## 請求接口如下 ``` @RequestMapping("login") @ResponseBody public DTO login(String userName,String password){ //密碼加密 try{ UsernamePasswordToken token = new UsernamePasswordToken(userName,password); Subject subject = SecurityUtils.getSubject(); subject.login(token); Collection<Session> sessions = redisSessionDAO.getActiveSessions(); if (subject.isAuthenticated()) { for (Session session : sessions) { //方法一、當第二次登錄時，給出提示“用戶已登錄”，停留在登錄頁面 if (userName.equals(session.getAttribute("USERNAME"))) { subject.logout(); msg="該賬號已登錄"; } } } if(StringUtils.isNotBlank(msg)){ subject.getSession().setTimeout(3600000L);//超時時間 User user = (User)subject.getPrincipal(); subject.getSession().setAttribute(Constant.USERSESSION,user ); subject.getSession().setAttribute(Constant.USERNAME, phone); } }catch (IncorrectCredentialsException ice) { msg="密碼錯誤"; } catch (UnknownAccountException uae) { msg="該賬號不存在"; } catch (LockedAccountException e) { msg="該賬號已被凍結"; } catch (ExcessiveAttemptsException eae) { msg="服務器內部錯誤"; } catch (RuntimeException e) { e.printStackTrace(); } return new DTO(msg); } ```