什么是单点登录？

01

/**

02

 * 用户登陆

03

 */

04

@ PostMapping (value = "/user/session", produces = {"application/ json;charset =UTF-8"})

05

public   Result login(String mobileNo , String password, String inputCaptcha , HttpSession session, HttpServletResponse response) {

06

07

    //判断验证 码是否 正确

08

    if   ( WebUtils.validateCaptcha ( inputCaptcha , " captcha ", session)) {

09

10

        //判断有没有该用户

11

        User user = userService.userLogin ( mobileNo , password);

12

        if   (user != null) {

13

            /*设置自动登陆，一个星期.  将token保存在数据库中*/

14

            String loginToken = WebUtils.md5(new Date(). toString () + session.getId ());

15

             user.setLoginToken ( loginToken );

16

            User user1 = userService.userUpload (user);

17

18

             session.setAttribute ("user", user1);

19

20

            CookieUtil.addCookie(response,"loginToken",loginToken,604800);

21

22

            return ResultUtil.success (user1);

23

24

        } else {

25

            return ResultUtil.error ( ResultEnum.LOGIN_ERROR );

26

        }

27

    } else {

28

        return ResultUtil.error ( ResultEnum.CAPTCHA_ERROR );

29

    }

30

31

}

32

33

/**

34

 * 用户退出

35

 */

36

@ DeleteMapping (value = "/session", produces = {"application/ json;charset =UTF-8"})

37

public Result logout( HttpSession session,HttpServletRequest request,HttpServletResponse response ) {

38

39

    //删除session和cookie

40

     session.removeAttribute ("user");

41

42

     CookieUtil.clearCookie (request, response, " loginToken ");

43

44

    return ResultUtil.success ();

45

}

46

/**

47

* @author ozc

48

* @version 1.0

49

*

50

* 拦截器；实现自动登陆功能

51

*/

52

public   class   UserInterceptor  implements   HandlerInterceptor {

53

54

55

@ Autowired

56

private   UserService userService ;

57

58

public   boolean   preHandle ( HttpServletRequest request, HttpServletResponse response, Object o) throws   Exception {

59

    User sessionUser = (User) request.getSession (). getAttribute ("user");

60

61

    // 已经登陆了，放行

62

    if   ( sessionUser != null) {

63

        return   true;

64

    } else   {

65

        //得到带过来cookie是否存在

66

        String loginToken = CookieUtil.findCookieByName (request, " loginToken ");

67

        if   ( StringUtils.isNotBlank ( loginToken )) {

68

            //到数据库查询有没有该Cookie

69

            User user = userService.findUserByLoginToken ( loginToken );

70

            if   (user != null) {

71

                 request.getSession (). setAttribute ("user", user);

72

                return   true;

73

            } else   {

74

                //没有该Cookie与之对应的用户(Cookie不匹配)

75

                 CookieUtil.clearCookie (request, response, " loginToken ");

76

                return   false;

77

            }

78

        } else   {

79

80

            //没有cookie、也没有登陆。是index请求获取用户信息，可以放行

81

            if   ( request.getRequestURI ().contains("session")) {

82

                return   true;

83

            }

84

85

            //没有cookie凭证

86

             response.sendRedirect ("/login.html");

87

            return   false;

88

        }

89

    }

90

}

91

}

01

// 登录功能(SSO单独的服务)

02

@Override

03

public   TaotaoResult login(String username, String password) throws   Exception {

04

05

    //根据用户名查询用户信息

06

     TbUserExample example = new   TbUserExample ();

07

    Criteria criteria = example.createCriteria ();

08

     criteria.andUsernameEqualTo (username);

09

    List< TbUser > list = userMapper.selectByExample (example);

10

    if   (null   == list || list.isEmpty ()) {

11

        return   TaotaoResult.build (400, "用户不存在");

12

    }

13

    //核对密码

14

     TbUser user = list.get (0);

15

    if   (!DigestUtils.md5DigestAsHex(password.getBytes()).equals(user.getPassword())) {

16

        return   TaotaoResult.build (400, "密码错误");

17

    }

18

    //登录成功，把用户信息写入 redis

19

    //生成一个用户token

20

    String token = UUID.randomUUID (). toString ();

21

     jedisCluster.set (USER_TOKEN_KEY + ":"   + token, JsonUtils.objectToJson (user));

22

    //设置session过期时间

23

     jedisCluster.expire (USER_TOKEN_KEY + ":"   + token, SESSION_EXPIRE_TIME);

24

    return   TaotaoResult.ok (token);

25

}

01

public   TaotaoResult login(String username, String password,

02

         HttpServletRequest request, HttpServletResponse response) {

03

    //请求参数

04

    Map<String, String> param = new   HashMap <>();

05

     param.put ("username", username);

06

     param.put ("password", password);

07

    //登录处理

08

    String stringResult = HttpClientUtil.doPost (REGISTER_USER_URL + USER_LOGIN_URL, param );

09

     TaotaoResult result = TaotaoResult.format ( stringResult );

10

    //登录出错

11

    if   ( result.getStatus () != 200) {

12

        return   result;

13

    }

14

    //登录成功后把取token信息，并写入cookie

15

    String token = (String) result.getData ();

16

    //写入cookie

17

     CookieUtils.setCookie (request, response, "TT_TOKEN", token);

18

    //返回成功

19

    return   result;

20

21

}