实现单点登录Controller 将用户登录信息保留在cookie中
/** * 实现用户登录操作 */@RequestMapping("doLogin")@ResponseBodypublic SysResult doLogin(User user, HttpServletResponse response){ String ticket=dubboUserService.doLogin(user);//用户秘钥 if(StringUtils.isEmpty(ticket)){ return SysResult.fail(); } else { /* Cookie cookie=new Cookie("JT_TICKET",ticket); cookie.setMaxAge(7*24*60*60);//设定cookie有效期 cookie.setPath("/");//设定cookie的范畴 cookie.setDomain("jt.com");//设定cookie共享的域名，是实现单点登录的必备因素 response.addCookie(cookie);*/ CookieUtil.addCookie("JT_TICKET",ticket,7*24*60*60,"jt.com",response); return SysResult.success(); }}实现层 用户登录后会生成ticket， 将用户信息保留在redis中
@Overridepublic String doLogin(User user) { //1.将明文加密 String md5Pass= DigestUtils.md5DigestAsHex(user.getPassword().getBytes()); user.setPassword(md5Pass);//把用户明码进行加密 QueryWrapper<User>queryWrapper=new QueryWrapper<>(user); //依据对象中不为null的属性当做where条件 User userDB=userMapper.selectOne(queryWrapper); if (userDB==null){ //用户名或明码谬误 return null; }else {//用户名和明码正确，实现单点登录操作 String ticket= UUID.randomUUID().toString();//生成随机ticket //如果将数据保留到第三方 个别须要脱敏解决 userDB.setPassword("123456");//查问到的用户 设置明码 String userJSON= ObjectMapperUtil.toJson(userDB); jedisCluster.setex(ticket,7*24*60*60,userJSON);//将用户信息保留在redis中 return ticket; }}CookieUtil工具类public class CookieUtil { //新增cookie public static void addCookie(String cookieName, String cookieValue, Integer seconds, String domain, HttpServletResponse response){ Cookie cookie=new Cookie(cookieName,cookieValue); cookie.setMaxAge(seconds); cookie.setDomain(domain); cookie.setPath("/"); response.addCookie(cookie); } //依据name查value值 public static String getCookieValue(HttpServletRequest request, String cookieName ) { Cookie[] cookies = request.getCookies(); if (cookies.length > 0 && cookies != null) { for (Cookie cookie : cookies ) { if (cookieName.equals(cookie.getName())) { return cookie.getValue(); } } } return null; } //删除cookie public static void deleteCookie(HttpServletResponse response, String cookieName, String domain){ addCookie(cookieName,"",0,domain,response); }}将用户信息回显/** * 1.用户通过cookie信息查问用户数据 */@RequestMapping("/user/query/{ticket}")public JSONPObject findUserByTicket(@PathVariable String ticket, HttpServletResponse response,String callback){ String userJson = jedisCluster.get(ticket); //LRU算法清空了数据、他人随便篡改cookie信息 if(StringUtils.isEmpty(userJson)){ //有误 应该删除cookie信息 /*Cookie cookie=new Cookie("JT_TICKET","") ; cookie.setMaxAge(0); cookie.setDomain("jt.com"); cookie.setPath("/"); response.addCookie(cookie);*/ CookieUtil.deleteCookie(response,"JT_TICKET","jt.com"); return new JSONPObject(callback,SysResult.fail()); }return new JSONPObject(callback,SysResult.success(userJson));}用户退出操作如果用户点击退出操作, 首先应该删除Redis中的数据 其次删除Cookie中的数据 之后重定向到零碎首页.Controller
...