public class Cookie extends Object
添加Cookie
Cookie c = new Cookie(String name,.String value);
response.addCookie(c):void-HttpServletResponse
解析Cookie
request.getCookies():Cookie[]-HttpServletRequest
设置Cookie
编码问题
new Cookie(String name,URLEncoder.encode(String value,"utf-8"));
生存时间
.setMaxAge(int expiry):void-Cookie
.getMaxAge():int-Cookie
路径问题
.setPath(String path):void-Cookie
.getPath():String-Cookie
public interface HttpSession
添加Session
HttpSession s = request.getSession(boolean create);
HttpSession s = request.getSession();
绑定数据
.setAttribute(String name,Object obj):void-HttpSession
.getAttribute(String name):Object-HttpSession
.remoceAttribute(String name)：void-HttpSession
Session超时
<session-config>-service/web.xml
.setMaxInactiveInterval(int seconds)：void-HttoSession
删除session
.invalidate():void-HttpSession
session验证
step1.登录成功之后，在session对象上绑订数据。
step2.当用户访问一些需要保护的资源，进行session验证
