將user放到sessinAttributes中

@SessionAttributes(value={"user"})

登陸成功後將獲取的user放到session中

model.addAttribute("user", user); 

退出或登出

/***
     * 安全退出
     * @param sessionStatus
     * @return
     */
    @RequestMapping(value="/safeExit",method = RequestMethod.GET)
    public String safeExit
 
(SessionStatus sessionStatus){
        sessionStatus.setComplete();
        return "redirect:/login.html";
    }