public User queryUser(String UserName, String Password,HttpServletRequest request, HttpServletResponse response) {
        User user = userMapper.queryUser(UserName,Password);
        if(!StringUtils.isEmpty(user)){
            //1.獲取session
            HttpSession session = request.getSession();
            //2.獲取sessionid
            String sessionId = session.getId();
            //3.將sessionid作為key，用戶信息user作為value，放入session中
            session.setAttribute(sessionId,user);
            //4.將sessionId存到cookie中,"JSESSIONID"為自定義的key值
            Cookie cookie = new Cookie("JSESSIONID",sessionId);
            //5.設(shè)置cookie的有效路徑
            cookie.setPath(request.getContextPath());
            //6.將cookie返回給頁(yè)面
            response.addCookie(cookie);
        }
        return user;
    }

public class Filter extends HandlerInterceptorAdapter {
    private static Logger logger = Logger.getLogger(Filter.class);
    /**
     * 進(jìn)入攔截器后首先進(jìn)入的方法
     * 返回false則不再繼續(xù)執(zhí)行
     * 返回true則繼續(xù)執(zhí)行
     */
    @Override
    public boolean preHandle(HttpServletRequest request,
                             HttpServletResponse response, Object handler)throws Exception
    {
        //1.定義sessionid變量
        String sessionid = "";
        //2.獲取session對(duì)象
        HttpSession session=request.getSession();
        //3.獲取頁(yè)面上所有的cookie
        Cookie[] cookies = request.getCookies();
        //4.循環(huán)尋找名稱為"JSESSIONID"的cookie
        for(Cookie cookie:cookies){
            if(cookie.getName().equals("JSESSIONID")){
                sessionid = cookie.getValue();
            }
        }
        //5.根據(jù)sessionid獲取用戶信息
        User user = (User) session.getAttribute(sessionid);
        if(StringUtils.isEmpty(user)) {
            logger.info("用戶未登錄");
            //用戶未登錄跳轉(zhuǎn)到登錄頁(yè)面
            response.sendRedirect("login");
            return false;
        }
        logger.info("用戶已登錄");
        return  true;
    }

}

<!--自定義攔截器-->
    <mvc:interceptors>
        <mvc:interceptor>
            <!--配置要攔截的路徑-->
            <mvc:mapping path="/**"/>
            <!--配置登錄接口不被攔截-->
            <mvc:exclude-mapping path="/user/login"/>
            <!--指定攔截器類路徑-->
            <bean class="com.lishiqi.Util.Filter"></bean>
        </mvc:interceptor>
    </mvc:interceptors>