spring security 源码解析

原创

已于 2022-03-30 16:05:46 修改 · 1.8k 阅读

2 ·

CC 4.0 BY-SA版权

文章标签：

#spring

于 2022-03-30 15:31:51 首次发布

最近闲暇时间有空来看下spring secrity ，spring secrity 有很多种方式方式，那么我只看了通过数据库获取信息校验，若有什么不妥请及时告知我

spring secrity 第一个入口是一个filter 拦截请求

public Authentication attemptAuthentication(HttpServletRequest request,
			HttpServletResponse response) throws AuthenticationException {
		if (postOnly && !request.getMethod().equals("POST")) {
			throw new AuthenticationServiceException(
					"Authentication method not supported: " + request.getMethod());
		}

		String username = obtainUsername(request);
		String password = obtainPassword(request);

		if (username == null) {
			username = "";
		}

		if (password == null) {
			password = "";
		}

		username = username.trim();

		UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(
				username, password);

		// Allow subclasses to set the "details" property
		setD