spring security remember-me

1.controller

package net.yym.web.controller.home;import com.google.common.base.Optional;import net.yym.core.entity.Doctor;import net.yym.web.controller.BaseController;import net.yym.web.security.LoginUserInfo;import org.slf4j.Logger;import org.slf4j.LoggerFactory;import org.springframework.beans.factory.annotation.Autowired;import org.springframework.stereotype.Controller;import org.springframework.web.bind.annotation.RequestMapping;import org.springframework.web.bind.annotation.RequestParam;import javax.servlet.http.HttpServletRequest;/** * 登陆跳转控制器 * * @author yym */@Controllerpublic class HomeController extends BaseController {    private static Logger logger = LoggerFactory.getLogger(HomeController.class);    @Autowired    private LoginUserInfo loginUserInfo;    @RequestMapping("/")    public String index() {        return "redirect:home";    }    @RequestMapping("/login")    public String login(@RequestParam(required = false)String error,HttpServletRequest request) {        if (error != null){            request.setAttribute("error","用户名或密码错误");        }        return "home/login";    }    @RequestMapping("/home")    public String home(HttpServletRequest request) {        Optional<Doctor> optional = loginUserInfo.getDoctor();        if (optional.isPresent()){            request.getSession().setAttribute("doctorName", optional.get().getName());        }        return "redirect:patient/list";    }}

2.spring-security.xml

<?xml version="1.0" encoding="UTF-8"?><beans:beans xmlns="http://www.springframework.org/schema/security"             xmlns:beans="http://www.springframework.org/schema/beans"             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"             xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-4.3.xsd             http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-4.1.xsd"             default-lazy-init="true">    <!-- http安全配置 -->    <!-- 设置禁止spring-security拦截的路径 -->    <http pattern="/login*" security="none"/>    <http pattern="/" security="none"/>    <http pattern="/WEB-INF/views/home/*.jsp" security="none"/>    <http pattern="/WEB-INF/views/shared/*.jsp" security="none"/>    <http auto-config="true" use-expressions="true">        <form-login login-page="/login"                    default-target-url="/home"                    always-use-default-target="true"                    login-processing-url="/j_spring_security_check"                    authentication-failure-url="/login?error=true"/>        <csrf disabled="true"/>        <logout logout-success-url="/login" logout-url="/logout"/>        <remember-me key="chd" services-ref="rememberMeServices"/>        <intercept-url pattern="/**" access="hasAnyRole('ROLE_USER')"/>    </http>    <!-- 认证配置, 使用userDetailsService提供的用户信息 -->    <authentication-manager alias="authenticationManager" erase-credentials="false">        <authentication-provider ref="authenticationProvider"/>    </authentication-manager>    <beans:bean id="authenticationProvider" class="org.springframework.security.authentication.dao.DaoAuthenticationProvider">        <beans:property name="userDetailsService" ref="memberDetailService"/>        <beans:property name="hideUserNotFoundExceptions" value="false"/>        <beans:property name="passwordEncoder" ref="passwordEncoder"/>    </beans:bean>    <!-- 实现 remember-me 功能 -->    <beans:bean id="rememberMeServices" class="org.springframework.security.web.authentication.rememberme.TokenBasedRememberMeServices">        <beans:constructor-arg value="chd" index="0"/>        <beans:constructor-arg ref="memberDetailService" index="1"/>    </beans:bean>    <!-- 项目实现的用户查询服务 -->    <beans:bean id="memberDetailService" class="net.yixinjia.web.security.AuthenticationService"/>    <!-- 用户的密码加密或解密 -->    <beans:bean id="passwordEncoder" class="org.springframework.security.authentication.encoding.Md5PasswordEncoder"/></beans:beans>

3.login.jsp

<form id="login_form" action="j_spring_security_check" method="post">    <div class="form-group m-bottom-md">        <input type="text" class="form-control" name="username" placeholder="请输入用户名">    </div>    <div class="form-group">        <input type="password" class="form-control" name="password" placeholder="请输入密码">    </div>    <div class="form-group">        <div class="custom-checkbox">            <input type="checkbox" id="remember_me" name="remember-me">            <label for="remember_me"></label>        </div>        记住密码    </div>    <div style="color: red">        <c:if test="${not empty error}">            用户名或密码错误        </c:if>    </div>    <div class="m-top-md p-top-sm">        <a href="javascript:document:login_form.submit();" class="btn btn-success block">登录</a>    </div></form>