首页 \ 问答 \ Spring Boot不使用UserDetailsService(Spring Boot Not Using UserDetailsService)

Spring Boot不使用UserDetailsService(Spring Boot Not Using UserDetailsService)

我正在尝试使用注释为JPA身份验证配置Spring Boot 1.2.5应用程序,它似乎总是使用内存提供程序。

应用程序:

@EnableWebMvc
@ComponentScan
@EnableAutoConfiguration
@SpringBootApplication
public class ClubBooksApplication {

  protected final Logger logger = LoggerFactory.getLogger(getClass());

  public static void main(String[] args) {
    SpringApplication.run(ClubBooksApplication.class, args);
  }

}

WebSecurityConfigurerAdapter 。 我玩过订单,但似乎总是配置内存提供商。 我觉得我可能错过了一段配置,但这种模式与我在搜索中找到的样本相匹配。

@Configuration
@EnableWebMvcSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
//@Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)   // After in memory
//@Order(SecurityProperties.IGNORED_ORDER)           // Before in memory
//@Order(SecurityProperties.BASIC_AUTH_ORDER)        // Not unique
@Order(SecurityProperties.BASIC_AUTH_ORDER - 50)   // Before in memory
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

  private  PasswordEncoder    passwordEncoder;
  protected final Logger      logger = LoggerFactory.getLogger(getClass());

  @Autowired
  private UserDetailsService userDetailsService;

  @Override
  protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    logger.info(String.format("configure AuthenticationManagerBuilder: %s", userDetailsService));

    super.configure(auth);

    auth.userDetailsService(userDetailsService)
        .passwordEncoder(passwordEncoder());
  }

这是日志输出。 在显示生成的密码之前,您可以看到它正在配置UserDetailsService 。 基于我对代码的挖掘,如果没有配置其他提供程序但是设置UserDetailsService配置DAO提供程序,它似乎只配置内存提供程序。

2015-08-20 11:19:24.187  INFO 42332 --- [ost-startStop-1] yConfig$$EnhancerBySpringCGLIB$$c647e8e8 : configure AuthenticationManagerBuilder: com.wstrater.server.clubBooks.server.service.impl.UserLoginDetailServiceImpl@46f0f40a
2015-08-20 11:19:24.226  INFO 42332 --- [ost-startStop-1] yConfig$$EnhancerBySpringCGLIB$$c647e8e8 : passwordEncoder
2015-08-20 11:19:24.410  INFO 42332 --- [ost-startStop-1] b.a.s.AuthenticationManagerConfiguration : 

Using default security password: 838a7ab0-3bd0-4e87-94ca-de2dfd34b965

2015-08-20 11:19:24.526  INFO 42332 --- [ost-startStop-1] yConfig$$EnhancerBySpringCGLIB$$c647e8e8 : configure HttpSecurity

我在应用程序中包含了Actuator,当我尝试访问http://localhost:8080/mappings ,尽管配置了基于表单的身份验证,但我仍然提示我使用BasicAuth 。 用户/生成的密码适用于BasicAuth 。 我的UserDetailsService实现未被调用。

配置HttpSecurity 。 在创建内存提供程序并显示生成的密码后调用此方法,因此我怀疑它是否会影响提供程序配置。 我发现有趣的一件事是,尽管指定了formLogin()但仍然提示我使用BasicAuth 。 我提出这个问题,因为我也遇到了映射控制器的问题。 我认为这是无关的,但我知道什么。

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    logger.info("configure HttpSecurity");

    super.configure(http);

    http.authorizeRequests()
        .antMatchers("/", "/public/**")
          .permitAll()
        .antMatchers("/rest/**")
          .authenticated()
        .antMatchers("/web/**")
          .authenticated()
        .anyRequest()
          .fullyAuthenticated();

    http.formLogin()
          .loginPage("/login")
          .usernameParameter("userName")
          .passwordParameter("password")
          .failureUrl("/login?error")
          .defaultSuccessUrl("/web/")
          .permitAll()
        .and().logout()
          .logoutUrl("/logout")
          .logoutSuccessUrl("/")
          .permitAll()
        .and().rememberMe();
  }

我可以看到我的控制器是由Spring加载的,因为它们是使用http://localhost:8080/beans列出的,但我没有看到http://localhost:8080/mappings

我的登录控制器相当简单。

@Controller
@Path("/login")
public class LoginWebController {

  @GET
  public ModelAndView getLoginPage(@RequestParam(required = false) String error) {
    return new ModelAndView("login", "error", error);
  }

}

谢谢,韦斯。


I am trying to configure a Spring Boot 1.2.5 application for JPA authentication using annotations and it appears to be always using the in-memory provider.

