spring mvc 禁止cookie session，怎么做

spring mvc 禁止cookie session，怎么做

session因为请求（request对象）而产生，同一个会话中多个request共享了一session对象，可以直接从请求中获取到session对象。
　　session的创建和使用总在服务端，而浏览器从来都没得到过session对象。但浏览器可以请求Servlet（jsp也是Servlet）来获取session的信息。客户端浏览器真正紧紧拿到的是session ID，而这个对于浏览器操作的人来说，是不可见的。

方法一：使用servlet-api [java] view plain copy print? @controller public class managercontroller { @resource private managerservice managerserviceimpl; @requestmapping(value = "manager/login.do",method = requestmethod.get) public modelandview login(managermodel managermodel,httpsession httpsession){ managermodel manager = managerserviceimpl.getmanager(managermodel); if(manager!=null){ manager.setpassword(""); httpsession.setattribute("manager", manager); return new modelandview(new redirectview("../admin/main.jsp")); }else{ return new modelandview(new redirectview("../admin/login.jsp")); } } @requestmapping(value = "manager/logout.do",method = requestmethod.get) public string logout(httpsession httpsession){ httpsession.getattribute("manager"); return "success"; } } 方法二：使用sessionattributes [java] view plain copy print? @controller @sessionattributes("manager") public class managercontroller { @resource private managerservice managerserviceimpl; @requestmapping(value = "manager/login.do",method = requestmethod.get) public modelandview login(managermodel managermodel,modelmap model){ managermodel manager = managerserviceimpl.getmanager(managermodel); if(manager!=null){ manager.setpassword(""); model.addattribute("manager", manager); return new modelandview(new redirectview("../admin/main.jsp")); }else{ return new modelandview(new redirectview("../admin/login.jsp")); } } @requestmapping(value = "manager/logout.do",method = requestmethod.get) public string logout(@modelattribute("manager")managermodel managermodel){ return "success"; } }