();//记录日志
            //失败返回null
            return null;
        }
    }
}

6.编写servlet类,loginServlet

@WebServlet("/loginServlet")
public class loginServlet extends HttpServlet {
    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
        //1.设置编码
        request.setCharacterEncoding("utf-8");
//        //第一种方法:2.获取请求参数的值
//        String username = request.getParameter("username");
//        String password = request.getParameter("password");
//        //3.封装成User对象
//        User loginUser=new User(username,password);
        //第二种方法:获取所有的请求参数值,创建user对象,使用BeanUtils进行封装
        Map<String, String[]> parameterMap = request.getParameterMap();
        User loginUser=new User();
        try {
            BeanUtils.populate(loginUser,parameterMap);
        } catch (IllegalAccessException e) {
            e.printStackTrace();
        } catch (InvocationTargetException e) {
            e.printStackTrace();
        }

        //4.调用UserDao里的方法
        UserDao userDao=new UserDao();
        User user = userDao.login(loginUser);
        //5.判断USer
        if (user==null){
            //登录失败
            request.getRequestDispatcher("/failServlet").forward(request,response);
        }else {
            //登录成功
            //存储数据
            request.setAttribute("user",user);
            //转发
            request.getRequestDispatcher("/successServlet").forward(request,response);
        }

    }

    protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
           this.doPost(request,response);
    }
}

7.编写successServlet类和failServlet类

@WebServlet("/failServlet")
public class failServlet extends HttpServlet {
    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
        //将信息显示在页面上
        //1.设置编码
        response.setContentType("text/html;charset=utf-8");
        //2.输出
        response.getWriter().write("登录失败,用户名或密码错误");

    }

    protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
this.doPost(request,response);
    }
}



@WebServlet("/successServlet")
public class successServlet extends HttpServlet {
    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
        //1.获取存放在request域中的数据
        User user = (User) request.getAttribute("user");
        //将信息显示在页面上
        //1.设置编码
        response.setContentType("text/html;charset=utf-8");
        //2.输出
        response.getWriter().write("登录成功!"+user.getUsername()+"欢迎您");

    }

    protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
this.doPost(request,response);
    }
}

BeanUtils工具类,简化数据封装
作用:用于封装JavaBean的(标准的java类)。

1.要求:

  • 类必须被public修饰
  • 必须提供无参构造器
  • 成员变量必须使用private修饰
  • 提供公共的getter和setter方法
    2.功能:用于封装数据。

概念:

1.成员变量
2.属性:getter和setter方法截取后的产物。例如:getUsername() --> Username–> username

方法:

1.setProperty()
2.getProperty()
3.populate(object obj,Map map):将Map集合的键值对信息封装到相应的JavaBean对象中。