The application:

@EnableWebMvc
@ComponentScan
@EnableAutoConfiguration
@SpringBootApplication
public class ClubBooksApplication {

  protected final Logger logger = LoggerFactory.getLogger(getClass());

  public static void main(String[] args) {
    SpringApplication.run(ClubBooksApplication.class, args);
  }

}

The WebSecurityConfigurerAdapter. I have played around with the order but it always seems to configure the in-memory provider. I feel like I could be missing a piece of configuration but this pattern matches the samples I found in my searches.

@Configuration
@EnableWebMvcSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
//@Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)   // After in memory
//@Order(SecurityProperties.IGNORED_ORDER)           // Before in memory
//@Order(SecurityProperties.BASIC_AUTH_ORDER)        // Not unique
@Order(SecurityProperties.BASIC_AUTH_ORDER - 50)   // Before in memory
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

  private  PasswordEncoder    passwordEncoder;
  protected final Logger      logger = LoggerFactory.getLogger(getClass());

  @Autowired
  private UserDetailsService userDetailsService;

  @Override
  protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    logger.info(String.format("configure AuthenticationManagerBuilder: %s", userDetailsService));

    super.configure(auth);

    auth.userDetailsService(userDetailsService)
        .passwordEncoder(passwordEncoder());
  }

Here is the log output. You can see it is configuring the UserDetailsService before displaying the generated password. Based on my digging into the code, it appears to only configure the in-memory provider if no other provider is configured but setting the UserDetailsService configures a DAO provider.

2015-08-20 11:19:24.187  INFO 42332 --- [ost-startStop-1] yConfig$$EnhancerBySpringCGLIB$$c647e8e8 : configure AuthenticationManagerBuilder: com.wstrater.server.clubBooks.server.service.impl.UserLoginDetailServiceImpl@46f0f40a
2015-08-20 11:19:24.226  INFO 42332 --- [ost-startStop-1] yConfig$$EnhancerBySpringCGLIB$$c647e8e8 : passwordEncoder
2015-08-20 11:19:24.410  INFO 42332 --- [ost-startStop-1] b.a.s.AuthenticationManagerConfiguration : 

Using default security password: 838a7ab0-3bd0-4e87-94ca-de2dfd34b965

2015-08-20 11:19:24.526  INFO 42332 --- [ost-startStop-1] yConfig$$EnhancerBySpringCGLIB$$c647e8e8 : configure HttpSecurity

I have included Actuator in the app and when I try to access http://localhost:8080/mappings, I am prompted with BasicAuth despite configuring form based authentication. The user/generated password works for BasicAuth. My UserDetailsService implementation is not called.

Configuring HttpSecurity. This method is called after the in-memory provider is created and the generated password is displayed so I doubt it impacts the provider configuration. The one thing I find interesting is that I get prompted for BasicAuth despite specifying formLogin(). I bring this up since I am also having issues with mapping my controllers. I think it is unrelated but what do I know.

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    logger.info("configure HttpSecurity");

    super.configure(http);

    http.authorizeRequests()
        .antMatchers("/", "/public/**")
          .permitAll()
        .antMatchers("/rest/**")
          .authenticated()
        .antMatchers("/web/**")
          .authenticated()
        .anyRequest()
          .fullyAuthenticated();

    http.formLogin()
          .loginPage("/login")
          .usernameParameter("userName")
          .passwordParameter("password")
          .failureUrl("/login?error")
          .defaultSuccessUrl("/web/")
          .permitAll()
        .and().logout()
          .logoutUrl("/logout")
          .logoutSuccessUrl("/")
          .permitAll()
        .and().rememberMe();
  }

I can see my controllers are being loaded by Spring since they are listed using http://localhost:8080/beans but I do not see the mappings in http://localhost:8080/mappings.

My login controller is rather simple.

@Controller
@Path("/login")
public class LoginWebController {

  @GET
  public ModelAndView getLoginPage(@RequestParam(required = false) String error) {
    return new ModelAndView("login", "error", error);
  }

}

Thanks, Wes.


