Spring-MVC 게시판 예제 17 - 자동로그인 기능 및 로그아웃 구현

@Override
public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {

    HttpSession httpSession = request.getSession();
    ModelMap modelMap = modelAndView.getModelMap();
    Object userVO =  modelMap.get("user");

    if (userVO != null) {
        logger.info("new login success");
        httpSession.setAttribute(LOGIN, userVO);
        //response.sendRedirect("/");

        if (request.getParameter("useCookie") != null) {
            logger.info("remember me...");
            // 쿠키 생성
            Cookie loginCookie = new Cookie("loginCookie", httpSession.getId());
            loginCookie.setPath("/");
            loginCookie.setMaxAge(60*60*24*7);
            // 전송
            response.addCookie(loginCookie);
        }

        Object destination = httpSession.getAttribute("destination");
        response.sendRedirect(destination != null ? (String) destination : "/");
    }

}

// 로그인 유지 처리
void keepLogin(String userId, String sessionId, Date sessionLimit) throws Exception;

// 세션키 검증
UserVO checkUserWithSessionKey(String value) throws Exception;

// 로그인 유지 처리
@Override
public void keepLogin(String userId, String sessionId, Date sessionLimit) throws Exception {
    Map<String, Object> paramMap = new HashMap<>();
    paramMap.put("userId", userId);
    paramMap.put("sessionId", sessionId);
    paramMap.put("sessionLimit", sessionLimit);

    sqlSession.update(NAMESPACE + ".keepLogin", paramMap);
}

// 세션키 검증
@Override
public UserVO checkUserWithSessionKey(String value) throws Exception {
    return sqlSession.selectOne(NAMESPACE + ".checkUserWithSessionKey", value);
}

void keepLogin(String userId, String sessionId, Date next) throws Exception;

UserVO checkLoginBefore(String value) throws Exception;

@Override
public void keepLogin(String userId, String sessionId, Date sessionLimit) throws Exception {
    userDAO.keepLogin(userId, sessionId, sessionLimit);
}

@Override
public UserVO checkLoginBefore(String value) throws Exception {
    return userDAO.checkUserWithSessionKey(value);
}

// 로그인 처리
@RequestMapping(value = "/loginPost", method = RequestMethod.POST)
public void loginPOST(LoginDTO loginDTO, HttpSession httpSession, Model model) throws Exception {

    UserVO userVO = userService.login(loginDTO);

    if (userVO == null || !BCrypt.checkpw(loginDTO.getUserPw(), userVO.getUserPw())) {
        return;
    }

    model.addAttribute("user", userVO);

    // 로그인 유지를 선택할 경우
    if (loginDTO.isUseCookie()) {
        int amount = 60 * 60 * 24 * 7;  // 7일
        Date sessionLimit = new Date(System.currentTimeMillis() + (1000 * amount)); // 로그인 유지기간 설정
        userService.keepLogin(userVO.getUserId(), httpSession.getId(), sessionLimit);
    }

}

public class RememberMeInterceptor extends HandlerInterceptorAdapter {

    private static final Logger logger = LoggerFactory.getLogger(RememberMeInterceptor.class);

    @Inject
    private UserService userService;

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

        HttpSession httpSession = request.getSession();
        Cookie loginCookie = WebUtils.getCookie(request, "loginCookie");
        if (loginCookie != null) {
            UserVO userVO = userService.checkLoginBefore(loginCookie.getValue());
            if (userVO != null)
                httpSession.setAttribute("login", userVO);
        }

        return true;
    }
}

// 로그아웃 처리
@RequestMapping(value = "/logout", method = RequestMethod.GET)
public String logout(HttpServletRequest request,
                     HttpServletResponse response,
                     HttpSession httpSession) throws Exception {

    Object object = httpSession.getAttribute("login");
    if (object != null) {
        UserVO userVO = (UserVO) object;
        httpSession.removeAttribute("login");
        httpSession.invalidate();
        Cookie loginCookie = WebUtils.getCookie(request, "loginCookie");
        if (loginCookie != null) {
            loginCookie.setPath("/");
            loginCookie.setMaxAge(0);
            response.addCookie(loginCookie);
            userService.keepLogin(userVO.getUserId(), "none", new Date());
        }
    }

    return "/user/logout";
}

public class LoginAfterInterceptor extends HandlerInterceptorAdapter {

    private static final Logger logger = LoggerFactory.getLogger(LoginAfterInterceptor.class);

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {

        // 로그인 처리후 로그인페이지 or 회원가입 페이지로 이동할 경우
        HttpSession session = request.getSession();
        if (session.getAttribute("login") != null) {
            response.sendRedirect(request.getContextPath() + "/");
            return false;
        }
        return true;
    }
}