使用redis时,有时候removeUser会失效,removeSession总可以了吧

zhou-hao · zhou-hao · commit 0a2839a3a168 · 2017-04-10T18:07:10.000+08:00
diff --git a/hsweb-web-controller/src/main/java/org/hsweb/web/controller/login/AuthorizeController.java b/hsweb-web-controller/src/main/java/org/hsweb/web/controller/login/AuthorizeController.java
@@ -40,6 +40,7 @@
 import javax.annotation.PostConstruct;
 import javax.annotation.Resource;
 import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpSession;
 
 /**
  * 授权控制器,用于登录系统
@@ -115,10 +116,12 @@ public ResponseMessage onlineInfo() {
      */
     @RequestMapping(value = "/exit", method = RequestMethod.POST)
     @AccessLogger("登出")
-    public ResponseMessage exit() {
+    public ResponseMessage exit(HttpSession session) {
         User user = WebUtil.getLoginUser();
         if (user != null) {
             httpSessionManager.removeUser(user.getId());
+            //使用redis时,有时候removeUser会失效,removeSession总可以了吧
+            httpSessionManager.removeSession(session.getId());
         }
         return ResponseMessage.ok();
     }
