Question

我已经基于Spring MVC 3中的会话创建了具有注册和登录功能的简单Web应用程序，当我使用JSTL显示值时，该应用程序完全正常工作。然后，我添加了Freemarker，出了点问题。为每个请求创建了新的UserSession对象，因此我无法存储信息。

一些代码：

调度-servlet.xml中：

<context:component-scan base-package="com.revicostudio.web" />
<mvc:annotation-driven />

<bean id="freemarkerConfig" class="org.springframework.web.servlet.view.freemarker.FreeMarkerConfigurer">
  <property name="templateLoaderPath" value="/WEB-INF/ftl/"/>
    <property name="freemarkerVariables">
      <map>
        <entry key="xml_escape" value-ref="fmXmlEscape"/>
      </map>
    </property>
</bean>

<bean id="viewResolver" class="org.springframework.web.servlet.view.freemarker.FreeMarkerViewResolver">
    <property name="cache" value="true"/>
    <property name="prefix" value=""/>
    <property name="suffix" value=".jsp"/>
    <property name="exposeSpringMacroHelpers" value="true"/>
    <property name="exposeRequestAttributes" value="true"/>
    <property name="exposeSessionAttributes" value="true"/>
    <property name="exposePathVariables" value="true"/>
</bean>

<bean id="fmXmlEscape" class="freemarker.template.utility.XmlEscape"/>

的IndexController：

@Controller
@RequestMapping("/index")
public class IndexController {

    @RequestMapping(method=RequestMethod.GET)
    public String getIndex(Model model, UserSession userSession) {
        model.addAttribute("userSession", userSession);
        return "index";
    }

    @ModelAttribute("userRegisterCredentials")
    public UserRegisterCredentials getUserRegisterCredentials() {
        return new UserRegisterCredentials();
    }

    @ModelAttribute("userLoginCredentials")
    public UserLoginCredentials getUserLoginCredentials() {
        return new UserLoginCredentials();
    }
}

的LoginController：

@Controller
@RequestMapping("/login")
public class LoginController {

    @Autowired
    private UsersDatabaseService usersDatabaseService;

    @RequestMapping(method = RequestMethod.POST)
    public String login(
            @ModelAttribute UserLoginCredentials userLoginCredentials,
            UserSession userSession,
            final RedirectAttributes redirectAttributes)
    {
        int failedLoginAttempts = userSession.getFailedLoginAttempts();

        if (failedLoginAttempts < LoginConfig.maxLoginTries ||
                System.currentTimeMillis()-userSession.getFailedLoginsWaitTimeStart() > LoginConfig.failedLoginsWaitMinutes*60*1000) {

            if (usersDatabaseService.isValidPassword(userLoginCredentials.getUsername(), userLoginCredentials.getPassword())) {
                userSession.setUser(usersDatabaseService.getUser(userLoginCredentials.getUsername()));    
                userSession.setFailedLoginsWaitTimeStart(System.currentTimeMillis());
            }
            else {
                failedLoginAttempts++;

                if (failedLoginAttempts == LoginConfig.maxLoginTries) {
                    redirectAttributes.addFlashAttribute("error", 
                            "You've entered invalid username or password more than "
                            + LoginConfig.maxLoginTries + " times. Try again in "
                            + LoginConfig.failedLoginsWaitMinutes +" minutes.");
                }
                else { 
                    redirectAttributes.addFlashAttribute("error", "Invalid username or password");
                    userSession.setFailedLoginAttempts(failedLoginAttempts);
                    System.out.println(failedLoginAttempts);
                }
            }
        }
        else {
            redirectAttributes.addFlashAttribute("error", 
                    "You've entered invalid username or password more than "
                    + LoginConfig.maxLoginTries + " times. Try again in "
                    + LoginConfig.failedLoginsWaitMinutes +" minutes."); 
        }

        return "redirect:/";
    }
}

UserSession.java：

@Scope("session")
@Data
@AllArgsConstructor
@NoArgsConstructor 
public class UserSession {
    private User user;

    private int failedLoginAttempts;
    private long failedLoginsWaitTimeStart;
    private long created = System.currentTimeMillis();
}

Answer 1

通过从getIndex（）方法中删除“UserSession userSession”参数来解决此问题。 Dunno为什么会引起这个问题..

Spring MVC＆amp; Freemarker - 每个请求的新会话？

1 个答案: