easyui+ssm+shiro做的登录注册修改密码审核用户(二)

<div class="form-bottom" style="height:300px;">
	<form id="loginForm" action="${ctx }/shiroLogin" method="post" class="login-form">
		<div class="form-group">
			<label class="sr-only" for="form-username">用户名</label>
			    <input type="text" name="username" placeholder="用户名..." class="form-username form-control" id="form-username">
		</div>
		<div class="form-group">
			<label class="sr-only" for="form-password">密码</label>
			    <input type="password" name="password" placeholder="密码..." class="form-password form-control" id="form-password">
		</div>
			                     
		<!-- 记住密码<input type="checkbox" name="remeberMe" value="1"> -->
		<div style="float:right;height:40px;">
			<input type="checkbox" id="remember" checked >记住密码<br/><br/>
		</div>
			                       	 
		<button id="login" type="submit" class="btn" onclick="loginBtn_click()">登  录</button>
		<p></p>    
   </form>
	<a style='color:blue' href='javascript:void(0)' title='注册' onclick='register()'>用户注册</a>
		                        
	<div style="float:right;">
		<a style='color:blue' href='javascript:void(0)' title='修改密码' onclick='updatePwd()'>修改密码</a>
	</div>
</div>

$.ajax({  
	type : "post", 
	url : "/yhzn/shiroLogin",  
	data : {"username":username,"password":password},  
	dataType : "json",  
		success : function(data) {
		   if(data.status == "y"){
		      window.location.href = "${ctx }/home";
		   }else{
			  alert("4324");
		   }
		},
		error: function(XMLHttpRequest, textStatus, errorThrown) {
           alert("error:"+textStatus);
        }  
});  

	/**
	 * 登录
	 * @param username
	 * @param password
	 * @return
	 */
	@RequestMapping("/shiroLogin")
	@ResponseBody
	public String login(@RequestParam String username, @RequestParam String password,HttpServletRequest request) {
		String msg = "";
		/*String ip=this.getRequest().getRemoteAddr();
		if(ip==null||ip.indexOf("10.", 0)<0)
		{
			return "{\"info\":\"IP不在允许范围内!\",\"status\":\"n\"}";
		}*/
		Subject currentUser = SecurityUtils.getSubject();
		try {
			// 将用户名和密码封装为UsernamePasswordToken对象
			UsernamePasswordToken token = new UsernamePasswordToken(username,password);
			token.setRememberMe(true);
			currentUser.login(token);
			String hashAlgorithName = "MD5";
			Object credentials = password;
			Object salt = ByteSource.Util.bytes(username);
			int hashIterations = 1024;
			Object result = new SimpleHash(hashAlgorithName,credentials,salt,hashIterations);
		//	user.setPassword(String.valueOf(result));
			HashMap<String,String> para=new HashMap<String,String>();
			para.put("userName", username);
			para.put("password", String.valueOf(result));
			User user = userService.checkUser(para);
			
			if(user==null){
				msg = "{\"info\":\"用户名或密码错误！\",\"status\":\"n\"}";
			}else if("1".equals(user.getState())){
				msg = "{\"info\":\"该用户未审核！\",\"status\":\"n\"}";
			}else if(user.getRoleId()==null){
				msg = "{\"info\":\"该用户未分配角色！\",\"status\":\"n\"}";
			}else{
				currentUser.isPermitted(username);	
				 String roleId= sysRoleService.findRolesByUserName(user.getUserName());
				List<Permission> permission = sysRoleService.permissionById(roleId);
				Set<String> biaoshi = userService.findPermissionsByUserName(user.getUserName());
				request.getSession().setAttribute("biaoshi", biaoshi);
				request.getSession().setAttribute("permission", permission);
				//获取访问者IP
			//String ip = this.getRequest().getRemoteAddr();
			//user.setLoginIp(ip);
			user.setLoginIp(getIp(request));
			//日志类型，操作人，操作内容，操作人IP,操作方法
			sysLogService.insertSysLog("登录",user.getTrueName(),"登录系统",user.getLoginIp(),"/shiroLogin");
			this.getRequest().getSession().setAttribute("user", user);
				
			msg = "{\"info\":\"登录成功！\",\"status\":\"y\"}";
			}
		} catch (UnknownAccountException e) {
			msg = "{\"info\":\"登录失败【用户不存在】！\",\"status\":\"n\"}";
		} catch (IncorrectCredentialsException e) {
			msg = "{\"info\":\"登录失败【密码错误】！\",\"status\":\"n\"}";
		} catch (LockedAccountException e) {
			msg = "{\"info\":\"登录失败【用户已锁】！\",\"status\":\"n\"}";
		} catch (AuthenticationException e) {
			msg = "{\"info\":\"登录失败【认证异常】！\",\"status\":\"n\"}";
		} catch (Exception e) {
			e.printStackTrace();
			msg = "{\"info\":\"用户名或密码错误！\",\"status\":\"n\"}";
		}
		return msg;
	}

    /**
	 * 用户名密码认证
	 */
	@Override
	public 	User checkUser(HashMap<String,String> para){
		return userDao.checkUser(para);
	}

    /**
	 * 验证用户名密码
	 * 
	 * @param para
	 * @return
	 */
	public User checkUser(HashMap<String, String> para);

<!-- 验证用户名密码 -->
	<select id="checkUser" parameterType="map" resultMap="BaseResultMap">
		select
		<include refid="Base_Column_List" />
		from SYS_USER
		where USER_NAME = #{userName}
		and PASSWORD =#{password}
		and DELETE_FLAG = '0'
	</select>

<!-- 设置session有效时间-->
<session-config>
   <session-timeout>15</session-timeout>
</session-config>

if(window != top) {
	alert("由于您长时间未操作，登录信息已超时，请重新登录!!!");
	top.location.href = "${ctx}/login";
} 

<!-- 记住密码
<input type="checkbox" name="remeberMe" value="1"> -->
	<div style="float:right;height:40px;">
	<input type="checkbox" id="remember" checked >记住密码<br/><br/>
</div>

$(document).ready(function(){
	         var strName = localStorage.getItem('keyName');
	         var strPass = localStorage.getItem('keyPass');
	         if(strName){
	             $('#form-username').val(strName);
	         }if(strPass){
	             $('#form-password').val(strPass);
	         }
     	});

function loginBtn_click(){
             var strName = $('#form-username').val();
             var strPass = $('#form-password').val();
             localStorage.setItem('keyName',strName);
             if($('#remember').is(':checked')){
                 localStorage.setItem('keyPass',strPass);
             }else{
                 localStorage.removeItem('keyPass');
             }
         }