spring 拦截器实现用户权限登陆验证

spring 拦截器实现用户权限登陆验证
创建一个User类声明id,username,password.并定义getter/setter方法；
创建一个UserController在该类中定义向主页跳转，向登陆页面跳转，执行用户登录操作等方法。

package com.itheima.controller;

import javax.servlet.http.HttpSession;

import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;

import com.itheima.po.User;

@Controller

public class UserController {
	@RequestMapping(value="/login",method=RequestMethod.GET)
	public String toLogin() {
		return "login";
	}
	@RequestMapping(value="/login",method=RequestMethod.POST)
	public String login(User user,Model model,HttpSession session) {
		String username =user.getUsername();
		String password =user.getPassword();
		 if(username!=null&&username.equals("xiaoxue")
	                &&p