spring mav创建和注销session

Spring MVC Session管理

最新推荐文章于 2022-04-07 23:20:52 发布

原创最新推荐文章于 2022-04-07 23:20:52 发布 · 549 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#java #session #spring

本文介绍了一个使用Spring MVC框架实现用户登录验证及Session管理的应用案例，包括登录验证逻辑、Session存储和销毁过程，并解决了Ajax请求下Session操作导致的异常问题。

先贴上controller的代码，关于session的我用红色字体标注出来

@Controller
@RequestMapping("/admin")
@SessionAttributes("userName")
public class AdminController {

@Autowired
private AdminService adminService;

@SuppressWarnings("unused")
@RequestMapping(value="/cjyLogin",method = RequestMethod.POST)
public ModelAndView cjyLogin(@ModelAttribute("userInfoVo") UserInfo userInfo,Model model){
ModelAndView mav = new ModelAndView();
UserInfo user = adminService.getUserInfoByPrimaryKey(userInfo.getUserPhone());
if(userInfo!=null) {
if(user!=null) {
if(userInfo.getUserPwd().equals(user.getUserPwd())) {
System.out.println("++++++++++++++++++++++=============="+user.getUserName()+user.getUserPhone());
UserInfo admin = adminService.getUserInfoByPrimaryKey(userInfo.getUserPhone());//这一步是根据前台传来的userPhone 查询用户信息

model.addAttribute("userName", admin.getUserName());//将admin.getUserName()放进session中

mav.addObject("userName", admin.getUserName());
mav.setViewName("main");
}else {
mav.setViewName("login");
mav.addObject("message", "您的密码输入有误！");
}
}else {
mav.setViewName("login");
mav.addObject("message", "没有找到该用户！");
}
}else {
mav.setViewName("login");
mav.addObject("message", "没有获得您所输入的信息！");
}
return mav;
}

@ResponseBody
@RequestMapping(value="/userList",method = RequestMethod.POST)
public List<UserInfo> userList(@ModelAttribute("userInfoVo") UserInfo userInfo) {
List<UserInfo> userList = adminService.selectAllUser();
return userList;
}

/**
* 退出登录
* @param session
* @param req
* @return
*/
@ResponseBody
@RequestMapping(value="/userQuit",method = RequestMethod.POST)
public Map<String,Object> userQuit(HttpSession session,HttpServletRequest req){
session = req.getSession();
session.invalidate();
Map<String,Object> map = new HashMap<>();
return map;
}

}

@ResponseBody //spring mvc返回json的注解

session = req.getSession();
session.invalidate(); //先获得session，再注销

至于我为什么返回一个空的map，是因为我前台用的ajax，后台要返回数据，你也可以返回一个其他的数据

前台我用${sessionScope.userName}来获取session中的值，下面贴出前台代码

${sessionScope.userName} //获取值

退出 //点击后注销session并退出

//点击退出
$("#drop-out").click(function(){
$.ajax({
url:'${pageContext.request.contextPath}/admin/userQuit.do',// 跳转到 action
data:{},
type:'post',
cache:false,
dataType:'json',
success:function(data) {
window.location.href = '<%=basePath%>login.jsp';
},
error : function() {
// view("异常！");
alert("数据异常！");
}
});
})

这里我没用

<% session.invalidate();%>
window.location.href = '<%=basePath%>login.jsp';

来注销session，因为javascript页面中好像不管有没有触发事件都会执行<% session.invalidate();%>，

但是用ajax方式会抛出一个异常：

严重: Servlet.service() for servlet [dispatcherServlet] in context with path [/CJY-shop] threw exception [Request processing failed; nested exception is java.lang.IllegalStateException: Cannot create a session after the response has been committed] with root cause
java.lang.IllegalStateException: Cannot create a session after the response has been committed
at org.apache.catalina.connector.Request.doGetSession(Request.java:2789)
at org.apache.catalina.connector.Request.getSession(Request.java:2170)
at org.apache.catalina.connector.RequestFacade.getSession(RequestFacade.java:895)
at org.springframework.web.context.request.ServletRequestAttributes.getSession(ServletRequestAttributes.java:111)
at org.springframework.web.context.request.ServletRequestAttributes.setAttribute(ServletRequestAttributes.java:161)
at org.springframework.web.bind.support.DefaultSessionAttributeStore.storeAttribute(DefaultSessionAttributeStore.java:55)
at org.springframework.web.method.annotation.SessionAttributesHandler.storeAttributes(SessionAttributesHandler.java:124)
at org.springframework.web.method.annotation.ModelFactory.updateModel(ModelFactory.java:230)