Spring mvc拦截器+angular js拦截器 做用户登录拦截控制

前端使用angular js、后台使用java做用户的登录控制。当用户未登录时自动跳转到登录页面。

用户登录成功添加session:

    HttpSession session=request.getSession();            UserToken usertoken=new UserToken();            usertoken.setNickname((String)map.get("nickname"));            ...            usertoken.setUsername((String)map.get("username"));            /*             * 设置session             */                 session.setAttribute("userToken", usertoken);            //超时时间20分钟            session.setMaxInactiveInterval(60*20);

拦截器配置文件代码
applicationContext.xml

    <!--     登录拦截 -->    <mvc:interceptors>        <mvc:interceptor>        <!--    拦截全部地址 -->            <mvc:mapping path="/**" />            <!-- 登录拦截类 -->            <bean id="loginInterceptor"             class="com.beicheng.user.interceptor.LoginInterceptor">            </bean>        </mvc:interceptor>    </mvc:interceptors> 

Spirng 拦截器控制类代码
试过在preHandle中使用response.sendRedirect(request.getContextPath()
+”auth/login.html”)做自动跳转没成功，后来直接修改返回的状态码，在前端进行拦截处理

public class LoginInterceptor implements HandlerInterceptor {        //日志      private static  Log logger=LogFactory.getLog(LoginInterceptor.class);    public boolean preHandle(HttpServletRequest request, HttpServletResponse response,              Object handle) throws Exception {          //创建session          HttpSession session =request.getSession();          //无需登录，允许访问的地址          String[] allowUrls =new String[]{"/logininfo","/login"};          //获取请求地址          String url =request.getRequestURL().toString();          //获得session中的用户          //userToken是自定义的类，当用户登录成功后向session中添加的        UserToken user =(UserToken) session.getAttribute("userToken");          for (String strUrl : allowUrls) {              if(url.contains(strUrl))              {                  return true;              }          }          if(user ==null)          {              //状态码 401 表示用户未登录             response.setStatus(401);               return false;        }                   return true;    }      public void postHandle(HttpServletRequest request,              HttpServletResponse response, Object handler,              ModelAndView modelAndView) throws Exception {      }      public void afterCompletion(HttpServletRequest request,              HttpServletResponse response, Object handler, Exception ex)              throws Exception {      }

angular js拦截器代码

//登录拦截app.config(function ($httpProvider) {  $httpProvider.interceptors.push('AuthInterceptor');})app.factory('AuthInterceptor', function ($rootScope, $q,$location) {  return {    requestError:function(request){         return $q.reject(response);    },    responseError:function (response) {        console.log(response);        if(response.status=='401')        {            alert("登录超时!");            $location.url('/auth/login');        }      return $q.reject(response);    }  };})