session保存/取登录信息

@ResponseBody
@RequestMapping(value = "login", method = {RequestMethod.GET, RequestMethod.POST})
public Object login(HttpServletRequest request, HttpServletResponse response, String user, String pwd) throws IOException {
    UserInfo userInfo = userService.login(user, pwd);
    if (userInfo == null || userInfo.getId() <= 0) {
        throw new RequestException(Constants.CODE_ERROR_LOGIN);
    }
    UserInfo userExtInfo = userService.queryUserExtInfo(userInfo.getId());
    request.getSession().setAttribute("user_id", userInfo.getId());
    request.getSession().setAttribute("syb", userInfo.getSyb());
    request.getSession().setAttribute("flag", userExtInfo.getFlag());
    //TODO加密
    Cookie cookie = new Cookie("user_id", String.valueOf(userInfo.getId()));
    response.addCookie(cookie);
    return userInfo;
}

@ResponseBody
@RequestMapping(value = "addApprove", method = {RequestMethod.GET, RequestMethod.POST})
public Object insertApprove(HttpSession session, ApproveInfo approveInfo) {
    Integer userId = Integer.parseInt(session.getAttribute("user_id").toString());
    approveInfo.setCuser(userId);
    approveService.addApprove(approveInfo);
    return true;
}