loginaction.java

达内JAVA培训-WEB课程部分项目源代码

package cn.com.tarena.web.struts.day4.action;

import java.util.Random;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import org.apache.struts.action.ActionForm;
import org.apache.struts.action.ActionForward;
import org.apache.struts.action.ActionMapping;
import org.apache.struts.actions.MappingDispatchAction;

import cn.com.tarena.web.struts.day4.biz.StudentBiz;
import cn.com.tarena.web.struts.day4.pojo.Student;

public class LoginAction extends MappingDispatchAction {
	
	public ActionForward toLogin(ActionMapping mapping, ActionForm form,
			HttpServletRequest request, HttpServletResponse response) {
		
		//创建Token
		int token = new Random().nextInt(10000);
		
		if(token < 1000){
			token = token + 1000;
		}
		
		//保存Token
		HttpSession session = request.getSession(true);
		
		session.setAttribute("token", String.valueOf(token));		
		
		return mapping.findForward("login");
	}
	
	public ActionForward login(ActionMapping mapping, ActionForm form,
			HttpServletRequest request, HttpServletResponse response) throws InterruptedException {
//		Thread.sleep(5000);
		HttpSession session = request.getSession(true);
		
		//获得用户提交的token
		String userToken = request.getParameter("token");
		
		//获得服务器保存的token
		String token = (String)session.getAttribute("token");
		session.removeAttribute("token");
		
		//比较token
		if(userToken == null || !userToken.equals(token)){
			return mapping.findForward("login");
		}
		
		
		String userName = request.getParameter("userName");
		String password = request.getParameter("password");
		
		StudentBiz studentBiz = new StudentBiz();
		
		Student student = studentBiz.getStudent(userName, password);
		
		if(student != null){
			//找到学生
			request.setAttribute("student", student);
			
			return mapping.findForward("welcome");
		}
		
		return mapping.findForward("fail");
	}
	


	
	
	
	
	
	
	
	
	
}