java - 请问spring-boot如何实现一个简单的session认证跳转?

Question

用户登录成功后仅在session里保留已登陆信息.希望没有查到该信息时就直接跳到/页面即登陆页面.
用spring-boot不使用xml配置只使用代码时该如何做?

Answer 1

使用spring的拦截器吧，我这使用是否有session判断

@Component
public class UserSecurityInterceptor implements HandlerInterceptor {
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        Object obj = request.getSession().getAttribute("cur_user");
        if (obj == null || !(obj instanceof Info)) {
            response.sendRedirect(request.getContextPath() + "/login");
            return false;
        }
        return true;
    }

    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
    }

    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
    }
}

然后配置下拦截路径就可以了

@Configuration
public class WebMvcConf extends WebMvcConfigurerAdapter{
    @Autowired
    private UserSecurityInterceptor securityInterceptor;

    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(securityInterceptor).addPathPatterns("/admin/**");//配置登录拦截器拦截路径
    }
}

Answer 2

注册一个Servlet Filter就可以了，在Filter里判断是否有用户信息，如果没有那么就 response.sendRedirect("/")