spring security 找不到用户信息的原因
折腾了两天,终于解决了,spring security 的用户信息终于可以取出来了.网上的解决办法都没有效果.spring security 2.0.4 把用户信息存入本地线程,通过SecurityContextHolder来获取,第一次请求完成后,则后清空用户信息 如源码:[*]finally {
[*] // This is the only place in this class where SecurityContextHolder.getContext() is called
[*] SecurityContext contextAfterChainExecution = SecurityContextHolder.getContext();
[*]
[*] // Crucial removal of SecurityContextHolder contents - do this before anything else.
[*] SecurityContextHolder.clearContext();
[*]
[*] request.removeAttribute(FILTER_APPLIED);
[*]·········
[*]}
因为我的用的是webwork的action跳转页面,所以又是一个请求这样的话,在action中的方法中就无法取得用户信息了,解决办法就是:写一个servlet来取出用户信息,然后跳转到新页面把用户信息传递过去就样就能实现目的.
如servlet:
/**
*
*/
package com.ztl.book3un.usermanager.user.security;
import java.io.IOException;
import java.util.Map;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import com.opensymphony.xwork.ActionContext;
import com.ztl.book3un.usermanager.domain.UserLogin;
/**
* @author:李剑
* @创作时间：2009-5-27
* @E-mail:lijian_nhy@126.com
* @说明：
* @最后一次修改时间：
* @修改人：
*/
public class LoginToIndex extends HttpServlet
{
private static final long serialVersionUID = -2695430823076562265L;
/*
* (non-Javadoc)
*
* @see javax.servlet.http.HttpServlet#doGet(javax.servlet.http.HttpServletRequest,
* javax.servlet.http.HttpServletResponse)
*/
@Override
protected void doGet(HttpServletRequest request,
HttpServletResponse response) throws ServletException, IOException
{
// 得到当前用户
//String sessionCode = "abc";//模拟设置
// String code = (String) request.getAttribute("code");
// System.out.println(code);
// if(sessionCode.equals(code)){
// System.out.println("对不起,你的验证码不正确!");
// }
UserLogin ul = SecurityUserHolder.getUser();
String userName = ul.getUsername();
String password = ul.getPassword();
//request.setAttribute("ul", ul);
// request.setAttribute("userName", userName);
// request.setAttribute("password", password);
// 跳转到index.jsp页面
String path = request.getContextPath();
String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
/*RequestDispatcher dispatcher = request
.getRequestDispatcher("/index.ztl?m=login");
dispatcher.forward(request, response);*/
response.sendRedirect(basePath+"index.ztl?m=login&userName="+userName+"&password="+password);
}
/*
* (non-Javadoc)
*
* @see javax.servlet.http.HttpServlet#doPost(javax.servlet.http.HttpServletRequest,
* javax.servlet.http.HttpServletResponse)
*/
@Override
protected void doPost(HttpServletRequest request,
HttpServletResponse response) throws ServletException, IOException
{
doGet(request, response);
}
}
接下来就是你原来项目的操作了,你应该怎么取值怎么取值了.呵呵.
页:
[1]