Springboot实现Session拦截器_session getattribute拦截-优快云博客

本文链接：https://blog.youkuaiyun.com/qq3399013670/article/details/87858125

本文介绍了一种在SpringBoot中实现Session拦截器的方法，通过自定义拦截器检查用户会话状态，对于未登录用户进行重定向处理。适用于需要用户认证的Web应用。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

springboot实现session拦截器供参考：

//session拦截器
@Component("sessionInterceptor")
public class SessionInterceptor extends HandlerInterceptorAdapter{

   // 忽略的URL地址
	private static final String[] IGNORE_URI = {"/login","/logintest"};
	
    @Override  
    public boolean preHandle(HttpServletRequest request,
    		HttpServletResponse response, Object handler) throws Exception 
    {   
    	SessionInfo session = (SessionInfo) request.getSession().getAttribute("session");
    	
    	String requestURI = request.getRequestURI();
    	String contextPath = request.getContextPath();
    	contextPath = contextPath+"/";

    	for (int i = 0; i < IGNORE_URI.length; i++) {
           // 忽略的url地址
			if (requestURI.contains(IGNORE_URI[i]) || requestURI.equals(contextPath)) {
				return true;
			} 
		}
    	//如果session为空则提示未登录
    	if(!requestURI.contains(IGNORE_URI[i])&& null == session) {
    		String requestType = request.getHeader("X-Requested-With"); 
    		if(!BaseUtil.stringIsNull(requestType)){
    			if("XMLHttpRequest".equals(requestType)) {
    				throw new GenericException("session为空");
    			}
    		}
    		request.getRequestDispatcher("/WEB-INF/views/login/login.jsp").forward(request, response);
    	}
		return true;
    }
}