How to change GrantedAuthority dynamically in Spring Security framework

weixin_33884611

于 2011-08-02 17:22:08 发布

阅读量63

点赞数

CC 4.0 BY-SA版权

文章标签： php java

原文链接：http://blog.51cto.com/wanqiufeng/629549

本文介绍如何通过Spring Security的SecurityContext及Authentication API动态更改用户的权限角色。主要步骤包括获取SecurityContext实例，创建包含新权限的新UsernamePasswordAuthenticationToken对象，并使用SecurityContext的setAuthentication方法更新当前认证状态。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

solution is
you could get
SecurityContext instance via SecurityContextHolder
then via
SecurityContext's setAuthentication(Authentication authentication)
UsernamePasswordAuthenticationToken is subclass of Authentication
so,you have to create a new one which contains new aurhorites(roles) via constructor as below shown

SecurityContext 's setAuthentication. (UsernamePasswordAuthenticationToken(Object principal, Object credentials, GrantedAuthority[] authorities) ) ;

reference url:http://forum.springsource.org/showthread.php?52229-How-to-change-GrantedAuthority-dynamically

转载于:https://blog.51cto.com/wanqiufeng/629549