在URL中隐藏spring会话bean参数值

Question

目标：隐藏页面URL中的键/值对。E、 g.-http://abc.xyz.com/nav/book?clientID=390

我不希望clientID等在URL中可见（安全原因）。我知道http是一种无状态协议。

我尝试过使用HttpSession、Spring@SessionAttributes，目前使用的是Spring“session”作用域bean-

@Component
@Scope(value = "session", proxyMode = ScopedProxyMode.TARGET_CLASS)
public class UserSession {

    private String clientID;
    private String fundID;
    private String navDate;

    public String getClientID() {
        return clientID;
    }
    public void setClientID(String clientID) {
        this.clientID = clientID;
    }
    public String getFundID() {
        return fundID;
    }
    public void setFundID(String fundID) {
        this.fundID = fundID;
    }
    public String getNavDate() {
        return navDate;
    }
    public void setNavDate(String navDate) {
        this.navDate = navDate;
    }
}

并在我的控制器中使用-

@Controller
@SessionAttributes(value = {"client","fund","nav"})
public class HomeController {
    @Autowired
    private UserSession userSession;

    @RequestMapping(value = "abc", method = RequestMethod.GET)
    public ModelAndView navWorkbook(Model model, HttpServletRequest request, HttpServletResponse response,
            @RequestParam(required = false) String clientID,
            @RequestParam(required = false) String fundID,
            @RequestParam(required = false) String navDate) {
        ModelAndView modelAndView = new ModelAndView("abcd");
        .
        .
        .
        userSession.setClientID(clientID);
        userSession.setFundID(fundID);
        userSession.setNavDate(navDate);
        modelAndView.addObject("userSession", userSession);
        return modelAndView;
    }
}

我是否无法隐藏URL中显示的Springbean属性名称/值？

谢谢各位

Answer 1

在请求映射中，必须使用RequestMethod。POST而不是RequestMethod。获取。

 @RequestMapping(value = "abc", method = RequestMethod.POST)