session保存/取登录信息

@ResponseBody@RequestMapping(value = "login", method = {RequestMethod.GET, RequestMethod.POST})public Object login(HttpServletRequest request, HttpServletResponse response, String user, String pwd) throws IOException {    UserInfo userInfo = userService.login(user, pwd);    if (userInfo == null || userInfo.getId() <= 0) {        throw new RequestException(Constants.CODE_ERROR_LOGIN);    }    UserInfo userExtInfo = userService.queryUserExtInfo(userInfo.getId());    request.getSession().setAttribute("user_id", userInfo.getId());    request.getSession().setAttribute("syb", userInfo.getSyb());    request.getSession().setAttribute("flag", userExtInfo.getFlag());    //TODO加密    Cookie cookie = new Cookie("user_id", String.valueOf(userInfo.getId()));    response.addCookie(cookie);    return userInfo;}

@ResponseBody@RequestMapping(value = "addApprove", method = {RequestMethod.GET, RequestMethod.POST})public Object insertApprove(HttpSession session, ApproveInfo approveInfo) {    Integer userId = Integer.parseInt(session.getAttribute("user_id").toString());    approveInfo.setCuser(userId);    approveService.addApprove(approveInfo);    return true;}