loginaction.java

网上找的很稀有的单点登陆资料,基于对称加密算法的.

package com.yayisoft.sso.center;

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import com.yayisoft.sso.util.Config;

public class LoginAction extends HttpServlet {

	/**
	 * 
	 */
	private static final long serialVersionUID = 1L;

	/**
	 * Constructor of the object.
	 */
	public LoginAction() {
		super();
	}

	/**
	 * Destruction of the servlet. <br>
	 */
	public void destroy() {
		super.destroy(); // Just puts "destroy" string in log
		// Put your code here
	}

	/**
	 * The doGet method of the servlet. <br>
	 * 
	 * This method is called when a form has its tag value method equals to get.
	 * 
	 * @param request
	 *            the request send by the client to the server
	 * @param response
	 *            the response send by the server to the client
	 * @throws ServletException
	 *             if an error occurred
	 * @throws IOException
	 *             if an error occurred
	 */
	String user = "mead";
	String pswd = "lai";

	// /应该获取一些cookie和session作为辅助手段
	public void doGet(HttpServletRequest request, HttpServletResponse response)
			throws ServletException, IOException {

		response.setContentType("text/html");
		PrintWriter out = response.getWriter();
		HttpSession session = request.getSession(true);
		String user = request.getParameter("user");
		String pswd = request.getParameter("pswd");
		String action = request.getParameter("action");
		if (action != null && action.equals("logout")) {
			session.invalidate();
			response.sendRedirect("loginCenter.jsp?msg=logoutOK");
			out.flush();
			out.close();// TODO 注意要关闭流
			return;
		}
		if (user == null || pswd == null) {
			response.sendRedirect("loginCenter.jsp?msg=please.input.information");
			out.flush();
			out.close();
			return;
		} else {
			if ((user.equals(this.user) && pswd.equals(this.pswd))
					|| (user.equals("xblue") && pswd.equals("1234"))
					|| (user.equals("bruce") && pswd.equals("1234"))) {
				// login good
				out.println("login OK...");
				session.setAttribute("user", user);
				session.setAttribute("sessionid", session.getId());
				System.out.println("一个用户登录了\nuser = " + user);
				String url = request.getParameter("url");
				if ((url != null) && (!url.equals(""))
						&& (url != "")) {
					// ReDirect 2 the target URL
					response.sendRedirect(url);
					out.flush();
					out.close();
					return;
				} else {
					// if there is no target URL, goto index page, There's info
					response.sendRedirect(Config.PAGE_INDEX);
					out.flush();
					out.close();
					return;
				}
			} else {
				out.println("login failed...");
				session.invalidate();
				// 取消cookie
				response.sendRedirect("loginCenter.jsp?msg=failed");
				out.flush();
				out.close();
				return;
			}
			 
			
		}
	}

	/**
	 * The doPost method of the servlet. <br>
	 * 
	 * This method is called when a form has its tag value method equals to
	 * post.
	 * 
	 * @param request
	 *            the request send by the client to the server
	 * @param response
	 *            the response send by the server to the client
	 * @throws ServletException
	 *             if an error occurred
	 * @throws IOException
	 *             if an error occurred
	 */
	public void doPost(HttpServletRequest request, HttpServletResponse response)
			throws ServletException, IOException {
		this.doPut(request, response);
	}

	/**
	 * Initialization of the servlet. <br>
	 * 
	 * @throws ServletException
	 *             if an error occurs
	 */
	public void init() throws ServletException {
		// Put your code here
	}

}