Spring Security 3.1(Spring Security 3.1)

 有人可以帮我这个吗？ 感谢你的帮助。 
 
 我使用Spring security 3.1和create-session =“stateless”选项。 抛出“InsufficientAuthenticationException”：“访问此资源需要完全身份验证”ExceptionTranslationFilter例外。 
 
 我无法理解我做错了什么以及为什么我得到这个例外。 由于此异常表明凭据不正确，但我可以看到凭据正在通过请求。但是我的401未经授权 
 
 事实是用户能够正确登录并且我也在控制台上收到消息。 但由于访问被拒绝异常，它再次被重定向到登录页面。 
 
 我在这里放置代码 
 
 弹簧security.xml文件 
 
<http entry-point-ref="negotiateSecurityFilterEntryPoint"
         create-session="stateless" >
        <intercept-url pattern="/user/loginuser"  access="ROLE_ANONYMOUS"/> 
        <intercept-url pattern="/**" access="ROLE_USER"/>   
         <custom-filter ref="securityContextPersistenceFilter"          after="BASIC_AUTH_FILTER" />
        <custom-filter ref="ldapAuthFilter" position="CAS_FILTER" />                
        <custom-filter ref="databaseAuthFilter" position="FORM_LOGIN_FILTER" />
</http> 


<bean id="securityContextPersistenceFilter" class="org.springframework.security.web.context.SecurityContextPersistenceFilter">
        <property name='securityContextRepository'>
            <bean class='org.springframework.security.web.context.HttpSessionSecurityContextRepository'>
                <property name='allowSessionCreation' value='false' />
            </bean>
        </property>
    </bean>

Could someone help me on this. appreciate your help.
 
I am using Spring security 3.1 with create-session="stateless" option. Which throwing "InsufficientAuthenticationException" : "Full authentication is required to access this resource" exception of ExceptionTranslationFilter.
 
I am not able to understand what I am doing wrong and why I am getting this exception . As this exception stated that the credentials are not proper but I can see the credentials are going through request.Still I am getting 401 unauthorized 
 
Fact is that the user is able to login properly & I get the message on console also. But again it is redirecting to login page due to access denied exception.
 
Here I am putting the code 
 
Spring-Security.xml
 
<http entry-point-ref="negotiateSecurityFilterEntryPoint"
         create-session="stateless" >
        <intercept-url pattern="/user/loginuser"  access="ROLE_ANONYMOUS"/> 
        <intercept-url pattern="/**" access="ROLE_USER"/>   
         <custom-filter ref="securityContextPersistenceFilter"          after="BASIC_AUTH_FILTER" />
        <custom-filter ref="ldapAuthFilter" position="CAS_FILTER" />                
        <custom-filter ref="databaseAuthFilter" position="FORM_LOGIN_FILTER" />
</http> 


<bean id="securityContextPersistenceFilter" class="org.springframework.security.web.context.SecurityContextPersistenceFilter">
        <property name='securityContextRepository'>
            <bean class='org.springframework.security.web.context.HttpSessionSecurityContextRepository'>
                <property name='allowSessionCreation' value='false' />
            </bean>
        </property>
    </bean>

原文：https://stackoverflow.com/questions/38521027