1订单详情的查询

OrdersController

package com.itheima.ssm.controller;import com.github.pagehelper.PageHelper;
import com.github.pagehelper.PageInfo;
import com.itheima.ssm.domain.Orders;
import com.itheima.ssm.domain.Product;
import com.itheima.ssm.service.IOrdersService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.servlet.ModelAndView;import java.util.List;@Controller
@RequestMapping("/orders")
public class OrdersController {@Autowiredprivate IOrdersService ordersService;//未进行分页的代码
//     @RequestMapping("/findAll.do")
//    public ModelAndView findAll() throws Exception {
//        ModelAndView mv=new ModelAndView();
//
//         List<Orders> orders = ordersService.findAll();
//         //System.out.println(ps);
//
//        mv.addObject("ordersList",orders);
//        mv.setViewName("orders-list");
//        return mv;
//
//    }//进行分页处理后的代码@RequestMapping("/findAll.do")public ModelAndView findAll(@RequestParam(name="page",required = true,defaultValue = "1") int page,@RequestParam(name="pageSize",required = true,defaultValue = "3") int pageSize) throws Exception {ModelAndView mv=new ModelAndView();List<Orders> orders = ordersService.findByPage(page,pageSize);PageInfo pageInfo=new PageInfo(orders);mv.addObject("pageInfo",pageInfo);mv.setViewName("orders-page-list");return mv;}//查询订单详情方法@RequestMapping("/findById.do")public ModelAndView findById(@RequestParam(name="id",required = true) String ordersId) throws Exception {ModelAndView mv=new ModelAndView();Orders orders=ordersService.findById(ordersId);mv.addObject("orders",orders);mv.setViewName("orders-show");return mv;}}

OrdersServiceImpl

package com.itheima.ssm.service.impl;import com.github.pagehelper.PageHelper;
import com.itheima.ssm.dao.IOrdersDao;
import com.itheima.ssm.domain.Orders;
import com.itheima.ssm.service.IOrdersService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
import org.springframework.transaction.annotation.Transactional;import java.util.List;@Service
@Transactional
public class OrdersServiceImpl implements IOrdersService {@Autowiredprivate IOrdersDao ordersDao;@Overridepublic List<Orders> findAll() throws Exception {return ordersDao.findAll();}@Overridepublic List<Orders> findByPage(int page, int pageSize) throws Exception {//page是查询的起始页码，pageSize是查询的每页条目数目PageHelper.startPage(page,pageSize);return ordersDao.findAll();}//查询订单的详情@Overridepublic Orders findById(String ordersId) throws Exception {return ordersDao.findById(ordersId);}
}

IOrdersDao

package com.itheima.ssm.dao;import com.itheima.ssm.domain.Member;
import com.itheima.ssm.domain.Orders;
import com.itheima.ssm.domain.Product;
import org.apache.ibatis.annotations.*;import java.util.List;public interface IOrdersDao {@Select("select * from orders")@Results({@Result(id=true,column = "id",property = "id"),@Result(column = "orderNum",property = "orderNum"),@Result(column = "orderTime",property = "orderTime"),@Result(column = "orderStatus",property = "orderStatus"),@Result(column = "peopleCount",property = "peopleCount"),@Result(column = "payType",property = "payType"),@Result(column = "orderDesc",property = "orderDesc"),@Result(column = "productId",property = "product",one = @One(select ="com.itheima.ssm.dao.IProductDao.findById"))})public List<Orders> findAll() throws Exception;//查询订单的详情@Select("select * from orders where id = #{ordersId}")@Results({@Result(id=true,column = "id",property = "id"),@Result(column = "orderNum",property = "orderNum"),@Result(column = "orderTime",property = "orderTime"),@Result(column = "orderStatus",property = "orderStatus"),@Result(column = "peopleCount",property = "peopleCount"),@Result(column = "payType",property = "payType"),@Result(column = "orderDesc",property = "orderDesc"),@Result(column = "productId",property = "product",javaType = Product.class,one = @One(select ="com.itheima.ssm.dao.IProductDao.findById")),@Result(column ="memberId",property = "member",javaType = Member.class,one=@One(select ="com.itheima.ssm.dao.IMemberDao.findById")),@Result(column = "id",property = "travellers",javaType = java.util.List.class,many = @Many(select ="com.itheima.ssm.dao.ITravellerDao.findByOrdersId"))})Orders findById(String ordersId)throws Exception;
}

ITravellerDao

package com.itheima.ssm.dao;import com.itheima.ssm.domain.Traveller;
import org.apache.ibatis.annotations.Select;import java.util.List;public interface ITravellerDao {@Select("select * from traveller  where id in (select travellerId from order_traveller where orderId = #{ordersId})")public List<Traveller> findByOrdersId( String ordersId)throws Exception;
}

IMemberDao

package com.itheima.ssm.dao;import com.itheima.ssm.domain.Member;
import org.apache.ibatis.annotations.Select;public interface IMemberDao {@Select("Select * from member where id = #{id}")public Member findById(String id ) throws Exception;
}

