项目中的多重登录检测处理

需求：

一个账户同时只能一次登录在线，当使用同一个账户二次登录的时候那么第一的登录将被失效(类似QQ挤下线)

处理基本思想：

将唯一用户ID与Session建立关联关系放在Application作用域中进行管理。

----------------------------------------------------------------------------------------------------------

关键处理类：

[java] view plain copy print ?

1. package com.defshare.sy.web.util;
3. import java.util.HashMap;
4. import java.util.Map;
5. import java.util.Properties;
7. import javax.servlet.ServletContext;
8. import javax.servlet.http.HttpSession;
10. import org.apache.log4j.Logger;
11. import org.apache.struts2.ServletActionContext;
13. import com.defshare.foundation.global.PropertiesUtil;
14. import com.defshare.sy.config.AuthConfig;
16. public final class AuthenUtil {
18. static Logger LOG = Logger.getLogger(AuthenUtil.class);
20. /**
21. * 多重登录检测处理
22. * @param loginId
23. */
24. public synchronized static final void multipleLoginDetect(String loginId){
25. ServletContext servletContext = ServletActionContext.getServletContext();
26. Map<String,HttpSession> sessionMap = new HashMap<String,HttpSession>();
27. Object sessionMapObj = servletContext.getAttribute("LOGINED_USER_SESSION_MAP");
28. if (sessionMapObj!=null){
29. sessionMap = (Map<String,HttpSession>)sessionMapObj;
30. }
31. if (sessionMap.containsKey(loginId.toUpperCase())){//如果登过录就销毁以前登录的Session
32. HttpSession session = sessionMap.get(loginId.toUpperCase());
33. if (session!=null && !ServletActionContext.getRequest().getSession().getId().equals(session.getId())){
34. try {
35. session.invalidate();
36. } catch (Exception e) {
37. LOG.info("session被重复销毁:["+e.getMessage()+"]");
38. }
39. }
41. }
42. sessionMap.put(loginId.toUpperCase(), ServletActionContext.getRequest().getSession());//将当前session重新放入Map
43. servletContext.setAttribute("LOGINED_USER_SESSION_MAP", sessionMap);
44. }
46. /**
47. * 登出
48. * @param loginId
49. */
50. public synchronized static final void logout(String loginId){
51. if(loginId==null || "".equals(loginId))
52. return;
54. ServletContext servletContext = ServletActionContext.getServletContext();
56. Object sessionMapObj = servletContext.getAttribute("LOGINED_USER_SESSION_MAP");
57. if (sessionMapObj==null){
58. return;
59. }
60. Map<String,HttpSession> sessionMap = (Map<String,HttpSession>)sessionMapObj;
61. if (sessionMap.containsKey(loginId.toUpperCase())){//如果登过录就销毁以前登录的Session
62. HttpSession session = sessionMap.get(loginId.toUpperCase());
63. if (session!=null){
64. try {
65. session.invalidate();
66. LOG.info("根据登录ID:"+loginId+"找到Session,执行销毁");
67. } catch (Exception e) {
68. LOG.info("session被重复销毁:["+e.getMessage()+"]");
69. }
70. }
72. sessionMap.remove(loginId.toUpperCase());
73. }
74. }
76. public synchronized static final String getAdminName(){
77. return AuthConfig.adminName;
78. }
80. /**
81. * 获得管理员信息
82. * <p>
83. * admin,0000
84. * </p>
85. * @return
86. */
87. public synchronized static final String getAdminInfo(){
88. return AuthConfig.adminName+","+AuthConfig.adminPwd;
89. }
90. }

package com.defshare.sy.web.util;

import java.util.HashMap;
import java.util.Map;
import java.util.Properties;

import javax.servlet.ServletContext;
import javax.servlet.http.HttpSession;

import org.apache.log4j.Logger;
import org.apache.struts2.ServletActionContext;

import com.defshare.foundation.global.PropertiesUtil;
import com.defshare.sy.config.AuthConfig;

public final class AuthenUtil {
	
	static Logger LOG = Logger.getLogger(AuthenUtil.class);
	
	/**
	 * 多重登录检测处理
	 * @param loginId
	 */	
	 public  synchronized static final void multipleLoginDetect(String loginId){
		ServletContext servletContext = ServletActionContext.getServletContext();
		Map<String,HttpSession> sessionMap = new HashMap<String,HttpSession>();
		Object  sessionMapObj = servletContext.getAttribute("LOGINED_USER_SESSION_MAP");
		if (sessionMapObj!=null){
			sessionMap = (Map<String,HttpSession>)sessionMapObj;
		}
		if (sessionMap.containsKey(loginId.toUpperCase())){//如果登过录就销毁以前登录的Session
			HttpSession session = sessionMap.get(loginId.toUpperCase());
			if (session!=null && !ServletActionContext.getRequest().getSession().getId().equals(session.getId())){
				try {
					session.invalidate();
				} catch (Exception e) {
					LOG.info("session被重复销毁:["+e.getMessage()+"]");
				}
			}
				
		}
		sessionMap.put(loginId.toUpperCase(), ServletActionContext.getRequest().getSession());//将当前session重新放入Map
		servletContext.setAttribute("LOGINED_USER_SESSION_MAP", sessionMap);
	}
	 
	/**
	 * 登出
	 * @param loginId
	 */
	public synchronized static final void logout(String loginId){
		if(loginId==null || "".equals(loginId))
			return;
		
		ServletContext servletContext = ServletActionContext.getServletContext();
		
