自动登录

结构:

• 1.UserBean
• 2.utils
• 3.login.jsp
• 4.Dao/DaoImpl
• 5.loginServlet

/**
 * Servlet implementation class LoginServlet
 */
public class LoginServlet extends HttpServlet {
	protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {

		try {
			String userName = request.getParameter("username");
			String password = request.getParameter("password");
			String autoLogin = request.getParameter("auto_login");
			UserBean user = new UserBean();
			user.setUsername(userName);
			user.setPassword(password);
			
			UserDao dao = new UserDaoImpl();
			UserBean userBean = dao.login(user);
			
			if(userBean != null){
				
				//页面提交上来的时候，是否选择了自动登录
				if("on".equals(autoLogin)){
					
					//发送cookie给客户端
					
					Cookie cookie = new Cookie("auto_login", userName+"#"+password);
					cookie.setMaxAge(60*60*24*7);//7天有效期
					cookie.setPath("/AutoLoginDemo");
					//cookie.setPath(request.getContextPath());
					response.addCookie(cookie);
					
				}
				
				
				//成功了，进入首页
				request.getSession().setAttribute("userBean", userBean);
				response.sendRedirect("index.jsp");
			}else{
				//不成功...
				request.getRequestDispatcher("login.jsp").forward(request, response);
			}
			
		} catch (SQLException e) {
			e.printStackTrace();
		}
	}

	/**
	 * @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
	 */
	protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		// TODO Auto-generated method stub
		doGet(request, response);
	}

}

• 6.AutoLoginServlet

public class AutoLoginFilter implements Filter {

	/**
	 * @see Filter#destroy()
	 */
	public void destroy() {
		// TODO Auto-generated method stub
	}
	/**
	 * @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain)
	 */
	public void doFilter(ServletRequest req, ServletResponse response, FilterChain chain) throws IOException, ServletException {
		try {
			HttpServletRequest request = (HttpServletRequest) req;
			
			//先判断，现在session中还有没有那个userBean.
			UserBean userBean = (UserBean) request.getSession().getAttribute("userBean");
			//还有，有效。
			if(userBean != null){
				chain.doFilter(request, response);
			}else{
				//代表session失效了。
				
				//2. 看cookie。
				
				//1. 来请求的时候，先从请求里面取出cookie , 但是cookie有很多的key-value
				Cookie[] cookies = request.getCookies();
				//2. 从一堆的cookie里面找出我们以前给浏览器发的那个cookie
				Cookie cookie = CookieUtil.findCookie(cookies, "auto_login");
				
				//第一次来
				if(cookie  == null){
					chain.doFilter(request, response);
				}else{
					
					//不是第一次。
					
					String value = cookie.getValue();
					String username = value.split("#")[0];
					String password = value.split("#")[1];

					//完成登录
					UserBean user = new UserBean();
					user.setUsername(username);
					user.setPassword(password);

					UserDao dao = new UserDaoImpl();
					userBean = dao.login(user);
					
					//使用session存这个值到域中，方便下一次未过期前还可以用。
					request.getSession().setAttribute("userBean", userBean);
					
					chain.doFilter(request, response);
				}
			}
		} catch (Exception e) {
			e.printStackTrace();
			chain.doFilter(req, response);
		}
	}

	
	/**
	 * @see Filter#init(FilterConfig)
	 */
	public void init(FilterConfig fConfig) throws ServletException {
//		有可能在这里面执行10分钟的耗时
	}

}