[项目构建 十]babasport 集群下session共享问题的解决方案.

 1 //去登录页面
 2     @RequestMapping(value="/login.aspx",method=RequestMethod.GET)
 3     public String login(){
 4         return "login";
 5     }
 6     
 7     @Autowired
 8     private BuyerService buyerService;
 9     
10     @Autowired
11     private SessionProviderService sessionProviderService;
12     //执行登录操作
13     @RequestMapping(value="/login.aspx",method=RequestMethod.POST)
14     public String login(String username, String password, String returnUrl,Model model,
15             HttpServletRequest request, HttpServletResponse response){
16         //1: 判断用户名不能为空
17         if(null != username){
18             //2:判断密码不能为空
19             if (null != password){
20                 //3:用户名必须正确
21                 Buyer buyer = buyerService.selectBuyerByusername(username);
22                 if(buyer != null){
23                     //4:密码必须正确
24                     if(encodePassword(password).equals(buyer.getPassword())){
25                         //5:设置用户到Session
26                         sessionProviderService.setAttributerForUsername(RequestUtils.getCSessionId(request, response), buyer.getUsername());
27                         //6:回跳之前访问页面
28                         if(null != returnUrl){
29                             return "redirect:"+returnUrl;
30                         }else{
31                             return "redirect:http://localhost:8082/";
32                         }
33                     }else {
34                         model.addAttribute("error", "密码输入错误!");
35                     }
36                 }else {
37                     model.addAttribute("error", "用户名输入错误!");
38                 }
39                 
40             }else {
41                 model.addAttribute("error", "密码不能为空!");
42             }
43         }else {
44             model.addAttribute("error", "用户名不能为空!");
45         }
46         
47         
48         return "login";
49     }
50     
51     //加密
52     public String encodePassword(String password){
53         
54         String algorithm = "MD5";
55         char[] encodeHex = null;
56         //MD5
57         try {
58             MessageDigest instance = MessageDigest.getInstance(algorithm);
59             byte[] digest = instance.digest(password.getBytes());
60             
61             //十六进制, 在MD5加密的基础上再次加密
62             encodeHex = Hex.encodeHex(digest);
63         } catch (NoSuchAlgorithmException e) {
64             // TODO Auto-generated catch block
65             e.printStackTrace();
66         }
67         
68         return new String(encodeHex);
69     }

 1 //session存活时间, 单位是分钟.
 2     private Integer exp = 30;
 3     public void setExp(Integer exp) {
 4         this.exp = exp;
 5     }
 6 
 7 
 8     @Autowired
 9     private Jedis jedis;
10     //保存用户到redis中  注册: 保存用户到mysql的同时保存用户名作为Key 用户Id当做value 到redis中
11     //jessionId  value==用户名
12     public void setAttributerForUsername(String jessionId, String value){
13         jedis.set(jessionId + ":USER_NAME", value);
14         jedis.expire(jessionId + ":USER_NAME", 60*exp);
15     }

 1 public class RequestUtils {
 2 
 3     //获取CSessionID
 4     public static String getCSessionId(HttpServletRequest request, HttpServletResponse response){ 6         //1, 从Request中取Cookie
 7         Cookie[] cookies = request.getCookies();
 8         //2, 从Cookie数据中遍历查找, 并取CSessionID
 9         if (null != cookies && cookies.length > 0) {
10             for (Cookie cookie : cookies) {
11                 if ("CSESSIONID".equals(cookie.getName())) {
12                     //有, 直接返回
13                     return cookie.getValue();
14                 }
15             }
16         }
17         //没有, 创建一个CSessionId, 并且放到Cookie再返回浏览器.返回新的CSessionID
18         String csessionid = UUID.randomUUID().toString().replaceAll("-", "");
19         //并且放到Cookie中
20         Cookie cookie = new Cookie("CSESSIONID", csessionid);
21         //cookie  每次都带来, 设置路径
22         cookie.setPath("/");
23         //0:关闭浏览器  销毁cookie. 0:立即消失.  >0 存活时间,秒
24         cookie.setMaxAge(-1);
25         
26         return csessionid;
27     }
28 }

 1 public class SessionProviderImpl implements SessionProviderService {
 2 
 3     //session存活时间, 单位是分钟.
 4     private Integer exp = 30;
 5     public void setExp(Integer exp) {
 6         this.exp = exp;
 7     }
 8 
 9 
10     @Autowired
11     private Jedis jedis;
12     //保存用户到redis中  注册: 保存用户到mysql的同时保存用户名作为Key 用户Id当做value 到redis中
13     //jessionId  value==用户名
14     public void setAttributerForUsername(String jessionId, String value){
15         jedis.set(jessionId + ":USER_NAME", value);
16         jedis.expire(jessionId + ":USER_NAME", 60*exp);
17     }
18     
19     
20     //获取
21     public String getAttributterForUsername(String jessionId){
22         String value = jedis.get(jessionId + ":USER_NAME");
23         if(null != value){
24             //计算session过期时间是 用户最后一次请求开始计时.
25             jedis.expire(jessionId + ":USER_NAME", 60*exp);
26             return value;
27         }
28         return null;
29     }
30 }