自定义acegi的Authentication对象

项目中有时需要自己定义一下acegi的Authentication对象,经过分析源码,现给出实现代码如下所示:

@Override
    public String execute() throws Exception {
        username="admin001";
        password="password";
        UsernamePasswordAuthenticationToken authen = new UsernamePasswordAuthenticationToken(username, password);
        HttpServletRequest request = ServletActionContext.getRequest();
        HttpServletResponse response = ServletActionContext.getResponse();
        // 保存用户名到session里
        request.getSession().setAttribute(ACEGI_SECURITY_LAST_USERNAME_KEY, username);
        WebAuthenticationDetails webdetails=new WebAuthenticationDetails(request);
        //注意:这里setDetails的对象一定要是WebAuthenticationDetails
        authen.setDetails(webdetails);
        //这里验证不通过会返回null对象
        Authentication auth1=authenticationManager.doAuthentication(authen);
        SecurityContextHolder.getContext().setAuthentication(auth1);
        rememberMeServices.loginSuccess(request, response, auth1);
        if(auth1.getDetails()!=null ){
            System.out.println("auth1details");
            if(auth1.getDetails() instanceof WebAuthenticationDetails){
                WebAuthenticationDetails dt=(WebAuthenticationDetails)auth1.getDetails();
                System.out.println(dt.getSessionId());
            }
        }
        System.out.println("认证是否通过: "+auth1.isAuthenticated());
        Object principal=SecurityContextHolder.getContext().getAuthentication().getPrincipal();
        if(principal instanceof UserDetails){
            UserDetails user=(UserDetails)principal;
            if(this.userCache.getUserFromCache(user.getUsername())!=null){
                System.out.println("usercache is not null");
            }else{
                this.userCache.putUserInCache(user);
            }
        }
        if (UserSecurty.getUserDetails() != null) {
            System.out.println(UserSecurty.getUserName());
            System.out.println(UserSecurty.getUserDetails().getPassword());
            System.out.println(UserSecurty.getUserDetails().getAuthorities());
            for(GrantedAuthority authority:UserSecurty.getUserDetails().getAuthorities()){
                System.out.println("权限: "+authority);
            }
        }
        return NONE;

    }

分享到：

hibernate中对象状态的判定是根据状态码进 ... | webwork上传正解

• 2007-05-21 14:43
• 浏览 2383
• 评论(0)
• 论坛回复 / 浏览 (0 / 3171)
• 分类:企业架构
• 查看更多