先看看我遇到的问题：
@ResponseBody@RequestMapping("/logout")public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {Json j = new Json();if (session != null) {//session.invalidate();session.removeAttribute("U");}Cookie[] cookies = request.getCookies();if (cookies != null) {for (Cookie cookie : cookies) {if ("userCookie".equals(cookie.getName())) {cookie.setValue("");cookie.setMaxAge(0);response.addCookie(cookie);}}}j.setSuccess(true);j.setMsg("注销成功！");return j;}
然后看到的cookie是：
拦截器这边：
public class PermissionInterceptor implements HandlerInterceptor {@Overridepublic boolean preHandle(HttpServletRequest request,HttpServletResponse response, Object handler) throws Exception {String requestUri = request.getRequestURI();String contextPath = request.getContextPath();String url = requestUri.substring(contextPath.length());if (excludeUrls.contains(url)) {return true;}HttpSession session = request.getSession();User u = (User) session.getAttribute("U");if (null==u) {Cookie[] cookies = request.getCookies();if (cookies!=null && cookies.length>0) {for (Cookie cookie : cookies) {if ("userCookie".equals(cookie.getName())) {String name = cookie.getValue();if (BaseUtil.isEmpty(name)) {String[] ss = name.split(",");if (userService.exsit("name", ss[0].trim(), "pwd", ss[1].trim())) {u = userService.findEntity("name", ss[0].trim(), "pwd", ss[1].trim());session.setAttribute("U", u);break;}}}}}}}
看到的结果是：
看出问题了吧，cookie 竟然不一样，不知道看到此处，你是否知道问题出在哪里。
我还发表了一个问题讨论：/question/6556_233128
下面我们就进入正题了。
先看spring mvc 的拦截器：
package com.tw.interceptor;import java.util.List;import javax.servlet.http.Cookie;import javax.servlet.http.HttpServletRequest;import javax.servlet.http.HttpServletResponse;import javax.servlet.http.HttpSession;import org.springframework.beans.factory.annotation.Autowired;import org.springframework.web.method.HandlerMethod;import org.springframework.web.servlet.HandlerInterceptor;import org.springframework.web.servlet.ModelAndView;import com.tw.entity.sys.Permission;import com.tw.entity.sys.RolesPermissionRel;import com.tw.entity.sys.User;import com.tw.entity.sys.UserRoleRel;import com.tw.service.sys.PermissionService;import com.tw.service.sys.RolesPermissionRelService;import com.tw.service.sys.UserRoleRelService;import com.tw.service.sys.UserService;import com.tw.util.BaseUtil;import com.tw.util.MD5;public class PermissionInterceptor implements HandlerInterceptor {@Autowiredprivate UserRoleRelService userRoleRelService;@Autowiredprivate RolesPermissionRelService rolesPermissionRelService;@Autowiredprivate PermissionService permissionService;@Autowiredprivate UserService userService;private ListexcludeUrls;public ListgetExcludeUrls() {return excludeUrls;}public void setExcludeUrls(ListexcludeUrls) {this.excludeUrls = excludeUrls;}@Overridepublic boolean preHandle(HttpServletRequest request,HttpServletResponse response, Object handler) throws Exception {String requestUri = request.getRequestURI();String contextPath = request.getContextPath();String url = requestUri.substring(contextPath.length());if (excludeUrls.contains(url)) {return true;}HttpSession session = request.getSession();User u = (User) session.getAttribute("U");if (null==u) {Cookie[] cookies = request.getCookies();if (cookies!=null && cookies.length>0) {for (Cookie cookie : cookies) {if ("userCookie".equals(cookie.getName())) {String name = cookie.getValue();if (BaseUtil.isEmpty(name)) {String[] ss = name.split(",");if (userService.exsit("name", ss[0].trim(), "pwd", ss[1].trim())) {u = userService.findEntity("name", ss[0].trim(), "pwd", ss[1].trim());session.setAttribute("U", u);break;}}}}}}if (null==u) {response.sendRedirect("login.jsp");return false;}HandlerMethod method = (HandlerMethod)handler;Perm perm = method.getMethodAnnotation(Perm.class);if (perm==null) {return true;}Listur = userRoleRelService.findByProperty("id.userId", u.getId());for (UserRoleRel userRoleRel : ur) {Listrp = rolesPermissionRelService.findByProperty("id.roleId", userRoleRel.getId().getRoleId());for (RolesPermissionRel rolesPermissionRel : rp) {Permission permission = permissionService.find(rolesPermissionRel.getId().getPermissionId());if (perm.privilegeValue().equals(permission.getPermissionCode())) {return true;}}}request.getRequestDispatcher("/error/noSecurity.jsp").forward(request, response);return false;}@Overridepublic void postHandle(HttpServletRequest request,HttpServletResponse response, Object handler,ModelAndView modelAndView) throws Exception {}@Overridepublic void afterCompletion(HttpServletRequest request,HttpServletResponse response, Object handler, Exception ex)throws Exception {}}
再看登录实现：
@ResponseBody@RequestMapping("/login")public Json login(String name,String pwd,String remember,Model model,HttpSession session,HttpServletRequest request,HttpServletResponse response) {Json json = new Json();if (userService.exsit("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()))) {User u = userService.findEntity("name", name.trim(), "pwd", MD5.MD5Encode(pwd.trim()));if (u.getCancel().equals("1")) {if ("yes".equals(remember.trim())) {Cookie cookie = new Cookie("userCookie", u.getName() + "," + u.getPwd());cookie.setMaxAge(60 * 60 * 24 * 14);//保存两周cookie.setPath("/");response.addCookie(cookie);}session.setAttribute("U", u);//return "redirect:/main";json.setMsg("登陆成功");json.setSuccess(true);return json;}else {json.setMsg("对不起你的账号还没有通过邮箱验证");//model.addAttribute("errorMsg", "对不起你的账号还没有通过邮箱验证"); }}else {json.setMsg("用户名或密码错误");// model.addAttribute("errorMsg", "用户名或密码错误"); }return json;// return "login";}
还有注销的：
@ResponseBody@RequestMapping("/logout")public Json logout(HttpSession session,HttpServletRequest request,HttpServletResponse response) {Json j = new Json();if (session != null) {// session.invalidate();session.removeAttribute("U");}Cookie[] cookies = request.getCookies();if (cookies != null) {for (Cookie cookie : cookies) {if ("userCookie".equals(cookie.getName())) {Cookie cookie2 = new Cookie("userCookie", null);cookie2.setMaxAge(0);cookie2.setPath("/");response.addCookie(cookie2);break;}}}j.setSuccess(true);j.setMsg("注销成功！");return j;}
看到这里你是否已经知道了之前问题的存在原因呢？
我先不考诉你们，谁知道这里面的错误原因可以在上面留言哦！
我想页面就简单多了，因为是执行方法之前拦截判断的，所以只要你存放有cookie无论调用那个页面都可以自动实现登陆。
补充一个问题：HTTP Status 500 - Request processing failed; nested exception is java.lang.IllegalArgumentException: Control character in cookie value or attribute.
看到这样的错误你知道是怎么回事么？
