浅谈cookie和session(小结)

httpservletrequest req=servletactioncontext.getrequest();

     cookie[] cookies=req.getcookies();

     for ( int i= 0 ;i<cookies.length;i++){

       cookie cookie=cookies[i];

       system.out.println( "name:" +cookie.getname()+ ",domain" +cookie.getdomain()+ ",value:" +cookie.getvalue()+ ",maxage:" +cookie.getmaxage());

     }

httpservletresponse res=servletactioncontext.getresponse();

     cookie cookie= new cookie( "xdx" , "i'm xdx" );

     res.addcookie(cookie);

/**

  *

  * provides a way to identify a user across more than one page

  * request or visit to a web site and to store information about that user.

  *

  * <p>the servlet container uses this interface to create a session

  * between an http client and an http server. the session persists

  * for a specified time period, across more than one connection or

  * page request from the user. a session usually corresponds to one

  * user, who may visit a site many times. the server can maintain a

  * session in many ways such as using cookies or rewriting urls.

  *

  * <p> this interface allows servlets to

  * <ul>

  * <li>view and manipulate information about a session, such as

  *   the session identifier, creation time, and last accessed time

  * <li>bind objects to sessions, allowing user information to persist

  *   across multiple user connections

  * </ul>

  *

  * <p>when an application stores an object in or removes an object from a

  * session, the session checks whether the object implements

  * { @link httpsessionbindinglistener}. if it does,

  * the servlet notifies the object that it has been bound to or unbound

  * from the session. notifications are sent after the binding methods complete.

  * for session that are invalidated or expire, notifications are sent after

  * the session has been invalidated or expired.

  *

  * <p> when container migrates a session between vms in a distributed container

  * setting, all session attributes implementing the { @link httpsessionactivationlistener}

  * interface are notified.

  *

  * <p>a servlet should be able to handle cases in which

  * the client does not choose to join a session, such as when cookies are

  * intentionally turned off. until the client joins the session,

  * <code>isnew</code> returns <code> true </code>. if the client chooses

  * not to join

  * the session, <code>getsession</code> will return a different session

  * on each request, and <code>isnew</code> will always return

  * <code> true </code>.

  *

  * <p>session information is scoped only to the current web application

  * (<code>servletcontext</code>), so information stored in one context

  * will not be directly visible in another.

  *

  * @author   various

  *

  * @see    httpsessionbindinglistener

  * @see    httpsessioncontext

httpservletrequest request = servletactioncontext.getrequest();

     httpsession httpsession=request.getsession();

     system.out.println(httpsession);

/**

    *

    * returns the current session associated with this request,

    * or if the request does not have a session, creates one.

    *

    * @return    the <code>httpsession</code> associated

    *      with this request

    *

    * @see  #getsession(boolean)

    *

    */

   public httpsession getsession();

httpservletrequest req=servletactioncontext.getrequest();

     httpservletresponse res=servletactioncontext.getresponse();

     cookie cookie= new cookie( "jsessionid" , req.getsession().getid());

　　　　　res.addcookie(cookie);

httpservletrequest req=servletactioncontext.getrequest(); //具体获取request的情况可能有所不同

   httpsession session;

     cookie jsessionid= null ;

     cookie[] cookies=req.getcookies();

     for ( int i= 0 ;i<cookies.length;i++){

       cookie cookie=cookies[i];

       if (cookie.getname().equals( "jsessionid" )){

         jsessionid=cookie;

       }

     }

     if (jsessionid== null ){

       session= createsession(); //创建一个session

     } else {

      session=findsessionbysessionid(jsessionid.getvalue()); //通过sessionid获取session

       if (session== null ){

         session= createsession(); //创建一个session

       }

       httpservletrequest req=servletactioncontext.getresponse(); //具体情况可能有所不同

       cookie cookie= new cookie( "jsessionid" , session.getid());

       res.addcookie(cookie);

<session-config>

<session-timeout> 30 </session-timeout>

</session-config>

<session-config>

<session-timeout> 15 </session-timeout>

</session-config>

session.setmaxinactiveinterval( 30 * 60 ); //以秒为单位，即在没有活动30分钟后，session将失效

public static string j_sessionid= "" ;

public static string http4cookie(string url, string param,string jsessionid) {

     string result = "" ;

     bufferedreader in = null ;

     try {

       string urlnamestring = url + "?" + param;

       url realurl = new url(urlnamestring);

       // 打开和url之间的连接

       httpurlconnection connection = (httpurlconnection) realurl

           .openconnection();

       // 设置通用的请求属性

       connection.setrequestproperty( "accept" , "*/*" );

       connection.setrequestproperty( "connection" , "keep-alive" );

       connection.setrequestproperty( "user-agent" ,

           "mozilla/4.0 (compatible; msie 6.0; windows nt 5.1;sv1)" );

       connection.setrequestproperty( "cookie" , "jsessionid=" +jsessionid); //请求头中加入jessionid

       // 建立实际的连接

       connection.connect();

       // 获取所有响应头字段

       map<string, list<string>> map = connection.getheaderfields();

       // 遍历所有的响应头字段,获取响应头中的jessionid信息

        for (string key : map.keyset()) {

//         system.out.println(key + "--->" + map.get(key));

          if ( "set-cookie" .equals(key)){

            string setcookie=map.get(key).tostring();

            string newjessionid=setcookie.substring( 12 ,setcookie.lastindexof( "]" ));

            j_sessionid=newjessionid; // 维护新的j_sessionid

            system.out.println(setcookie.substring( 12 ,setcookie.lastindexof( "]" )));

          }

        }

       // 定义 bufferedreader输入流来读取url的响应

       in = new bufferedreader( new inputstreamreader(

           connection.getinputstream(), "utf-8" ));

       string line;

       while ((line = in.readline()) != null ) {

         result += line;

       }

     } catch (exception e) {

       system.out.println( "发送get请求出现异常！" + e);

       e.printstacktrace();

     }

     // 使用finally块来关闭输入流

     finally {

       try {

         if (in != null ) {

           in.close();

         }

       } catch (exception e2) {

         e2.printstacktrace();

       }

     }

     return result;

   }

@responsebody

   @requestmapping ( "httpcookietest" )

   public string httptest(httpservletrequest req,httpservletresponse res) {

     cookie[]cookies=req.getcookies();

     for (cookie cookie:cookies){

       if (cookie.getname().equals( "jsessionid" ));

       system.out.println(cookie.getvalue());

     }

     outputmsg.outputmsg(res, req, "httpcookietest" );

     return null ;

   }

public static void outputmsg(httpservletresponse response,httpservletrequest request,string msg) {

     response.setcharacterencoding( "utf-8" );

     string sessionid = request.getsession().getid();

     response.setcontenttype( "text/html; charset=utf-8" );

     response.setheader( "set-cookie" , "jsessionid=" + sessionid);

     printwriter writer = null ;

     try {

       writer = response.getwriter();

       writer.print(msg);

       writer.flush();

     } catch (ioexception e) {

       e.printstacktrace();

     } finally {

       if (writer != null )

         writer.close();

     }

   }

public static void main(string args[]){

     httputil.http4cookie( "http://192.168.1.185:8080/warrior/httpcookietest" , "1=1" ,j_sessionid);

   }

@responsebody

   @requestmapping ( "otherplatformintercept" )

   public string otherplatformintercept(httpservletrequest req){

     httpsession httpsession=req.getsession();

     if (httpsession.getattribute( "userid" )!= null ){

       return "valid" ;

     }

     return "invalid" ;

   }