Spring Security 取Session中的值和修改userDetails(轉)

阿新 • • 發佈：2019-02-11

1.在session中取得spring security的登入使用者名稱如下

${session.SPRING_SECURITY_CONTEXT.authentication.principal.username}

spring security 把SPRING_SECURITY_CONTEXT 放入了session 沒有直接把username 放進去。

下面一段程式碼主要描述的是session中的存的變數

view plaincopy to clipboardprint?
存跳轉時候的URL
session {SPRING_SECURITY_SAVED_REQUEST_KEY=SavedRequest[http://localhost:8080/AVerPortal/resourceAction/resourceIndex.action]}

存的是登入成功時候session中存的資訊
session {SPRING_SECURITY_C

[email protected]: RemoteIpAddress: 127.0.0.1; SessionId: AE56E8925195DFF4C50ABD384574CCEA; Granted Authorities: ROLE_ADMIN Assertion: [email protected] Credentials (Service/Proxy Ticket): ST-3-1lX3acgZ6HNgmhvjXuxB-cas, userId=2, userName=test}
存跳轉時候的URL
session {SPRING_SECURITY_SAVED_REQUEST_KEY=SavedRequest[http://localhost:8080/AVerPortal/resourceAction/resourceIndex.action]}

存的是登入成功時候session中存的資訊
session {SPRING_SECURITY_C

[email protected]87b16984: Authentication: or[email protected]87b16984: Principal: [email protected]: Username: test; Password: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: true; Granted Authorities: ROLE_ADMIN; Password: [PROTECTED]; Authenticated: true; Details: [email protected]: RemoteIpAddress: 127.0.0.1; SessionId: AE56E8925195DFF4C50ABD384574CCEA; Granted Authorities: ROLE_ADMIN Assertion: [email protected] Credentials (Service/Proxy Ticket): ST-3-1lX3acgZ6HNgmhvjXuxB-cas, userId=2, userName=test}

2.在頁面端用tag獲取

<%@ taglib prefix='security' uri='http://www.springframework.org/security/tags'%> 

<security:authentication property="principal.username"></security:authentication>

或者

<security:authorize ifAllGranted="ROLE_ADMIN">

 <security:authentication property="principal.username"></security:authentication> 

</security:authorize>

或者取session中的值

#session.SPRING_SECURITY_CONTEXT.authentication.principal.username等同於

3.在後臺獲取

UserDetails userDetails = (UserDetails) SecurityContextHolder.getContext()
    .getAuthentication()
    .getPrincipal();


userDetails.getUsername()

想要獲取更多的資訊得擴充套件userDetails的預設實現類user類和UserDetailsService介面

由於springsecurity是把整個user資訊放入session中的即：session.SPRING_SECURITY_CONTEXT.authentication.principal

這個就是代表著user物件

因此我做了擴充套件增加user裡的資訊加上userId

程式碼如下：擴充套件user


 expand sourceview plaincopy to clipboardprint?
package com.avi.casExtends;   

import org.springframework.security.GrantedAuthority;   
import org.springframework.security.userdetails.User;   

public class UserInfo extends User{   
    private static final long serialVersionUID = 1L;   

    private String userId;   

    @SuppressWarnings("deprecation")   
    public UserInfo(String username, String password, boolean enabled, GrantedAuthority[] authorities)   
        throws IllegalArgumentException {   
        super(username,password, enabled, authorities);   
    }   

    public String getUserId() {   
        return userId;   
    }   

    public void setUserId(String userId) {   
        this.userId = userId;   
    }   

    public static long getSerialVersionUID() {   
        return serialVersionUID;   
    }   


}  
package com.avi.casExtends;

import org.springframework.security.GrantedAuthority;
import org.springframework.security.userdetails.User;

public class UserInfo extends User{
 private static final long serialVersionUID = 1L;

    private String userId;

    @SuppressWarnings("deprecation")
 public UserInfo(String username, String password, boolean enabled, GrantedAuthority[] authorities)
        throws IllegalArgumentException {
        super(username,password, enabled, authorities);
    }

 public String getUserId() {
  return userId;
 }

 public void setUserId(String userId) {
  this.userId = userId;
 }

 public static long getSerialVersionUID() {
  return serialVersionUID;
 }


}


實現userDetailsservice介面

+ expand sourceview plaincopy to clipboardprint?
package com.avi.casExtends;   

import java.util.HashMap;   
import java.util.List;   
import java.util.Map;   

import org.springframework.dao.DataAccessException;   
import org.springframework.security.GrantedAuthority;   
import org.springframework.security.GrantedAuthorityImpl;   
import org.springframework.security.userdetails.UserDetails;   
import org.springframework.security.userdetails.UserDetailsService;   
import org.springframework.security.userdetails.UsernameNotFoundException;   

