Security 中过滤器的优先级

徐晓伟

已于 2022-10-10 18:50:21 修改

阅读量974

点赞数

分类专栏： Security 文章标签：安全 web安全 java

于 2021-11-14 23:49:55 首次发布

本文链接：https://blog.csdn.net/qq_32596527/article/details/121326071

版权

Security 专栏收录该内容

2 篇文章 0 订阅

订阅专栏

                    
                        
                    
                    类优先级说明
org.springframework.security.web.access.channel.ChannelProcessingFilter100
org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter300
org.springframework.security.web.context.SecurityContextPersistenceFilter400
org.springframework.security.web.header.HeaderWriterFilter500
org.springframework.web.filter.CorsFilter600跨域资源共享
org.springframework.security.web.csrf.CsrfFilter700跨站请求伪造
org.springframework.security.web.authentication.logout.LogoutFilter800注销
org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestRedirectFilter900OAuth2重定向
org.springframework.security.saml2.provider.service.servlet.filter.Saml2WebSsoAuthenticationRequestFilter1000
org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter1100
org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter1200
org.springframework.security.cas.web.CasAuthenticationFilter1300单点登录
org.springframework.security.oauth2.client.web.OAuth2LoginAuthenticationFilter1400OAuth2登录授权
org.springframework.security.saml2.provider.service.servlet.filter.Saml2WebSsoAuthenticationFilter1500
org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter1600用户名密码登录
org.springframework.security.openid.OpenIDAuthenticationFilter1800
org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter1900
org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter2000
org.springframework.security.web.session.ConcurrentSessionFilter2100
org.springframework.security.web.authentication.www.DigestAuthenticationFilter2200
org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationFilter2300
org.springframework.security.web.authentication.www.BasicAuthenticationFilter2400
org.springframework.security.web.savedrequest.RequestCacheAwareFilter2500
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter2600
org.springframework.security.web.jaasapi.JaasApiIntegrationFilter2700
org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter2800
org.springframework.security.web.authentication.AnonymousAuthenticationFilter2900匿名授权
org.springframework.security.oauth2.client.web.OAuth2AuthorizationCodeGrantFilter3000
org.springframework.security.web.session.SessionManagementFilter3100Session管理
org.springframework.security.web.access.ExceptionTranslationFilter3200权限验证失败过滤器
org.springframework.security.web.access.intercept.FilterSecurityInterceptor3300
org.springframework.security.web.authentication.switchuser.SwitchUserFilter3400

                

类	优先级	说明
org.springframework.security.web.access.channel.ChannelProcessingFilter	100
org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter	300
org.springframework.security.web.context.SecurityContextPersistenceFilter	400
org.springframework.security.web.header.HeaderWriterFilter	500
org.springframework.web.filter.CorsFilter	600	跨域资源共享
org.springframework.security.web.csrf.CsrfFilter	700	跨站请求伪造
org.springframework.security.web.authentication.logout.LogoutFilter	800	注销
org.springframework.security.oauth2.client.web.OAuth2AuthorizationRequestRedirectFilter	900	OAuth2重定向
org.springframework.security.saml2.provider.service.servlet.filter.Saml2WebSsoAuthenticationRequestFilter	1000
org.springframework.security.web.authentication.preauth.x509.X509AuthenticationFilter	1100
org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter	1200
org.springframework.security.cas.web.CasAuthenticationFilter	1300	单点登录
org.springframework.security.oauth2.client.web.OAuth2LoginAuthenticationFilter	1400	OAuth2登录授权
org.springframework.security.saml2.provider.service.servlet.filter.Saml2WebSsoAuthenticationFilter	1500
org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter	1600	用户名密码登录
org.springframework.security.openid.OpenIDAuthenticationFilter	1800
org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter	1900
org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter	2000
org.springframework.security.web.session.ConcurrentSessionFilter	2100
org.springframework.security.web.authentication.www.DigestAuthenticationFilter	2200
org.springframework.security.oauth2.server.resource.web.BearerTokenAuthenticationFilter	2300
org.springframework.security.web.authentication.www.BasicAuthenticationFilter	2400
org.springframework.security.web.savedrequest.RequestCacheAwareFilter	2500
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter	2600
org.springframework.security.web.jaasapi.JaasApiIntegrationFilter	2700
org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationFilter	2800
org.springframework.security.web.authentication.AnonymousAuthenticationFilter	2900	匿名授权
org.springframework.security.oauth2.client.web.OAuth2AuthorizationCodeGrantFilter	3000
org.springframework.security.web.session.SessionManagementFilter	3100	Session管理
org.springframework.security.web.access.ExceptionTranslationFilter	3200	权限验证失败过滤器
org.springframework.security.web.access.intercept.FilterSecurityInterceptor	3300
org.springframework.security.web.authentication.switchuser.SwitchUserFilter	3400