在order_show页面展示的时候，会出现有的数据不显示的问题，是因为实体类中的属性字符串形式没有赋值的问题。

2 SSM权限操作

数据库创建表以及编写相应的实体类
UserInfo

package com.itheima.ssm.domain;import java.util.List;public class UserInfo {private String id;private String username;private String email;private String password;private String phoneNum;private int status;private String statusStr;private List<Role> roles;public String getId() {return id;}public void setId(String id) {this.id = id;}public String getUsername() {return username;}public void setUsername(String username) {this.username = username;}public String getEmail() {return email;}public void setEmail(String email) {this.email = email;}public String getPassword() {return password;}public void setPassword(String password) {this.password = password;}public String getPhoneNum() {return phoneNum;}public void setPhoneNum(String phoneNum) {this.phoneNum = phoneNum;}public int getStatus() {return status;}public void setStatus(int status) {this.status = status;}public String getStatusStr() {return statusStr;}public void setStatusStr(String statusStr) {this.statusStr = statusStr;}public List<Role> getRoles() {return roles;}public void setRoles(List<Role> roles) {this.roles = roles;}@Overridepublic String toString() {return "UserInfo{" +"id='" + id + '\'' +", username='" + username + '\'' +", email='" + email + '\'' +", password='" + password + '\'' +", phoneNum='" + phoneNum + '\'' +", status=" + status +", statusStr='" + statusStr + '\'' +", roles=" + roles +'}';}
}

2.Spring Security概述

web.xml
spring-security.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"xmlns:security="http://www.springframework.org/schema/security"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="http://www.springframework.org/schema/beanshttp://www.springframework.org/schema/beans/spring-beans.xsdhttp://www.springframework.org/schema/securityhttp://www.springframework.org/schema/security/spring-security.xsd"><!-- 配置不拦截的资源 --><security:http pattern="/login.jsp" security="none"/><security:http pattern="/fail.jsp" security="none"/><security:http pattern="/css/**" security="none"/><security:http pattern="/img/**" security="none"/><security:http pattern="/plugins/**" security="none"/><!--配置具体的规则auto-config="true"	不用自己编写登录的页面，框架提供默认登录页面use-expressions="false"	是否使用SPEL表达式（没学习过）--><security:http auto-config="true" use-expressions="false"><!-- 配置具体的拦截的规则 pattern="请求路径的规则" access="访问系统的人，必须有ROLE_USER的角色" --><security:intercept-url pattern="/**" access="ROLE_USER,ROLE_ADMIN"/><!-- 定义跳转的具体的页面 --><security:form-loginlogin-page="/login.jsp"login-processing-url="/login.do"default-target-url="/index.jsp"authentication-failure-url="/fail.jsp"authentication-success-forward-url="/pages/main.jsp"/><!-- 关闭跨域请求 --><security:csrf disabled="true"/><!-- 退出 --><security:logout invalidate-session="true" logout-url="/logout.do" logout-success-url="/login.jsp" /></security:http><!-- 切换成数据库中的用户名和密码 --><security:authentication-manager><security:authentication-provider user-service-ref="userService"><!-- 配置加密的方式<security:password-encoder ref="passwordEncoder"/>--></security:authentication-provider></security:authentication-manager><!-- 配置加密类 --><bean id="passwordEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder"/><!-- 提供了入门的方式，在内存中存入用户名和密码<security:authentication-manager><security:authentication-provider><security:user-service><security:user name="admin" password="{noop}admin" authorities="ROLE_USER"/></security:user-service></security:authentication-provider></security:authentication-manager>--></beans>

用户登录流程分析 不在用controller 使用springSecurity来进行管理

IUserService

package com.itheima.ssm.service;import org.springframework.security.core.userdetails.UserDetailsService;public interface IUserService extends UserDetailsService {
}

IUserServiceImpl

package com.itheima.ssm.service.impl;import com.itheima.ssm.dao.IUserDao;
import com.itheima.ssm.domain.Role;
import com.itheima.ssm.domain.UserInfo;
import com.itheima.ssm.service.IUserService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;
import org.springframework.transaction.annotation.Transactional;import java.util.ArrayList;
import java.util.List;@Service("userService")
@Transactional
public class IUserServiceImpl implements IUserService {@Autowiredprivate IUserDao userDao;@Overridepublic UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {UserInfo userInfo=null;try {userInfo = userDao.findByUsername(username);} catch (Exception e) {e.printStackTrace();}// System.out.println(userInfo);User user=new User(userInfo.getUsername(),"{noop}"+userInfo.getPassword(),userInfo.getStatus()==0?false:true,true,true,true,getAuthority(userInfo.getRoles()));return user;}//第一次的解决方案 ，直接为用户赋予角色public List<SimpleGrantedAuthority> getAuthority(List<Role> roles){List<SimpleGrantedAuthority> list=new ArrayList<>();for (Role role:roles) {list.add(new SimpleGrantedAuthority("ROLE_"+role.getRoleName()));}return list;}
}

IUserDao

package com.itheima.ssm.dao;import com.itheima.ssm.domain.UserInfo;
import org.apache.ibatis.annotations.Many;
import org.apache.ibatis.annotations.Result;
import org.apache.ibatis.annotations.Results;
import org.apache.ibatis.annotations.Select;public interface IUserDao {@Select("select * from users where username = #{username}")@Results({@Result(id=true,column = "id",property = "id"),@Result(column = "username",property = "username"),@Result(column = "email",property = "email"),@Result(column = "password",property = "password"),@Result(column = "phoneNum",property = "phoneNum"),@Result(column = "status",property = "status"),@Result(column = "id",property = "roles",javaType = java.util.List.class,many = @Many(select ="com.itheima.ssm.dao.IRoleDao.findByUserId"))})public UserInfo findByUsername(String username) throws Exception;
}

IRoleDao

package com.itheima.ssm.dao;import com.itheima.ssm.domain.Role;
import org.apache.ibatis.annotations.Select;import java.util.List;public interface IRoleDao {@Select("select * from role  where id in (select roleId from users_role where userId = #{userId})")public List<Role> findByUserId(String userId)throws Exception;
}

用户退出功能