代码登录spring security并且获取jsessionId

最新推荐文章于 2024-04-12 08:25:51 发布

weixin_30709061

最新推荐文章于 2024-04-12 08:25:51 发布

阅读量2.2k

点赞数 1

文章标签： java javascript json ViewUI

原文链接：http://www.cnblogs.com/yizw/p/10483918.html

版权

@Autowired
@Qualifier("org.springframework.security.authenticationManager")
protected AuthenticationManager authenticationManager;

@RequestMapping(value = "/test")
public ModelAndView test(HttpServletRequest request,HttpServletResponse response){

//跳转首页
ModelAndView view = new ModelAndView("pages/index");

//使用用户名、密码生成可用AuthenticationToken(用户名:test,密码:123456)
UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken("test", "123456");

//设置authenticationToken的details，主要获取请求信息
authenticationToken.setDetails(new WebAuthenticationDetails(request));

//使用authenticationManager接口中的anthenticate进行springsecurity认证
Authentication authenticatedUser = authenticationManager.authenticate(authenticationToken);

//将认证信息放入安全上下文中(此处为个人理解)
SecurityContextHolder.getContext().setAuthentication(authenticatedUser);

//如果没有session，生成一个session并设置当前的securityContext
request.getSession().setAttribute(HttpSessionSecurityContextRepository.SPRING_SECURITY_CONTEXT_KEY, SecurityContextHolder.getContext());

//此sessionId为响应给浏览器的jsessionId(可在浏览器中查看cookie中的jsessionId与此值是否相等)
String sessionId = request.getSession().getId();

System.out.println(jsessionId);
return view;
}

转载于:https://www.cnblogs.com/yizw/p/10483918.html