浅谈cookie和session(小结)

HttpServletRequest req=ServletActionContext.getRequest();
    Cookie[] cookies=req.getCookies();
    for(int i=0;i<cookies.length;i++){
      Cookie cookie=cookies[i];
      System.out.println("name:"+cookie.getName()+",domain"+cookie.getDomain()+",value:"+cookie.getValue()+",maxage:"+cookie.getMaxAge());
    }

HttpServletResponse res=ServletActionContext.getResponse();
    Cookie cookie=new Cookie("xdx", "i'm xdx");
    res.addCookie(cookie);

/**
 *
 * Provides a way to identify a user across more than one page
 * request or visit to a Web site and to store information about that user.
 *
 * <p>The servlet container uses this interface to create a session
 * between an HTTP client and an HTTP server. The session persists
 * for a specified time period, across more than one connection or
 * page request from the user. A session usually corresponds to one 
 * user, who may visit a site many times. The server can maintain a 
 * session in many ways such as using cookies or rewriting URLs.
 *
 * <p>This interface allows servlets to 
 * <ul>
 * <li>View and manipulate information about a session, such as
 *   the session identifier, creation time, and last accessed time
 * <li>Bind objects to sessions, allowing user information to persist 
 *   across multiple user connections
 * </ul>
 *
 * <p>When an application stores an object in or removes an object from a
 * session, the session checks whether the object implements
 * {@link HttpSessionBindingListener}. If it does, 
 * the servlet notifies the object that it has been bound to or unbound 
 * from the session. Notifications are sent after the binding methods complete. 
 * For session that are invalidated or expire, notifications are sent after
 * the session has been invalidated or expired.
 *
 * <p> When container migrates a session between VMs in a distributed container
 * setting, all session attributes implementing the {@link HttpSessionActivationListener}
 * interface are notified.
 * 
 * <p>A servlet should be able to handle cases in which
 * the client does not choose to join a session, such as when cookies are
 * intentionally turned off. Until the client joins the session,
 * <code>isNew</code> returns <code>true</code>. If the client chooses 
 * not to join
 * the session, <code>getSession</code> will return a different session
 * on each request, and <code>isNew</code> will always return
 * <code>true</code>.
 *
 * <p>Session information is scoped only to the current web application
 * (<code>ServletContext</code>), so information stored in one context
 * will not be directly visible in another.
 *
 * @author  Various
 *
 * @see   HttpSessionBindingListener
 * @see   HttpSessionContext

HttpServletRequest request = ServletActionContext.getRequest();
    HttpSession httpSession=request.getSession();
    System.out.println(httpSession);

/**
   *
   * Returns the current session associated with this request,
   * or if the request does not have a session, creates one.
   * 
   * @return    the <code>HttpSession</code> associated
   *      with this request
   *
   * @see  #getSession(boolean)
   *
   */

  public HttpSession getSession();

HttpServletRequest req=ServletActionContext.getRequest();
    HttpServletResponse res=ServletActionContext.getResponse();
    Cookie cookie=new Cookie("JSESSIONID", req.getSession().getId());
　　　　　res.addCookie(cookie);

HttpServletRequest req=ServletActionContext.getRequest();//具体获取request的情况可能有所不同
  HttpSession session;
    Cookie JSESSIONID=null;
    Cookie[] cookies=req.getCookies();
    for(int i=0;i<cookies.length;i++){
      Cookie cookie=cookies[i];
      if(cookie.getName().equals("JSESSIONID")){
        JSESSIONID=cookie;
      }
    }
    if(JSESSIONID==null){
      session= createSession();//创建一个session
    }else{
     session=findSessionBySessionId(JSESSIONID.getValue());//通过sessionId获取session
      if(session==null){
        session= createSession();//创建一个session
      }
      HttpServletRequest req=ServletActionContext.getResponse();//具体情况可能有所不同
      Cookie cookie=new Cookie("JSESSIONID", session.getId());
      res.addCookie(cookie);

<session-config>
<session-timeout>30</session-timeout>
</session-config>

<session-config>
<session-timeout>15</session-timeout>
</session-config>

session.setMaxInactiveInterval(30*60);//以秒为单位，即在没有活动30分钟后，session将失效

public static String J_SESSIONID="";

public static String http4Cookie(String url, String param,String jsessionId) {
    String result = "";
    BufferedReader in = null;
    try {
      String urlNameString = url + "?" + param;
      URL realUrl = new URL(urlNameString);
      // 打开和URL之间的连接
      HttpURLConnection connection = (HttpURLConnection) realUrl
          .openConnection();
      // 设置通用的请求属性
      connection.setRequestProperty("accept", "*/*");
      connection.setRequestProperty("connection", "Keep-Alive");
      connection.setRequestProperty("user-agent",
          "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");
      connection.setRequestProperty("Cookie", "JSESSIONID="+jsessionId);//请求头中加入JessionID
      // 建立实际的连接
      connection.connect();
      // 获取所有响应头字段
      Map<String, List<String>> map = connection.getHeaderFields();
      // 遍历所有的响应头字段,获取响应头中的JESSIONID信息
       for (String key : map.keySet()) {
//         System.out.println(key + "--->" + map.get(key));
         if("Set-Cookie".equals(key)){
           String setCookie=map.get(key).toString();
           String newJessionId=setCookie.substring(12,setCookie.lastIndexOf("]"));
           J_SESSIONID=newJessionId;// 维护新的J_SESSIONID
           System.out.println(setCookie.substring(12,setCookie.lastIndexOf("]")));
         }
       }
      // 定义 BufferedReader输入流来读取URL的响应
      in = new BufferedReader(new InputStreamReader(
          connection.getInputStream(), "utf-8"));
      String line;
      while ((line = in.readLine()) != null) {
        result += line;
      }
    } catch (Exception e) {
      System.out.println("发送GET请求出现异常！" + e);
      e.printStackTrace();
    }
    // 使用finally块来关闭输入流
    finally {
      try {
        if (in != null) {
          in.close();
        }
      } catch (Exception e2) {
        e2.printStackTrace();
      }
    }
    return result;
  }

@ResponseBody
  @RequestMapping("httpCookieTest")
  public String httpTest(HttpServletRequest req,HttpServletResponse res) {
    Cookie[]cookies=req.getCookies();
    for(Cookie cookie:cookies){
      if(cookie.getName().equals("JSESSIONID"));
      System.out.println(cookie.getValue());
    }
    OutPutMsg.outPutMsg(res, req, "httpCookieTest");
    return null;
  }

public static void outPutMsg(HttpServletResponse response,HttpServletRequest request,String msg) {
    response.setCharacterEncoding("utf-8");
    String sessionId = request.getSession().getId();
    response.setContentType("text/html; charset=UTF-8"); 
    response.setHeader("Set-Cookie", "JSESSIONID=" + sessionId);
    PrintWriter writer = null;
    try {
      writer = response.getWriter();
      writer.print(msg);
      writer.flush();
    } catch (IOException e) {
      e.printStackTrace();
    } finally {
      if (writer != null)
        writer.close();
    }
  }

public static void main(String args[]){
    HttpUtil.http4Cookie("http://192.168.1.185:8080/warrior/httpCookieTest","1=1",J_SESSIONID);
  }

@ResponseBody
  @RequestMapping("otherPlatformIntercept")
  public String otherPlatformIntercept(HttpServletRequest req){
    HttpSession httpSession=req.getSession();
    if(httpSession.getAttribute("userId")!=null){
      return "valid";
    }
    return "Invalid";
  }