Redis實現Session共用與單點登入

<dependency>
   <groupId>org.springframework.boot</groupId>
   <artifactId>spring-boot-starter-data-redis</artifactId>
</dependency>
 
<dependency>
   <groupId>org.springframework.session</groupId>
   <artifactId>spring-session-data-redis</artifactId>
</dependency>

spring:
  redis:
    database: 0
    host: 127.0.0.1
    port: 6379
    password:
    jedis.pool.max-idle: 100
    jedis.pool.max-wait: -1ms
    jedis.pool.min-idle: 2
    timeout: 2000ms

@EnableRedisHttpSession

@GetMapping("/setSessionValue")
public String setredisResult(HttpServletRequest request){
    request.getSession().setAttribute(request.getSession().getId(), "---測試資料---"+request.getRequestURL());
 
    System.out.println(request.getSession().getId());
    return "set成功，已經存入session域且redis裡面也會有值";
}
 
@GetMapping("/getSessionValue")
public String redisResult(HttpServletRequest request) {
    System.out.println(request.getSession().getId());
    String value = String.valueOf(request.getSession().getAttribute(request.getSession().getId()));
    
    return "取值成功         :"+value;
}

 @GetMapping("/userLogin")
    public String setRedisResult(HttpServletRequest request){
 
        //第一次登入
 
        //1. 取出當期使用者端的sessionId
        String sId=request.getSession().getId();
        //2. 查詢該sessionId 是否存在於redis
        boolean exists = redisUtils.exists(sId);
 
        if (!exists){
            //2.1未登入過,進行使用者資訊的校驗
            //如果通過後,寫入session域進行共用,即使是負載不同埠,sessionId不會發生變化
            request.getSession().setAttribute(sId, "login success");
            redisUtils.setWithTime(sId,"login success",1000);
            return "success login!";
 
            //如果不通過,那麼返回登入頁面,省略
        }else {
            //2.2 已經登入過,則存入redis中重新整理過期時間,再直接返回成功頁面
            redisUtils.setWithTime(sId,"login success",1000);
            return " yes,you are allow!";
        }
 
    }
 
    @GetMapping("/userLoginOut")
    public String userLoginOut(HttpServletRequest request){
 
        String sId=request.getSession().getId();
        redisUtils.remove(sId);
        return "login out!";
    }

 //登入介面
    @GetMapping("/userLogin")
    public String setRedisResult(HttpServletRequest request, HttpServletResponse response){
        
        //第一次登入
 
        //1. 取出當期使用者端的sessionId
        String sId=request.getSession().getId();
 
        String cookies = getCookies(request);
 
        if (cookies==null || cookies.equals("")){
 
            System.out.println("沒有登入過,準備進行登入！");
            //執行登入邏輯
 
            //寫入cookie
            writeLoginToken(response,sId); //這裡設定cookie的過期時間應當與redis設定的時間且與session失效時間保持一致
            //寫入redis
            redisUtils.setWithTime(sId,"userInfo",1000);
            System.out.println("登入成功！");
            return "success login!";
        }else{
 
            boolean exists = redisUtils.exists(cookies);
            if (exists){
 
                System.out.println("已經登入過,正常登入！");
                return " yes,you are allow!";
            }else {
 
                return "資訊異常不允許登入";
            }
        }
    }