使用cookie实现自动登录功能

最新推荐文章于 2023-03-21 16:05:20 发布

编程课堂

最新推荐文章于 2023-03-21 16:05:20 发布

阅读量2.8k

点赞数

分类专栏： Java

本文链接：https://blog.csdn.net/weixin_44917045/article/details/105623833

版权

Java 专栏收录该内容

66 篇文章 3 订阅

订阅专栏

1、自动登录流程：
在这里插入图片描述

2、代码实现
这里用户名和密码使用的是Base64加密，这种方式是不安全的，可以解码。
① 操作cookie的工具类 CookieHelper.java

public class CookieHelper {
    public static void set(StaffDTO dto, HttpServletResponse response) {
        String loginName = Base64.getEncoder().encodeToString(dto.getLoginName().getBytes());
        String loginPassword = Base64.getEncoder().encodeToString(dto.getLoginPassword().getBytes());
        Cookie cookie = new Cookie("login_staff", loginName + "#" + loginPassword);
        cookie.setMaxAge(60*60*24*365);
        response.addCookie(cookie);
    }

    public static Map<String, String> get(HttpServletRequest request) {
        Map<String, String> map = new HashMap<>();

        Cookie[] cookies = request.getCookies();
        if (cookies == null)
            return null;

        for (Cookie cookie: cookies) {
            if ("login_staff".equals(cookie.getName()))
                map = getLoginParams(cookie);
        }

        return map;
    }

    public static void delete(HttpServletRequest request, HttpServletResponse response) {
        Cookie[] cookies = request.getCookies();
        for (Cookie cookie : cookies) {
            cookie.setMaxAge(0);
            response.addCookie(cookie);
        }
    }

    private static Map<String, String> getLoginParams(Cookie cookie) {
        Map<String, String> map = new HashMap<>();

        String[] params = cookie.getValue().split("#");
        String loginName = new String(Base64.getDecoder().decode(params[0]), StandardCharsets.UTF_8);
        String loginPassword = new String(Base64.getDecoder().decode(params[1]), StandardCharsets.UTF_8);
        map.put("loginName", loginName);
        map.put("loginPassword", loginPassword);

        return map;
    }

② 控制器中的登录方法

@PostMapping("/login")
public RequestResult login(@RequestParam Map<String, String> map, HttpServletResponse response) {
    StaffDTO staff = staffService.getByAccount(map.get("loginName"), map.get("loginPassword"));
    if (staff == null)
        return RequestResult.fail();
    else if (staff.getEnabled() == 0)
        return RequestResult.fail("当前账户以被禁用");

    if (Boolean.parseBoolean(map.get("autoLogin")))
        CookieHelper.set(staff, response);

    return RequestResult.success(staff);
}

③ 控制器中登出方法

@PostMapping("/logout")
public RequestResult logout(HttpServletRequest request, HttpServletResponse response) {
    CookieHelper.delete(request, response);
    return RequestResult.success();
}