用Cookie实现用户免密登陆

1.导jar包

pom.xml

 <properties>
  <!-- spring 版本号 -->
  <spring.version>4.3.8.RELEASE</spring.version>
 </properties>

<!-- AOP相关包 -->
<dependency>
        <groupId>aspectj</groupId>
    	<artifactId>aspectjrt</artifactId>
    	<version>1.5.3</version>
</dependency>
<dependency>
        <groupId>org.aspectj</groupId>
    	<artifactId>aspectjweaver</artifactId>
    	<version>1.8.0</version>
</dependency>
<dependency>
   	<groupId>cglib</groupId>
   	<artifactId>cglib-nodep</artifactId>
   	<version>2.1_3</version>
</dependency>

<dependency>
       <groupId>org.springframework</groupId>
       <artifactId>spring-aop</artifactId>
       <version>${spring.version}</version>
</dependency>
        
<dependency>
    	<groupId>org.springframework</groupId>
    	<artifactId>spring-aspects</artifactId>
    	<version>${spring.version}</version>
</dependency>

web.xml 配置

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
       xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"
       version="3.1" metadata-complete="true">
        
  <context-param>
    <param-name>contextConfigLocation</param-name>
    <param-value>
            classpath*:/spring-mybatis.xml,
        	classpath*:/spring-tx.xml
    </param-value>
  </context-param>
   
   <listener>
    <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
  </listener>
  <listener>
    <listener-class>org.springframework.web.context.request.RequestContextListener </listener-class>
  </listener>	
   <servlet>
    <servlet-name>springServlet</servlet-name>
    <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
    <init-param>
      <param-name>contextConfigLocation</param-name>
      <param-value>classpath*:/spring-mvc.xml</param-value>
    </init-param>
    <load-on-startup>2</load-on-startup>
  </servlet>
   
  <servlet-mapping>
    <servlet-name>springServlet</servlet-name>
    <url-pattern>/</url-pattern>
  </servlet-mapping>
 <!-- 指定监听器加载的log4j配置文件 -->
	<context-param>  
        <param-name>log4jConfigLocation</param-name>  
        <param-value>classpath:log4j.properties</param-value>  
	</context-param>  
	<listener>  
        <listener-class>  
            org.springframework.web.util.Log4jConfigListener  
        </listener-class>  
    </listener>

  <session-config>
    <session-timeout>20</session-timeout>
  </session-config>   
  
</web-app>

spring-mybatis.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:context="http://www.springframework.org/schema/context"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="
        http://www.springframework.org/schema/beans 
        http://www.springframework.org/schema/beans/spring-beans.xsd
        http://www.springframework.org/schema/context
        http://www.springframework.org/schema/context/spring-context.xsd">
 
 	<!--读取配置文件-->
    <!-- <bean id="propertyConfigurer" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
        <property name="locations">
            <list>
                <value>classpath:db.properties</value>
            </list>
        </property>
    </bean> -->
	<context:property-placeholder location="classpath:db.properties"
                                  ignore-unresolvable="false" />
    <!-- 定义数据源Bean -->
    <!-- Druid -->
    <!-- <bean id="dataSource" class="com.alibaba.druid.pool.DruidDataSource"
    	init-method="init" destroy-method="close">
        <property name="url" value="${url}" />
        <property name="username" value="${username}" />
        <property name="password" value="${password}" />
    </bean> --> 
 
 	<!-- 配置数据源 -->
 	<bean id="dataSource"
	class="org.springframework.jdbc.datasource.DriverManagerDataSource" scope="singleton">
	<property name="driverClassName" value="${jdbc.driver}"/>
	<property name="url" value="${jdbc.url}"/>
	<property name="username" value="${jdbc.username}"/>
	<property name="password" value="${jdbc.password}"/>
	</bean> 
	
    <!-- 注册SqlSessionFactoryBean -->
    <bean id="sqlSessionFactory" class="org.mybatis.spring.SqlSessionFactoryBean">
        <property name="dataSource" ref="dataSource" />
        <!-- 自动扫描mappers.xml文件 -->
        <property name="mapperLocations" value="classpath:top/lolcl/myblog/dao/*.xml" />
        <property name="configLocation" value="classpath:mybatis-config.xml"></property>
    </bean>
    
    <!-- DAO接口所在包名，Spring会自动查找其下的类 -->
    <bean class="org.mybatis.spring.mapper.MapperScannerConfigurer">
        <property name="basePackage" value="top.lolcl.myblog.dao" />
        <property name="sqlSessionFactoryBeanName" value="sqlSessionFactory" />
    </bean>
</beans>

spring-mvc.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xmlns:context="http://www.springframework.org/schema/context"
    xmlns:mvc="http://www.springframework.org/schema/mvc"
    xmlns:aop="http://www.springframework.org/schema/aop"
    xsi:schemaLocation="
        http://www.springframework.org/schema/beans 
        http://www.springframework.org/schema/beans/spring-beans.xsd
        http://www.springframework.org/schema/context 
        http://www.springframework.org/schema/context/spring-context.xsd
        http://www.springframework.org/schema/mvc 
        http://www.springframework.org/schema/mvc/spring-mvc.xsd
        http://www.springframework.org/schema/aop 
        http://www.springframework.org/schema/aop/spring-aop-4.3.xsd">
 
    <!-- 启动自动扫描 -->
    <context:component-scan base-package="top.lolcl.myblog" /> 
 
    <!-- 注册MVC注解驱动 -->
    <mvc:annotation-driven />
	
    <!-- 静态资源可访问的设置方式 -->
    <mvc:default-servlet-handler />
    
    <!-- 开启AOP注解扫描 -->
    <aop:aspectj-autoproxy proxy-target-class="true" />
    
     <!-- 强制使用cglib代理，如果不设置，将默认使用jdk代理，但是jdk的代理是基于接口的 -->
    <aop:config proxy-target-class="true" />
 
