【发布时间】：2017-03-19 13:49:18
【问题描述】：
它带有 Hibernate 的 Spring MVC 应用程序。
@Service
public class UserServiceImpl implements UserService {
@Autowired
UserDao userDao;
@Autowired
private SessionFactory sessionFactory;
@Override
public boolean save(User user) {
return userDao.save(user);
}
@Override
public void update(User user) {
userDao.update(user);
// return this.userDao.update(user);
}
@Override
@Transactional
public User findById(int id) {
return this.userDao.findById(id);
}
@Override
@Transactional
public List<User> listPersons() {
return this.userDao.listPersons();
}
@Override
@Transactional
public User deleteUser(int id) {
return userDao.deleteUser(id);
}
public boolean validateUser(int id) {
List<User> list= (List<User>) findById(id);
return false;
}
public User validateUser(User user) {
Session session = this.sessionFactory.getCurrentSession();
String query = "select u.name, u.password from User as u where u.name='"+ user.getName() + "' and u.password='"
+ user.getPassword() + "'";
session.createQuery(query);
ResultSet rs = (ResultSet) session.createQuery (query);
try {
if (rs.next()){
return user;
} else
return user;
} catch (SQLException e) {
e.printStackTrace();
}
return user;
}
}
My UserServiceImpl class has a method to validate the user input[ password and userID];
用户登录到 login.jsp 页面并填写此表单：
<body>
Welcome back!
<br> Only Registered user can log in...
<br>
<br>
<form:form action="admin" modelAttribute="user" method="POST">
<table border="1">
<tr>
<td><form:label path="userId">Your Id:- </form:label></td>
<td><form:input path="userId" /></td>
</tr>
<tr>
<td><form:label path="password">Password:- </form:label></td>
<td><form:input path="password" /></td>
</tr>
<tr>
<td><form:label path="role">Select Log in role as a:- </form:label></td>
<td><form:select path="role">
<form:option value="NONE" lable="---SELECT---">Please Select</form:option>
<form:options items="${roles}" />
</form:select></td>
<td><input type="submit" value="Login" /></td>
</tr>
</table>
</form:form>
</body>
表单进入控制器：
@RequestMapping(value = "/admin", method = RequestMethod.POST)
public String LoggedUser(@ModelAttribute("user") User user, BindingResult result, Model model) {
// get the role, id and pw value from jsp
String role = user.getRole();
String loadedPW = user.getPassword();
String loadedUId = user.getUserId();
// want to check password and userId here again Db
//loadedPW.
//directing to admin page and gen page
if (role.equalsIgnoreCase("Admin") || role.equalsIgnoreCase("Principal")) {
return "adminPage";
} else
return "genPage";
}
我的用户对象是
@Entity
@Table(name = "USER")
public class User implements Serializable {
private static final long serialVersionUID = 1L;
@Id
@Column(name = "ID")
@GeneratedValue(strategy = GenerationType.AUTO)
private int id;
@Column(name = "NAME")
private String name;
@Column(name = "USER_ID")
private String userId;
@Column(name = "PASSWORD")/*
@NotNull(message="Please select a password")
@Length(min=5, max=10, message="Password should be between 5 - 10 charactes")*/
private String password;
@Column(name = "EMAIL")
private String email;
@Column(name = "ROLE")
private String role;
@Column(name = "DEPARTMENT")
private String department;
@Column(name = "RID")
private int rid;
public int getRid() {
return rid;
}
public void setRid(int rid) {
this.rid = rid;
}
@ManyToOne
@JoinTable(name = "user_roles", joinColumns = {
@JoinColumn(name = "user_id", referencedColumnName = "id") }, inverseJoinColumns = {
@JoinColumn(name = "roles_id", referencedColumnName = "id") })
/*@ManyToOne(cascade=CascadeType.ALL)*/
public Roles roles;
public Roles getRoles() {
return roles;
}
public void setRoles(Roles roles) {
this.roles = roles;
}
// no arg constructor
public User() {
//getters and setters ........
}
如何根据我的用户表验证 login.jsp 上的密码和用户 ID 输入？ 我必须使用 JDBC 结果集还是有其他更好的方法来验证用户输入？我正在使用带有 Spring MVC 4.x 的 Hibernate 4.3x。
【问题讨论】：
标签： spring hibernate validation spring-mvc passwords