SpringBoot项目中Druid自动登录功能实现

<dependency>
	 <groupid>com.alibaba</groupid>
	 <artifactid>druid</artifactid>
	 <version>1.1.21</version>
</dependency>

<dependency>
	<groupid>com.alibaba</groupid>
	<artifactid>druid-spring-boot-starter</artifactid>
	<version>1.1.21</version>
</dependency>

spring:
  datasource:
 	  # 基本属性
      name: dev
      url: jdbc:mysql://127.0.0.1:3306/test?autoreconnect=true&useunicode=true&characterencoding=utf-8&allowmultiqueries=true&zerodatetimebehavior=converttonull&usessl=false
      username: root
      password: root
      # 可以不配置，根据url自动识别，建议配置
      driver-class-name: com.mysql.jdbc.driver
      ###################以下为druid增加的配置###########################
      type: com.alibaba.druid.pool.druiddatasource
      # 初始化连接池个数
      initialsize: 5
      # 最小连接池个数——》已经不再使用，配置了也没效果
      minidle: 2
      # 最大连接池个数
      maxactive: 20
      # 配置获取连接等待超时的时间，单位毫秒，缺省启用公平锁，并发效率会有所下降
      maxwait: 60000
      # 配置间隔多久才进行一次检测，检测需要关闭的空闲连接，单位是毫秒
      timebetweenevictionrunsmillis: 60000
      # 配置一个连接在池中最小生存的时间，单位是毫秒
      minevictableidletimemillis: 300000
      # 用来检测连接是否有效的sql，要求是一个查询语句。
      # 如果validationquery为null，testonborrow、testonreturn、testwhileidle都不会起作用
      validationquery: select 1 from dual
      # 建议配置为true，不影响性能，并且保证安全性。
      # 申请连接的时候检测，如果空闲时间大于timebetweenevictionrunsmillis，执行validationquery检测连接是否有效。
      testwhileidle: true
      # 申请连接时执行validationquery检测连接是否有效，做了这个配置会降低性能
      testonborrow: false
      # 归还连接时执行validationquery检测连接是否有效，做了这个配置会降低性能
      testonreturn: false
      # 打开pscache，并且指定每个连接上pscache的大小
      poolpreparedstatements: true
      maxpoolpreparedstatementperconnectionsize: 20
      # 通过别名的方式配置扩展插件，多个英文逗号分隔，常用的插件有： 
      # 监控统计用的filter:stat
      # 日志用的filter:log4j
      # 防御sql注入的filter:wall
      filters: stat,wall,log4j #log4j 
      # 通过connectproperties属性来打开mergesql功能；慢sql记录
      connectionproperties: druid.stat.mergesql=true;druid.stat.slowsqlmillis=5000
      # 合并多个druiddatasource的监控数据
      useglobaldatasourcestat: true

@configuration
public class druidconfig {
    @bean
    @configurationproperties(prefix = "spring.datasource")
    public druiddatasource druiddatasource(){
        return new druiddatasource();
    }
}

@webfilter(filtername="druidwebstatfilter",urlpatterns="/*",
        initparams={
                @webinitparam(name="exclusions",value="*.js,*.gif,*.jpg,*.bmp,*.png,*.css,*.ico,/druid/*,/font-awesome/*")// 忽略资源
        })
public class druidstatfilter extends webstatfilter {
}

@webservlet(urlpatterns = "/druid/*",
        initparams={
                @webinitparam(name="allow",value="127.0.0.1"),// ip白名单 (没有配置或者为空，则允许所有访问)
                @webinitparam(name="deny",value=""),// ip黑名单 (存在共同时，deny优先于allow)
                @webinitparam(name="loginusername",value="root"),// 用户名
                @webinitparam(name="loginpassword",value="root"),// 密码
                @webinitparam(name="resetenable",value="false")// 禁用html页面上的“reset all”功能
        })
public class druidstatviewservlet extends statviewservlet {
}

<form id="loginform" >
	...省略...
	<input type="text" name="loginusername">
	<input type="password" name="loginpassword">
	<button>提交</button>
	...省略...
</form>

  $.namespace("druid.login");
       druid.login = function () {  
           return  {
              login : function() {
                  $.ajax({
                    type: 'post',
                    url: "submitlogin",
                    data: $("#loginform").serialize(),
                    success: function(data) {
                      if("success" == data)
                          location.href = "index.html";
                      else {
                          $("#alertinfo").show();
                          $("#loginform")[0].reset();
                      }
                    },
                    datatype: "text"
                  });
              }
           }
      }();
      $(document).ready(function() {
          $("#loginbtn").click(druid.login.login);
     });

@requestmapping("/todruidlogin")
public string todruidlogin(){
   return "druidlogin";
}

<script th:src="@{https://code.jquery.com/jquery-3.4.1.min.js}" type="text/javascript"></script>
<script type="text/javascript">
	$(document).ready(function(){
		$.ajax({
	      type: 'get',
	      url: '/dodruidlogin',
	      datatype: "text",
	      data: {},
	      success: function (data) {
	          if (data == "success") {
	              location.href = "/druid";
	          } else 
	          		//其他逻辑省略
	          }
	      }, 
	      error: function () {
	      		//其他逻辑省略
	      }
	  });
	});
</script>

 @requestmapping("/dodruidlogin")
 public string dodruidlogin(){
 	 //不会执行，但要拦截/dodruidlogin，不然会报错
     return "/";
 }

@webfilter(filtername = "moni",urlpatterns = "/dodruidlogin")
public class druidloginfilter implements filter {
	private static final logger log = loggerfactory.getlogger(druidloginfilter.class);
	@override
    public void init(filterconfig filterconfig) throws servletexception {
        log.info("druidloginfilter初始化");
    }
	 @override
    public void dofilter(servletrequest servletrequest, servletresponse servletresponse, filterchain chain) throws ioexception, servletexception {
        httpservletrequest request = (httpservletrequest) servletrequest;
        httpservletresponse response = ((httpservletresponse) servletresponse);
        string requesturl = request.getrequesturl().tostring();
        //log.info(requesturl);
        // 针对druid做自动登录
        if(requesturl.contains("/dodruidlogin")){
            string querystring = "loginusername=root&loginpassword=root";
            // 获取完整路径
          //  log.info("====="+requesturl);
            stringbuffer url = new stringbuffer(requesturl);
            // 获取路径加上项目名称
            string tempcontexturl = url.delete(url.length() - request.getrequesturi().length(), url.length()).append(request.getservletcontext().getcontextpath()).append("/").tostring();
          //  log.info(tempcontexturl);
            /** 构造新地址，其实就是druid的登录地址 */
            url newurl = new url(tempcontexturl + "druid/submitlogin?" + querystring);
           // log.info(newurl.tostring());
            response.setstatus(307);
            response.setheader("location", newurl.tostring());
            response.setheader("connection", "close");
            //允许所有跨域请求
            response.addheader("access-control-allow-origin", "*");
        }else {
            chain.dofilter(request,response);
        }
    }
    @override
    public void destroy() {
        log.info("druidloginfilter销毁");
    }
}

response.setstatus(307);
response.setheader("location", newurl.tostring());
response.setheader("connection", "close");