    <!-- 配置视图解析器，可以显式设置，也可以不设置，不设置会依据SpringMVC的默认设置 -->
    <bean id="viewResolver"
        class="org.springframework.web.servlet.view.InternalResourceViewResolver">
        <property name="prefix" value="/WEB-INF/" />
        <property name="suffix" value=".jsp" />
    </bean>
</beans>

spring-tx.xml

<bean id="txManager" class="org.springframework.jdbc.datasource.DataSourceTransactionManager">
        <property name="dataSource" ref="dataSource" />
    </bean>
    <!-- 声明式事务 ， 使用注解方式进行事务控制 -->
   <tx:annotation-driven transaction-manager="txManager"/> 

cookie工具类

package top.lolcl.myblog.util;

import java.util.HashMap;
import java.util.Map;

import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * cookie工具类 获取 设置cookie
 * @author sanch
 *
 */
public class CookieUtil {
	/**
	 * 设置Cookie
	 * @param request
	 * @param response
	 * @param value
	 * @param mavAge
	 */
	public static void addCookie(HttpServletResponse response, String name , String value,int maxAge) {
		Cookie cookie = new Cookie(name,value);
		cookie.setPath("/");
		if(maxAge > 0) {
			cookie.setMaxAge(maxAge);  //退出页面 cookie 默认值-1
		}
		response.addCookie(cookie);
	}
	
	/**
	 * 根据名字获取cookie
	 * @param name
	 * @return
	 */
	public static Cookie getCookieByName(HttpServletRequest request,String name) {
		Map<String,Cookie> cookieMap = ReadCookieMap(request);
		if(cookieMap.containsKey(name)) {
			Cookie cookie = cookieMap.get(name);
			return cookie;
		}else {
			return null;
		}
	}

	/**
	 * 将cookie封装到map里面
	 * @param request
	 * @return
	 */
	private static Map<String, Cookie> ReadCookieMap(HttpServletRequest request) {
		Map<String , Cookie> cookieMap = new HashMap<String , Cookie>();
		Cookie[] cookies = request.getCookies();
		if(null != cookies) {
			for(Cookie cookie : cookies) {
				cookieMap.put(cookie.getName(), cookie);
			}
		}
		return cookieMap;
	}

}

user用户的Controller代码

@Transactional
	@RequestMapping(value="/login",method=RequestMethod.POST)
	public ModelAndView login(User model,HttpServletRequest request,HttpServletResponse response) throws Exception {
		logger.info("login-----------------------------------------------");
		User user = null;
		user = userservice.getUserByUname(model.getUname());
//		userservice.insertSelective(model);
//		int d = 1/0; //可以控制事务
		  
		if(user == null || !user.getUpwd().equals(MyMD5Util.MD5(model.getUpwd()))) {
			Map<String,String> map = new HashMap<String,String>();
//			request.setAttribute("msg", "用户名密码输入错误，请重新输入");
			ModelAndView mod = new ModelAndView("forward:/user/view"); //redirect：重定向不能携带参数值进行传递  forward:转发可以带参
			mod.addObject("msg", "用户名密码输入错误，请重新输入"); //浏览器如果关闭默认cookie值为-1 所以需要设置cookie的有效时间
			return mod;
		}else {
			request.getSession().setAttribute("user", user);
			//写cookie 用户免登陆
			CookieUtil.addCookie(response, "user", user.getUname(), Constants.COOKIE_AGE);
			
			return new ModelAndView("redirect:/user/index");
		}
	}

spring aop  使用注解的方式进行切面编程 方法前置处理

package top.lolcl.myblog.interceptor;

import javax.servlet.ServletRequest;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

import org.apache.log4j.Logger;
import org.aspectj.lang.JoinPoint;
import org.aspectj.lang.annotation.After;
import org.aspectj.lang.annotation.Aspect;
import org.aspectj.lang.annotation.Before;
import org.aspectj.lang.annotation.Pointcut;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import org.springframework.web.context.request.RequestAttributes;
import org.springframework.web.context.request.RequestContextHolder;

import top.lolcl.myblog.entity.User;
import top.lolcl.myblog.service.IUserService;
import top.lolcl.myblog.util.CookieUtil;

/**
 * log日志拦截器
 * @author sanch
 *
 */
@Aspect // 表示该类是一个通知类
@Component //spring注解方式bean注入 交给spring管理
public class LogInterceptor {
	
	private  final static Logger logger = Logger.getLogger(LogInterceptor.class);
	
	@Autowired
	private IUserService userservice;
	//定义一个空方法 借用其注解抽取切点表达式
	@Pointcut("execution (* top.lolcl.myblog.controller.*.*(..))")
	public void pc() {}
	
	//前置通知
	@Before("pc()")
	public void before(JoinPoint joinPoint) throws Exception{
		System.out.println("login start!================================================================================");
		RequestAttributes requestAttributes = RequestContextHolder.getRequestAttributes();
		HttpServletRequest request = (HttpServletRequest) requestAttributes.resolveReference(requestAttributes.REFERENCE_REQUEST);
		Cookie cookie = CookieUtil.getCookieByName(request,"user");
		if(cookie != null && cookie.getValue() != "") {
			User user = userservice.getUserByUname(cookie.getValue());
			if(user != null) {
				request.getSession().setAttribute("user", user);
			}
			
		}
		logger.info("login start!================================================================================");
	}
	
	//后置通知
	@After("pc()")
	public void after(JoinPoint joinPoint) {
		System.out.println("login end=====================================================================================");
		logger.info("login end=====================================================================================");
	}
}