现在的位置: 首页 > 综合 > 正文

HttpSession在flex中的应用

2013年05月19日 ⁄ 综合 ⁄ 共 7664字 ⁄ 字号 评论关闭

      前些天有看到过一个flex的面试题,问的是在flex中对于登陆超时的case是怎么处理的(采用remoteObject与后端服务通信)。我知道在java中是通过session控制的,于是猜想flex与java的结合是不是也可以采用这种方式呢。google一把后发现这种方式确实可行。现将一哥们的解决方案贴上:

 

问题的背景
Flex Remote Object可以是POJO,JavaBean或是EJB。在面向服务的架构中(Service Oriented Architecture),我们可以用Remote Object来作为Service Facade,利用应用服务器提供的persistent service来储存状态信息。

Flex既可以提供stateful或stateless的remote object, 另外还有session servlet让mxml获取/和储存session中的内容。这一切听上去都很完美,但是有一个问题,Flex Remote Object本身是无法获得任何有关Running Context的信息,也就是说,你无法从你的 Remote Object 中获得 HttpSession, HttpRequest 和 ServletContext。 所谓的 Flex Session servlet只是让MXML获得session的内容,而不是直接让Remote Object获得session。

Remote Object为什么需要获得HttpRequest, HttpSession?
既然Flex提供了stateful的remote object为什么还要让remote object获得Running Context呢?问题在于Flex中的stateful是基于应用服务器的http session,而且你无法控制AMFGateway建立remote object的过程。打个简单的比方,我们知道一般的应用服务器中,session的时限只有20分钟,而在很多系统的登陆过程中却有选择保持登陆几个月的选项。

其具体实现上就是利用cookie来储存id和password hash,通过控制cookie的存活时间来实现的。而在服务器端,一旦session过期了,则可以从cookie中获得id和password hash重新登陆一遍,从而达到自动认证用户的目的。

如果你的Remote Object无法获得 HttpServletRequest, HttpSession,你就无法实现上述的情况。另外,对于小型的应用来说,直接在Remote object中获得servlet context并利用它来储存/获得共享的资源,可以大大降低开发的复杂程度。

解决方案
要让Remote Object获得HttpSession,HttpRequest和ServletContext并不是一件容易的事情。这里提供了我的一种方法,供大家参考。希望能抛砖引玉,让大家提出更好,更有效的方案。

这个方法的基本思路是利用JAVA提供的 ThreadLocal Object。当服务器接收到一个HTTP请求后,这个请求的整个处理过程是运行在同一个线程中的。

每个HTTP请求的处理会都运行在各自独立的线程中。而在Flex中,所有AMF Remote Object 的请求都需要通过 AMF Gateway Servlet,而Remote Object 的建立和调用恰恰就是运行在这个HTTP请求的线程中。

有了这个原则,我们就可以建立一个Context Object,每当请求建立的时候,就可以把这个请求放入 Context 的 ThreadLocal 中,而当 Remote Object 被AMF Gateway Servlet调用的时候,就可以通过访问 Context 的ThreadLoca l来获得其所对应的那个请求。

而截获发送到AMF Gateway的请求则可以通过Servlet Filter来实现。废话不说了,看代码吧!

 1. 添加以下内容到WEB-INF/web.xml中

<filter>
<filter-name>AMFSessionFilter </filter-name>
<filter-class>com.netop.forum.servlets.AMFSessionFilter </filter-class>
<filter>

<filter-mapping>
<filter-name>AMFSessionFilter </filter-name>
<servlet-name>AMFGatewayServlet </servlet-name>
<filter-mapping>

2. AMFSessionFilter的代码

/*
* Created on 1/07/2004
*/
package com.netop.forum.servlets;

import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.*;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;

/**
* @author Zombie
* @version 0.5
*/

public class AMFSessionFilter implements Filter
{
private static Log log = LogFactory.getLog(AMFSessionFilter.class);

public void init(FilterConfig config)
{
log.info("Init AMFSessionFilter filter");
}

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws ServletException,IOException
{
AMFContext.setCurrentContext((HttpServletRequest)request, (HttpServletResponse)response);
chain.doFilter(request,response);
}

public void destroy()
{
log.info("Destory AMFSessionFilter filter");
}
}

 

3. AMFContext的代码

/*
* Created on 1/07/2004
*/
package com.netop.forum.servlets;

import javax.servlet.*;
import javax.servlet.http.*;
import com.netop.forum.business.*;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;

/**
* @author Zombie
* @version 0.5
*/
public class AMFContext
{

/**
* Context Attribute key for the connection the factory
*/
public final static String CONNECTION_FACTORY_KEY = "sqlMapFactory";

/**
* The log
*/
private static Log log = LogFactory.getLog(AMFContext.class);

/**
* ThreadLocal object for storing object in current thread.
*/
private static ThreadLocal tl = new ThreadLocal();

