java - 请问spring-boot如何实现一个简单的session认证跳转?

问题描述

问 题

用户登录成功后仅在session里保留已登陆信息.希望没有查到该信息时就直接跳到/页面即登陆页面.
用spring-boot不使用xml配置只使用代码时该如何做?

解决方案

使用spring的拦截器吧，我这使用是否有session判断

@Component
public class UserSecurityInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        Object obj = request.getSession().getAttribute("cur_user");
        if (obj == null || !(obj instanceof Info)) {
            response.sendRedirect(request.getContextPath() + "/login");
            return false;
        }
        return true;
    }

    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
    }
}

然后配置下拦截路径就可以了

@Configuration
public class WebMvcConf extends WebMvcConfigurerAdapter{
    @Autowired
    private UserSecurityInterceptor securityInterceptor;

    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(securityInterceptor).addPathPatterns("/admin/**");//配置登录拦截器拦截路径
    }
}

这篇关于java - 请问spring-boot如何实现一个简单的session认证跳转?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！