在实际生活中,很多网站都做了多点登录互斥的操作,简单来说就是同一个账号,只能在一台电脑上登录,如果有人在其他地方登录,那么原来登录的地方就会自动下线,再进行操作就会弹出登录界面。
添加拦截器,设置UUID让token作为唯一标识,存入redis中当value,当前登陆者的账户为key,当前登陆者的token与我们redis中的token值相同则通过,否则返回false,表示设备已在其他地方登录。

4.0.0 org.springframework.boot spring-boot-starter-parent 2.7.5 com.gitkeki boot_exclusive_login 0.0.1-SNAPSHOT boot_exclusive_login boot_exclusive_login 1.8 org.springframework.boot spring-boot-starter-data-jpa org.springframework.boot spring-boot-starter-thymeleaf org.springframework.boot spring-boot-starter-web com.mysql mysql-connector-j runtime org.projectlombok lombok true org.springframework.boot spring-boot-starter-test test org.apache.commons commons-pool2 org.springframework.boot spring-boot-starter-data-redis cn.hutool hutool-all 5.7.17 org.springframework.boot spring-boot-maven-plugin org.projectlombok lombok
server:port: 80
spring:datasource:driver-class-name: com.mysql.cj.jdbc.Driverurl: jdbc:mysql://localhost:3306/jpausername: rootpassword: rootredis:host: 192.168.164.129port: 6379password: redis123lettuce:pool:max-active: 10max-idle: 10min-idle: 1time-between-eviction-runs: 10sdatabase: 2jackson:default-property-inclusion: non_null # JSON处理时忽略非空字段
logging:level:com.hmdp: debug
@Data
public class TokenUtil {//用户存储登录者账户private String account;//唯一token码private String token;
}
public class LoginInterceptor implements HandlerInterceptor {private StringRedisTemplate redisTemplate;public LoginInterceptor(StringRedisTemplate redisTemplate) {this.redisTemplate = redisTemplate;}@Overridepublic boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {String token = request.getParameter("token");String account = request.getParameter("account");if(token == null){response.setStatus(401);return false;}String tokenValue = redisTemplate.opsForValue().get(account);if(tokenValue!=null&&tokenValue.equals(token)){System.out.println("token正确,放行");return true;}response.setStatus(520);return false;}
}
@Configuration
public class MvcConfig implements WebMvcConfigurer {@Autowired(required = false)private StringRedisTemplate redisTemplate;@Overridepublic void addInterceptors(InterceptorRegistry registry) {registry.addInterceptor(new LoginInterceptor(redisTemplate)).excludePathPatterns("/jump","/login");}
}
@Controller
public class UserController {@Autowired(required = false)private StringRedisTemplate redisTemplate;/*** 登录校验* @param account* @param password* @param model* @return*/@PostMapping("/login")public String checkLogin(String account, String password, Model model){if (account.equals("888888@qq.com") && password.equals("123456")){String token = UUID.randomUUID().toString();TokenUtil tokenUtil = new TokenUtil();tokenUtil.setToken(token);tokenUtil.setAccount(account);model.addAttribute("tokenUtil",tokenUtil);redisTemplate.opsForValue().set(account,token);}return "add";}/*** 登录页* @return*/@GetMapping("/jump")public String jump(){return "index";}/*** 测试页* @return*/@PostMapping("/test")@ResponseBodypublic String test(){return "添加";}
}
登录
测试页

这里我没有使用数据库做账号校验,如果需要做校验,向contoller中添加校验...
其实不论账号冻结还是多点登录的互斥,都是对用户账号的一种保护机制,避免用户的账号被不法利用。