/**
* Set current context
*
* @param request The HttpRequest object
* @param response The HttpResponses object
*/
static public void setCurrentContext(HttpServletRequest request, HttpServletResponse response)
{
AMFContext c = getCurrentContext();
if (c == null)
{
c = new AMFContext(request,response);
tl.set(c);
}
else
{
c.setRequest(request);
c.setResponse(response);
}
}

/**
* Get current context value
* @return The current context
*/
static public AMFContext getCurrentContext()
{
return (AMFContext)tl.get();
}

//----------------------------------------------------------
//
// Class members
//
//----------------------------------------------------------

/**
* The http request object. The lifecycle of the request object is defined as the request
* scope. It may be reused in another incoming connection, so dont use it in another thread.
*/
private HttpServletRequest request;

/**
* The http response object. The lifecycle of the response object is defined as the request
* scope. Dont use it in another thread. Also dont write output to the response when it is
* used in the context, but you may get or set some response header when it is safe.
*/
private HttpServletResponse response;

/**
* The constructor is private, to get an instance of the AMFContext, please use
* getCurrentContext() method.
*
* @param request
* @param response
*/
private AMFContext (HttpServletRequest request, HttpServletResponse response)
{
this.request = request;
this.response = response;
}

/**
* Get request object
*
* @return Http request object
*/
public HttpServletRequest getRequest()
{
return request;
}

/**
* Set request object
*
* @param Http request object
*/
public void setRequest(HttpServletRequest request)
{
this.request = request;
}

/**
* Get response object
*
* @return Http response object
*/
public HttpServletResponse getResponse()
{
return response;
}

/**
* Set response object
*
* @param response Http response object
*/
public void setResponse(HttpServletResponse response)
{
this.response = response;
}

/**
* Get the servlet context
* @return
*/
public ServletContext getServletContext()
{
HttpSession session = this.getSession();
return session.getServletContext();
}

/**
* Get the current running session
* @return
*/
public HttpSession getSession()
{
return request.getSession();
}

/**
* Get an object stored in the session.
*
* @param attr Attribute Name
* @return The value stored under the attribute name.
*/
public Object getSessionAttribute(String attr)
{
HttpSession session = this.getSession();
return session.getAttribute(attr);
}

/**
* Store an object in the session.
*
* @param attr Attribute Name
* @param value The value.
*/
public void setSessionAttribute(String attr, Object value)
{
HttpSession session = this.getSession();
session.setAttribute(attr, value);
}

/**
* Get an object stored in the servlet context.
*
* @param attr Attribute Name
* @return The value stored under the attribute name.
*/
public Object getContextAttribute(String attr)
{
ServletContext sc = this.getServletContext();
return sc.getAttribute(attr);
}

/**
* Store an object in the servlet context.
*
* @param attr Attribute Name
* @param value The value.
*/
public void setContextAttribute(String attr, Object value)
{
ServletContext sc = this.getServletContext();
sc.setAttribute(attr,value);
}

/**
* Get an object stored in the current request.
*
* @param attr Attribute Name
* @return The value stored under the attribute name.
*/
public Object getRequestAttribute(String attr)
{
return request.getAttribute(attr);
}

/**
* Store an object in the current request.
*
* @param attr Attribute Name
* @param value The value.
*/
public void setRequestAttribute(String attr, Object value)
{
request.setAttribute(attr,value);
}

/**
* Get the connection factory from the servlet context. The connection factory is in the
* application scope.
*
* @return The connection factory for creating sqlMap objects.
*/
public ConnectionFactory getConnectionFactory()
{
ConnectionFactory factory =(ConnectionFactory)this.getContextAttribute(CONNECTION_FACTORY_KEY);
if (factory == null)
{
try
{
factory = new ConnectionFactory();
// factory is lazy instantiated, so we need to invoke it once to make sure it is ok.
factory.getSqlMap();
this.setContextAttribute(CONNECTION_FACTORY_KEY, factory);
}
catch (Throwable e)
{
log.fatal("Can not create connection factory: "+e.getMessage(), e);
}
}
return factory;
}

}

 

4. 如何在remote object中使用AMFContext

class YouRemoteService
{
public void serviceMethod()
{
AMFContext context = AMFContext.getCurrentContext();
HttpSession = context.getSession();
ServletContext = context.getServletContext();

HttpServletRequest request = context.getRequest();
HttpServletResponse response = context.getResponse();

context.setSessionAttribute("attr","value");
context.setContextAttribute("attr","value");

}
}

 

代码中有一小点bug,自己修正就OK了。

 

如果这种要求不是很严格的话,还有一种山寨的做法,就是我们监听Application的mouseMove事件,同时起一个Timer,如果过了规定的时间没有mouseMove事件触发,我们就让他重新登陆。

 

 

抱歉!评论已关闭.