单点登陆sso实现

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object arg2) throws Exception {
        if(request.getServletPath().equals("/sso"))
            return true;
        this.getCache();
        Cookie[] cookies = request.getCookies();
        boolean checkFlag = false;
        if (cookies == null) {
            logger.error("请求的cookie为空,请启用cookie");
            checkFlag = false;
        } else {

            for (Cookie cookie : cookies) {
                if (cookie.getName().equals(Constants.TICKET)) {
                    String ticket = cookie.getValue();
                    checkFlag = true;

                }
            }
        }

        if (!checkFlag) {// 验证不通过
            String requestType = request.getHeader("x-requested-with");
            if ("XMLHttpRequest".equals(requestType)) {
                String contentType = "application/octet-stream";
                ServletOutputStream out = response.getOutputStream();
                response.setContentType(contentType);
                response.setHeader("sessionstatus", "timeout");
                out.print("<script>");
                out.print("windows.location.href=‘" + Constants.PASSPORT_LOGIN);
                out.print("</script>");
                out.flush();
            } else {
                response.sendRedirect(Constants.PASSPORT_LOGIN);
            }
        }
        return true;
    }

@RestController
@RequestMapping("/login")
public class LoginContronller {

    @Autowired
    DictCacheHelper cache;
    
    @Autowired
    SSOHelper sso;
    
    String[] servers = new String[] { "my.pis.com", "my.lis.com" };

    /**
     * 登陆验证 ,验证通过生成tictiket,并已tictiket为key保存用户权限信息,基本信息到redis.
     * 
     * @param inParam
     *            :userId,password,returnurl(验证通过后前往的页面,如果为空返回到用户有权访问的第一个系统)
     * @return 成功返回: ticket 要跳转到的系统 需要跨域的域名列表 验证不通过抛出异常.
     * @throws Exception 
     */
    @RequestMapping("login")              
    @ResponseBody
    public Map<String, Object> login(@RequestParam Map<String, Object> inParam
            ,HttpServletRequest request, HttpServletResponse response) throws Exception {
        // 此处应调用后台服务获取用户权限信息.
        String userId= MapUtil.getValue("userId", inParam);
        if(!userId.equals("1"))
            throw new Exception(String.format("用户  %s 登陆验证失败,请输入正确的用户名密码", userId));
        String ticket = String.valueOf(System.currentTimeMillis()); // UUID.randomUUID();
        List<Map<String,Object>> userFuncs= new ArrayList<>();
        userFuncs.add(new MyMap().put("funcCode", "1001").getMap());
        userFuncs.add(new MyMap().put("funcCode", "1002").getMap());
        cache.setItem("ticket", ticket, new MyMap().put("userFuncs", userFuncs).getMap());
        Cookie cookie = new Cookie("ticket", ticket);
//        cookie.setDomain(request.getParameter("server"));
        cookie.setPath("/");
        // cookie.setMaxAge(10000000);
        response.addCookie(cookie);
        return new MyMap().put("ticket", ticket).put("servers", servers).getMap();
    }

}