原文:https://stackoverflow.com/questions/32122755
更新时间:2022-08-31 10:08

最满意答案

修复了明显的错误后,它为我编译好。

public delegate Y Function<X,Y>(X x);

public class Map<X,Y>
{
    private Function<X,Y> F;

    public Map(Function<X,Y> f)
    {
        F = f;
    }

    public ICollection<Y> Over(ICollection<X> xs){
        List<Y> ys = new List<Y>();
        foreach (X x in xs)
        {
            X x2 = x;//ys.Add(F(x));
        }
        return ys;
    }
}

After fixing the obvious errors it compiles fine for me.

public delegate Y Function<X,Y>(X x);

public class Map<X,Y>
{
    private Function<X,Y> F;

    public Map(Function<X,Y> f)
    {
        F = f;
    }

    public ICollection<Y> Over(ICollection<X> xs){
        List<Y> ys = new List<Y>();
        foreach (X x in xs)
        {
            X x2 = x;//ys.Add(F(x));
        }
        return ys;
    }
}

相关问答

更多

相关文章

更多

最新问答

更多
  • 您如何使用git diff文件,并将其应用于同一存储库的副本的本地分支?(How do you take a git diff file, and apply it to a local branch that is a copy of the same repository?)
  • 将长浮点值剪切为2个小数点并复制到字符数组(Cut Long Float Value to 2 decimal points and copy to Character Array)
  • OctoberCMS侧边栏不呈现(OctoberCMS Sidebar not rendering)
  • 页面加载后对象是否有资格进行垃圾回收?(Are objects eligible for garbage collection after the page loads?)
  • codeigniter中的语言不能按预期工作(language in codeigniter doesn' t work as expected)
  • 在计算机拍照在哪里进入
  • 使用cin.get()从c ++中的输入流中丢弃不需要的字符(Using cin.get() to discard unwanted characters from the input stream in c++)
  • No for循环将在for循环中运行。(No for loop will run inside for loop. Testing for primes)
  • 单页应用程序:页面重新加载(Single Page Application: page reload)
  • 在循环中选择具有相似模式的列名称(Selecting Column Name With Similar Pattern in a Loop)
  • System.StackOverflow错误(System.StackOverflow error)
  • KnockoutJS未在嵌套模板上应用beforeRemove和afterAdd(KnockoutJS not applying beforeRemove and afterAdd on nested templates)
  • 散列包括方法和/或嵌套属性(Hash include methods and/or nested attributes)
  • android - 如何避免使用Samsung RFS文件系统延迟/冻结?(android - how to avoid lag/freezes with Samsung RFS filesystem?)
  • TensorFlow:基于索引列表创建新张量(TensorFlow: Create a new tensor based on list of indices)
  • 企业安全培训的各项内容
  • 错误:RPC失败;(error: RPC failed; curl transfer closed with outstanding read data remaining)
  • C#类名中允许哪些字符?(What characters are allowed in C# class name?)
  • NumPy:将int64值存储在np.array中并使用dtype float64并将其转换回整数是否安全?(NumPy: Is it safe to store an int64 value in an np.array with dtype float64 and later convert it back to integer?)
  • 注销后如何隐藏导航portlet?(How to hide navigation portlet after logout?)
  • 将多个行和可变行移动到列(moving multiple and variable rows to columns)
  • 提交表单时忽略基础href,而不使用Javascript(ignore base href when submitting form, without using Javascript)
  • 对setOnInfoWindowClickListener的意图(Intent on setOnInfoWindowClickListener)
  • Angular $资源不会改变方法(Angular $resource doesn't change method)
  • 在Angular 5中不是一个函数(is not a function in Angular 5)
  • 如何配置Composite C1以将.m和桌面作为同一站点提供服务(How to configure Composite C1 to serve .m and desktop as the same site)
  • 不适用:悬停在悬停时:在元素之前[复制](Don't apply :hover when hovering on :before element [duplicate])
  • 常见的python rpc和cli接口(Common python rpc and cli interface)
  • Mysql DB单个字段匹配多个其他字段(Mysql DB single field matching to multiple other fields)
  • 产品页面上的Magento Up出售对齐问题(Magento Up sell alignment issue on the products page)