  • 1
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
好的,下面是使用Spring Boot框架编写用户登录案例的步骤: 1. 创建一个Spring Boot项目,并添加相应的依赖。 2. 创建一个用户实体类,包含用户名和密码属性。 ```java @Entity @Table(name = "users") public class User { @Id @GeneratedValue(strategy = GenerationType.IDENTITY) private Long id; @Column(nullable = false, unique = true) private String username; @Column(nullable = false) private String password; // 省略getter和setter方法 } ``` 3. 创建一个用户登录表单类,包含用户名和密码属性。 ```java public class LoginForm { @NotBlank private String username; @NotBlank private String password; // 省略getter和setter方法 } ``` 4. 创建一个用户控制器类,处理用户登录请求。 ```java @RestController @RequestMapping("/api/auth") public class AuthController { @Autowired private AuthenticationManager authenticationManager; @Autowired private JwtTokenProvider jwtTokenProvider; @Autowired private UserService userService; @PostMapping("/signin") public ResponseEntity<?> authenticateUser(@Valid @RequestBody LoginForm loginRequest) { Authentication authentication = authenticationManager.authenticate( new UsernamePasswordAuthenticationToken( loginRequest.getUsername(), loginRequest.getPassword() ) ); SecurityContextHolder.getContext().setAuthentication(authentication); String jwt = jwtTokenProvider.generateToken(authentication); return ResponseEntity.ok(new JwtAuthenticationResponse(jwt)); } // 省略其他方法 } ``` 5. 创建一个用户服务类,处理用户数据的CRUD操作。 ```java @Service public class UserServiceImpl implements UserService { @Autowired private UserRepository userRepository; @Override public Optional<User> findByUsername(String username) { return userRepository.findByUsername(username); } @Override public void save(User user) { userRepository.save(user); } } ``` 6. 创建一个JWT Token提供者类,用于生成和验证Token。 ```java @Component public class JwtTokenProvider { @Value("${app.jwtSecret}") private String jwtSecret; @Value("${app.jwtExpirationInMs}") private int jwtExpirationInMs; public String generateToken(Authentication authentication) { UserPrincipal userPrincipal = (UserPrincipal) authentication.getPrincipal(); Date now = new Date(); Date expiryDate = new Date(now.getTime() + jwtExpirationInMs); return Jwts.builder() .setSubject(Long.toString(userPrincipal.getId())) .setIssuedAt(new Date()) .setExpiration(expiryDate) .signWith(SignatureAlgorithm.HS512, jwtSecret) .compact(); } public Long getUserIdFromJWT(String token) { Claims claims = Jwts.parser() .setSigningKey(jwtSecret) .parseClaimsJws(token) .getBody(); return Long.parseLong(claims.getSubject()); } public boolean validateToken(String authToken) { try { Jwts.parser().setSigningKey(jwtSecret).parseClaimsJws(authToken); return true; } catch (SignatureException ex) { logger.error("Invalid JWT signature"); } catch (MalformedJwtException ex) { logger.error("Invalid JWT token"); } catch (ExpiredJwtException ex) { logger.error("Expired JWT token"); } catch (UnsupportedJwtException ex) { logger.error("Unsupported JWT token"); } catch (IllegalArgumentException ex) { logger.error("JWT claims string is empty."); } return false; } } ``` 7. 创建一个JWT身份验证响应类,用于在登录成功后返回Token给客户端。 ```java public class JwtAuthenticationResponse { private String accessToken; private String tokenType = "Bearer"; public JwtAuthenticationResponse(String accessToken) { this.accessToken = accessToken; } public String getAccessToken() { return accessToken; } public void setAccessToken(String accessToken) { this.accessToken = accessToken; } public String getTokenType() { return tokenType; } public void setTokenType(String tokenType) { this.tokenType = tokenType; } } ``` 8. 创建一个Spring Security配置类,用于配置安全策略和过滤器链。 ```java @Configuration @EnableWebSecurity @EnableGlobalMethodSecurity( securedEnabled = true, jsr250Enabled = true, prePostEnabled = true ) public class SecurityConfig extends WebSecurityConfigurerAdapter { @Autowired private CustomUserDetailsService customUserDetailsService; @Autowired private JwtAuthenticationEntryPoint unauthorizedHandler; @Bean public JwtAuthenticationFilter jwtAuthenticationFilter() { return new JwtAuthenticationFilter(); } @Override public void configure(AuthenticationManagerBuilder authenticationManagerBuilder) throws Exception { authenticationManagerBuilder .userDetailsService(customUserDetailsService) .passwordEncoder(passwordEncoder()); } @Bean(BeanIds.AUTHENTICATION_MANAGER) @Override public AuthenticationManager authenticationManagerBean() throws Exception { return super.authenticationManagerBean(); } @Bean public PasswordEncoder passwordEncoder() { return new BCryptPasswordEncoder(); } @Override protected void configure(HttpSecurity http) throws Exception { http.cors().and().csrf().disable() .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and() .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and() .authorizeRequests().antMatchers("/", "/favicon.ico", "/**/*.png", "/**/*.gif", "/**/*.svg", "/**/*.jpg", "/**/*.html", "/**/*.css", "/**/*.js").permitAll() .antMatchers("/api/auth/**").permitAll() .anyRequest().authenticated(); // 添加JWT身份验证过滤器 http.addFilterBefore(jwtAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class); } } ``` 以上就是使用Spring Boot框架编写用户登录案例的基本步骤,您可以根据自己的需求进行修改和扩展。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值