AbstractAuthenticationProcessingFilter

x_lcw

已于 2022-09-13 14:00:07 修改

阅读量212

点赞数

分类专栏： SpringSecurity 文章标签： servlet java 前端 SpringSecurity

于 2022-09-12 00:01:29 首次发布

本文链接：https://blog.csdn.net/qq_53318060/article/details/126811196

版权

SpringSecurity 专栏收录该内容

5 篇文章 1 订阅

订阅专栏

AbstractAuthenticationProcessingFilter.class

    private void doFilter(HttpServletRequest request, HttpServletResponse response, FilterChain chain){
    	// 是否需要认证
        if (!this.requiresAuthentication(request, response)) {
            chain.doFilter(request, response);
        } else {
            try {
            // 调用子类UsernamePasswordAuthenticationFilter中的attemptAuthentication方法
                Authentication authenticationResult = this.attemptAuthentication(request, response);
                // 认证失败, 拐弯回去
                if (authenticationResult == null) {
                    return;
                }
                // 成功认证后
				// 调用本类中的successfulAuthentication
                this.successfulAuthentication(request, response, chain, authenticationResult);
            } catch (InternalAuthenticationServiceException var5) {
                this.logger.error("An internal error occurred while trying to authenticate the user.", var5);
                this.unsuccessfulAuthentication(request, response, var5);
            } catch (AuthenticationException var6) {
                this.unsuccessfulAuthentication(request, response, var6);
            }

        }
    }

    protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response, FilterChain chain, Authentication authResult){
    // 类似于cookie,session
    // 保存当前访问者的信息
        SecurityContextHolder.getContext().setAuthentication(authResult);
        if (this.logger.isDebugEnabled()) {
            this.logger.debug(LogMessage.format("Set SecurityContextHolder to %s", authResult));
        }

        this.rememberMeServices.loginSuccess(request, response, authResult);
        if (this.eventPublisher != null) {
            this.eventPublisher.publishEvent(new InteractiveAuthenticationSuccessEvent(authResult, this.getClass()));
        }

        this.successHandler.onAuthenticationSuccess(request, response, authResult);
    }