import com.avi.dao.AccountDao;   
import com.avi.data.User;   

public class UserInfoService implements UserDetailsService{   

    private AccountDao accountDao;   
    private Map<String, UserInfo> userMap = null;   

    public UserInfoService() {   


    }   
    public void fillMap(){   
         userMap = new HashMap<String, UserInfo>();   
         List<User> users = accountDao.findAllUsers();   
         UserInfo userInfo = null;   
         for(User user:users){   
            userInfo = new UserInfo(user.getUserName(),user.getPassword(),true,new GrantedAuthority[]{   
                new GrantedAuthorityImpl(user.getRole()),   
            });   
            userInfo.setUserId(user.getId().toString());   

             userMap.put(user.getUserName(), userInfo);   
         }   
    }   

    public UserDetails loadUserByUsername(String username)   
        throws UsernameNotFoundException, DataAccessException {   
        if(userMap==null)   
            fillMap();   
        return userMap.get(username);   
    }   

    public AccountDao getAccountDao() {   
        return accountDao;   
    }   

    public void setAccountDao(AccountDao accountDao) {   
        this.accountDao = accountDao;   
    }   

    public Map<String, UserInfo> getUserMap() {   
        return userMap;   
    }   

    public void setUserMap(Map<String, UserInfo> userMap) {   
        this.userMap = userMap;   
    }   

}  
package com.avi.casExtends;

import java.util.HashMap;
import java.util.List;
import java.util.Map;

import org.springframework.dao.DataAccessException;
import org.springframework.security.GrantedAuthority;
import org.springframework.security.GrantedAuthorityImpl;
import org.springframework.security.userdetails.UserDetails;
import org.springframework.security.userdetails.UserDetailsService;
import org.springframework.security.userdetails.UsernameNotFoundException;

import com.avi.dao.AccountDao;
import com.avi.data.User;

public class UserInfoService implements UserDetailsService{

 private AccountDao accountDao;
 private Map<String, UserInfo> userMap = null;

    public UserInfoService() {


    }
    public void fillMap(){
      userMap = new HashMap<String, UserInfo>();
         List<User> users = accountDao.findAllUsers();
         UserInfo userInfo = null;
         for(User user:users){
          userInfo = new UserInfo(user.getUserName(),user.getPassword(),true,new GrantedAuthority[]{
           new GrantedAuthorityImpl(user.getRole()),
          });
          userInfo.setUserId(user.getId().toString());

             userMap.put(user.getUserName(), userInfo);
         }
    }

    public UserDetails loadUserByUsername(String username)
        throws UsernameNotFoundException, DataAccessException {
     if(userMap==null)
      fillMap();
        return userMap.get(username);
    }

 public AccountDao getAccountDao() {
  return accountDao;
 }

 public void setAccountDao(AccountDao accountDao) {
  this.accountDao = accountDao;
 }

 public Map<String, UserInfo> getUserMap() {
  return userMap;
 }

 public void setUserMap(Map<String, UserInfo> userMap) {
  this.userMap = userMap;
 }

}


 private AccountDao accountDao;是注入進來的查資料庫的類

然後修改XML檔案指定所要用到的service

+ expand sourceview plaincopy to clipboardprint?
<authentication-provider user-service-ref="userDetailsService"/>   

<bean id="userDetailsService" class="com.avi.casExtends.UserInfoService" singleton="false">   
        <property name="accountDao" ref="accountDao"/>   
</bean>  
<authentication-provider user-service-ref="userDetailsService"/>

<bean id="userDetailsService" class="com.avi.casExtends.UserInfoService" singleton="false">
  <property name="accountDao" ref="accountDao"/>
</bean> 


${session.SPRING_SECURITY_CONTEXT.authentication.principal.username}

Spring Security 取Session中的值和修改userDetails(轉)

Spring Security 取Session中的值和修改userDetails(轉)

js中取session的值

spring@value取不到值的幾種情況

JS陣列取相同的值和不同的值

讀取屬性值和修改其值

濾波演算法、中值和均值濾波區別

Spring Security 梳理 - session

在hibernate中查詢資料的 session中get 和load的區別:

使用zTree在form表單中提交和修改回顯

在SESSION中增加和刪除

VS2015控制檯中獲取和修改當前字型大小（2-2）

編寫一個程式，對輸入的四個數取最大值和最小值

學習Spring Security的過程中遇到的問題彙總

spring security(八) session 併發，剔除前一個使用者

Matlab影象去噪（中值和均值）

php 在同一個表單中新增和修改資料二

jsp頁面獲取session中值的方式

Session中removeAttribute()和invalidate()的區別？

spring mvc $取不到值的問題

演算法導論學習筆記第九章中值和順序統計

Spring Security 取Session中的值和修改userDetails(轉)

相關推薦