spring security 找不到用户信息的原因

折腾了两天,终于解决了,spring security 的用户信息终于可以取出来了.网上的解决办法都没有效果.spring security 2.0.4 把用户信息存入本地线程,通过SecurityContextHolder来获取,第一次请求完成后,则后清空用户信息 如源码:

finally {
            // This is the only place in this class where SecurityContextHolder.getContext() is called
            SecurityContext contextAfterChainExecution = SecurityContextHolder.getContext();

            // Crucial removal of SecurityContextHolder contents - do this before anything else.
            SecurityContextHolder.clearContext();

            request.removeAttribute(FILTER_APPLIED);
·········
}

因为我的用的是webwork的action跳转页面,所以又是一个请求这样的话,在action中的方法中就无法取得用户信息了,解决办法就是:写一个servlet来取出用户信息,然后跳转到新页面把用户信息传递过去就样就能实现目的.

 

如servlet:

/**
 *
 */
package com.ztl.book3un.usermanager.user.security;

import java.io.IOException;
import java.util.Map;

import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import com.opensymphony.xwork.ActionContext;
import com.ztl.book3un.usermanager.domain.UserLogin;

/**
 * @author:李剑
 * @创作时间：2009-5-27
 * @E-mail:[e-mail]
 * @说明：
 * @最后一次修改时间：
 * @修改人：
 */
public class LoginToIndex extends HttpServlet
{

 private static final long serialVersionUID = -2695430823076562265L;

 /*
  * (non-Javadoc)
  *
  * @see javax.servlet.http.HttpServlet#doGet(javax.servlet.http.HttpServletRequest,
  *      javax.servlet.http.HttpServletResponse)
  */
 @Override
 protected void doGet(HttpServletRequest request,
   HttpServletResponse response) throws ServletException, IOException
 {
  // 得到当前用户
  //String sessionCode = "abc";//模拟设置
//  String code = (String) request.getAttribute("code");
//  System.out.println(code);
//  if(sessionCode.equals(code)){
//   System.out.println("对不起,你的验证码不正确!");
//  }
  
  
  UserLogin ul = SecurityUserHolder.getUser();
  
  String userName = ul.getUsername();
  String password = ul.getPassword();
  
  //request.setAttribute("ul", ul);
//  request.setAttribute("userName", userName);
//  request.setAttribute("password", password);
  // 跳转到index.jsp页面
  
  String path = request.getContextPath();
  String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
  /*RequestDispatcher dispatcher = request
    .getRequestDispatcher("/index.ztl?m=login");
  dispatcher.forward(request, response);*/
  response.sendRedirect(basePath+"index.ztl?m=login&userName="+userName+"&password="+password);
 }

 /*
  * (non-Javadoc)
  *
  * @see javax.servlet.http.HttpServlet#doPost(javax.servlet.http.HttpServletRequest,
  *      javax.servlet.http.HttpServletResponse)
  */
 @Override
 protected void doPost(HttpServletRequest request,
   HttpServletResponse response) throws ServletException, IOException
 {
  doGet(request, response);
 }
}

 

接下来就是你原来项目的操作了,你应该怎么取值怎么取值了.呵呵.