@Controller
@SessionAttributes("user")
public class LoginController {
    @Autowired
    private LoginService loginService;
    
    //表單提交過來的路徑
    @RequestMapping("/checkLogin")
    //@ModelAttribute
    public String checkLogin(@ModelAttribute("abc")User user,Model model){
        //調(diào)用service方法
        user = loginService.checkLogin(user.getUsername(), user.getPassword());
        //若有user則添加到model里并且跳轉(zhuǎn)到首頁頁面
        if(user != null){
            model.addAttribute("user",user);
            return "redirect:/user/index.do";
        }
        return "login";
    }    
    
    //注銷方法
    @RequestMapping("/outLogin")
    public String outLogin(HttpSession session,SessionStatus sessionStatus){
        //通過session.invalidata()方法來注銷當(dāng)前的session
     sessionStatus.setComplete();
        //session.invalidate();
        //session.removeAttribute("user");
        return "redirect:/checkLogin.do";
    }
}

<%-- 測試能夠獲取session
<div>
<strong> ${sessionScope.user.username}!!!!! </strong>
<strong> ${user.username}????? </strong>
</div> 
--%>
<c:choose>
<c:when test="${!empty user.username}">
<li class="dropdown"><a href="#" rel="external nofollow"  class="dropdown-toggle"
data-toggle="dropdown">${user.username} <strong
class="caret"></strong></a>
<ul class="dropdown-menu">
<li><a href="<%=request.getContextPath() %>/user/toUserDetail.do?id=${user.id}" rel="external nofollow" >個人信息</a></li>
<li class="divider"></li>
<li><a href="<%=request.getContextPath() %>/outLogin.do" rel="external nofollow" >退出</a></li>
</ul></li>
</c:when>
<c:otherwise>
<li><a href="<%=request.getContextPath() %>/user/toLogin.do" rel="external nofollow" >登錄</a>
<li><a href="<%=request.getContextPath() %>/user/toRegedit.do" rel="external nofollow" >注冊</a>
</c:otherwise>
</c:choose>

@Service
public class LoginServiceImpl implements LoginService{
 @Autowired
 private UserMapper userMapper;
 @Override
 public User checkLogin(String username, String password) {
  User user = userMapper.findByUsername(username);
        if(user != null && user.getPassword().equals(password)){        
            return user;
        }
        return null;
 } 
}