package com.whyc.service;
|
|
import com.whyc.dto.Response;
|
import com.whyc.util.ShiroUtil;
|
import org.apache.shiro.SecurityUtils;
|
import org.apache.shiro.authc.UsernamePasswordToken;
|
import org.apache.shiro.subject.Subject;
|
import org.redisson.api.RBucket;
|
import org.redisson.api.RList;
|
import org.redisson.api.RLock;
|
import org.redisson.api.RedissonClient;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.stereotype.Service;
|
|
import javax.annotation.Resource;
|
import javax.servlet.http.HttpServletRequest;
|
import javax.servlet.http.HttpSession;
|
|
@Service
|
public class LoginService {
|
|
@Autowired
|
RedissonClient redissonClient;
|
|
public Response login(String userName, String password, HttpServletRequest request) {
|
UsernamePasswordToken userToken = new UsernamePasswordToken(userName, password);
|
Subject subject = SecurityUtils.getSubject();
|
try {
|
subject.login(userToken);
|
}catch (Exception e){
|
return new Response<>().set(1,false);
|
}
|
if (subject.isAuthenticated()){
|
//每个登录的用户都有一个全局变量,里面存着对应的SessionId;redis存储,分布式,否则会报错
|
//同一个账号,后面登录的,会挤掉之前登录的SessionId
|
//System.out.println("全局存储中当前SessionId为:"+request.getSession().getId());
|
//request.getServletContext().setAttribute(userName,request.getSession().getId());
|
RBucket<String> bucket = redissonClient.getBucket(userName);
|
bucket.set(request.getSession().getId());
|
|
return new Response<>().set(1,true);
|
}
|
return new Response<>().set(1,false);
|
}
|
|
public void logout() {
|
Subject subject = SecurityUtils.getSubject();
|
subject.logout();
|
}
|
}
|