将user放到sessinAttributes中
@SessionAttributes(value={"user"})
登陆成功后将获取的user放到session中
model.addAttribute("user", user);
退出或注销
/***
* 安全退出
* @param sessionStatus
* @return
*/
@RequestMapping(value="/safeExit",method = RequestMethod.GET)
public String safeExit(SessionStatus sessionStatus){
sessionStatus.setComplete();
return "redirect:/login.html";
}