ThreadLocal取代每次都从session中获取登录用户信息

方式一：直接使用JDK中ThreadLocal方式

1.先定义一个存放登录用户信息的实体类，并在这里面操纵用户信息

public class UserContext implements Serializable{    private static ThreadLocal<LoginEntity> loginEntityThreadLocal=new ThreadLocal<>();    public static LoginEntity getUserSession() {        return loginEntityThreadLocal.get();    }    public static void setUserSession(LoginEntity entity) {        loginEntityThreadLocal.set(entity);    }    public static void removeUserSession() {        loginEntityThreadLocal.remove();    }}
2.在过滤其中进行存放用户登录信息

public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws IOException,ServletException {HttpServletRequest request = (HttpServletRequest) req;HttpServletResponse response = (HttpServletResponse) resp;HttpSession session = request.getSession();request.setCharacterEncoding("UTF-8");response.setCharacterEncoding("UTF-8");response.addHeader("Access-Control-Allow-Origin","*");response.addHeader("Access-Control-Allow-Credentials", "true");response.addHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept,X-Pagination");response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");response.addHeader("Access-Control-Expose-Headers", "X-Pagination");//System.out.println(session.getId());if (isInclude(request.getServletPath())) {LoginEntity loginEntity = (LoginEntity) session.getAttribute(Const.LOGINED_KEY);if (loginEntity != null) {UserContext.setUserSession(loginEntity);chain.doFilter(request, response);} else {unLogin(response);}} else {chain.doFilter(request, response);}}

方式二：RequestContextHolder是Spring中对ThreadLocal进行了封装

1.先定义一个存放登录用户信息的实体类，并在这里面操纵用户信息

public class UserContext implements Serializable{        /**     * 获取当前线程绑定的用户登录对象     *     * @return     */    public static LoginEntity getUserSession() {        return (LoginEntity) RequestContextHolder.getRequestAttributes().getAttribute(Constant.LOGINED_KEY,  RequestAttributes.SCOPE_REQUEST);    }    /**     * 将用户登录对象绑定到当前线程     *     * @param loginEntity     */    public static void setUserSession(LoginEntity loginEntity) {        RequestContextHolder.getRequestAttributes().setAttribute(Constant.LOGINED_KEY, loginEntity, RequestAttributes.SCOPE_REQUEST);    }    /**     * 将用户登录对象从当前线程销毁     */    public static void removeUserSession() {        RequestContextHolder.getRequestAttributes().removeAttribute(Constant.LOGINED_KEY,RequestAttributes.SCOPE_REQUEST);    }}

2.在过滤其中进行存放用户登录信息

public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws IOException,ServletException {HttpServletRequest request = (HttpServletRequest) req;HttpServletResponse response = (HttpServletResponse) resp;HttpSession session = request.getSession();request.setCharacterEncoding("UTF-8");response.setCharacterEncoding("UTF-8");response.addHeader("Access-Control-Allow-Origin","*");response.addHeader("Access-Control-Allow-Credentials", "true");response.addHeader("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept,X-Pagination");response.addHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");response.addHeader("Access-Control-Expose-Headers", "X-Pagination");//System.out.println(session.getId());if (isInclude(request.getServletPath())) {LoginEntity loginEntity = (LoginEntity) session.getAttribute(Const.LOGINED_KEY);if (loginEntity != null) {UserContext.setUserSession(loginEntity);chain.doFilter(request, response);} else {unLogin(response);}} else {chain.doFilter(request, response);}}