		Object  sessionMapObj = servletContext.getAttribute("LOGINED_USER_SESSION_MAP");
		if (sessionMapObj==null){
			return;
		}
		Map<String,HttpSession> sessionMap = (Map<String,HttpSession>)sessionMapObj;
		if (sessionMap.containsKey(loginId.toUpperCase())){//如果登过录就销毁以前登录的Session
			HttpSession session = sessionMap.get(loginId.toUpperCase());
			if (session!=null){
				try {
					session.invalidate();		
					LOG.info("根据登录ID:"+loginId+"找到Session,执行销毁");
				} catch (Exception e) {
					LOG.info("session被重复销毁:["+e.getMessage()+"]");
				}
			}
				
			sessionMap.remove(loginId.toUpperCase());
		}
	}
	 
	 public synchronized static final String getAdminName(){
		return AuthConfig.adminName;
	 }
	 
	/**
	 * 获得管理员信息
	 * <p>
	 * 	admin,0000
	 * </p>
	 * @return
	 */
	public synchronized static final String getAdminInfo(){		
		return AuthConfig.adminName+","+AuthConfig.adminPwd;
	}
}

登录调用示范：

[java] view plain copy print ?

1. /**
2. * 诊所登录
3. *
4. * @return
5. */
6. public String doLogin() {
8. SystemLog log = new SystemLog();
10. String zsid = super.getParam("zsid").toString();
11. String zsmm = super.getParam("zsmm").toString();
13. log.setLoginId(zsid);
14. log.setKind("1");
15. log.setIp(request.getRemoteHost());
17. if (StringUtils.isBlank(zsid) || StringUtils.isBlank(zsmm)) {
18. super.addValidateMsg(VALIDATE_MSG, "诊所编号密码不能为空");
19. log.setContent("诊所登录失败:[诊所编号密码不能为空]");
20. systemLogService.addLog(log);
21. return "toLogin";
22. }
24. if (zsid.equals(AuthConfig.adminName)) {
25. super.addValidateMsg(VALIDATE_MSG, "非法的诊所ID");
26. log.setContent("诊所登录失败:[非法的诊所ID]");
27. systemLogService.addLog(log);
28. return "toLogin";
29. }
31. try {
32. if (cliniqueService.authentication(zsid, zsmm)) {
33. super.addAttr(IAction.LOGINED_USER, zsid, VScope.SESSION);
34. UserUtil.setLoginedUser(zsid);// 保存线程局部变量
35. <SPAN style="COLOR: #ff0000"><STRONG>AuthenUtil.multipleLoginDetect(zsid);</STRONG>
36. </SPAN> log.setContent("诊所" + zsid + ">登录>成功!");
37. systemLogService.addLog(log);
38. return "login_success";
39. }
41. } catch (Exception e) {
42. super.addValidateMsg(VALIDATE_MSG, e.getMessage());
43. log.setContent("诊所登录异常:[" + e.getMessage() + "]");
44. systemLogService.addLog(log);
45. return "toLogin";
46. }
47. super.addAttr(IAction.LOGIN_MSG, "用户名密码不正确", VScope.REQ);
48. log.setContent("诊所登录失败:[用户名密码不正确]");
49. systemLogService.addLog(log);
50. return "toLogin";
51. }

/**
	 * 诊所登录
	 * 
	 * @return
	 */
	public String doLogin() {

		SystemLog log = new SystemLog();

		String zsid = super.getParam("zsid").toString();
		String zsmm = super.getParam("zsmm").toString();

		log.setLoginId(zsid);
		log.setKind("1");
		log.setIp(request.getRemoteHost());

		if (StringUtils.isBlank(zsid) || StringUtils.isBlank(zsmm)) {
			super.addValidateMsg(VALIDATE_MSG, "诊所编号密码不能为空");
			log.setContent("诊所登录失败:[诊所编号密码不能为空]");
			systemLogService.addLog(log);
			return "toLogin";
		}

		if (zsid.equals(AuthConfig.adminName)) {
			super.addValidateMsg(VALIDATE_MSG, "非法的诊所ID");
			log.setContent("诊所登录失败:[非法的诊所ID]");
			systemLogService.addLog(log);
			return "toLogin";
		}

		try {
			if (cliniqueService.authentication(zsid, zsmm)) {
				super.addAttr(IAction.LOGINED_USER, zsid, VScope.SESSION);
				UserUtil.setLoginedUser(zsid);// 保存线程局部变量
				AuthenUtil.multipleLoginDetect(zsid);
				log.setContent("诊所" + zsid + ">登录>成功!");
				systemLogService.addLog(log);
				return "login_success";
			}

		} catch (Exception e) {
			super.addValidateMsg(VALIDATE_MSG, e.getMessage());
			log.setContent("诊所登录异常:[" + e.getMessage() + "]");
			systemLogService.addLog(log);
			return "toLogin";
		}
		super.addAttr(IAction.LOGIN_MSG, "用户名密码不正确", VScope.REQ);
		log.setContent("诊所登录失败:[用户名密码不正确]");
		systemLogService.addLog(log);
		return "toLogin";
	}

登出调用示范：

[java] view plain copy print ?

1. public String logout() {
2. if(!StringUtils.isBlank(getCurrentUser())){
3. SystemLog log = new SystemLog();
4. log.setLoginId(getCurrentUser());
5. log.setKind("1");
6. log.setIp(request.getRemoteHost());
7. log.setContent("诊所" + getCurrentUser() + ">注销>成功!");
8. AuthenUtil.logout(getCurrentUser());
9. systemLogService.addLog(log);
10. return "logout_success";
11. }else{
13. return "logout_success";
14. }
18. }