SpringSecurity Autowire解决方法 [英] SpringSecurity Autowire Workaround
本文介绍了SpringSecurity Autowire解决方法的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！
问题描述
很明显， @Autowired 在 UserDetailsService
这是真的吗？如果没有，我如何在UserDetailsService内部自动装配？
Is this true? If not, how can I autowire inside my UserDetailsService?
如果是真的，有没有解决方法？如何执行hibernate查询？
If it is true, are there any work arounds? How can I execute a hibernate query?
我在AccountService中绑定的accountDao工作正常，如果我把它放在应用程序上下文中并在任何其他类中使用它。我在某处看到Autowire无法正常工作，因为 UserDetailsService 超出了spring绑定的范围？并且解决方法是手动将其连接到xml中。如果那是真的吗？这是如何工作的？
The accountDao I bind in AccountService works fine if I put it in the application context and use it in any other class. I read somewhere that Autowire didn't work because the UserDetailsService was out of the scope where spring would bind? and that a work around was to manually wire it in xml. If that's true? How does that work?
帐户服务：
@Service
public class AccountService implements UserDetailsService {
@Autowired
AccountDao accountDao;
@Override
public UserDetails loadUserByUsername(String username)
throws UsernameNotFoundException, DataAccessException {
Account account = accountDao.getUser(username);
if (account == null)
throw new UsernameNotFoundException("No account found for '"
+ username + "'");
return account;
}
@SuppressWarnings("unused")
private GrantedAuthority[] getAuthorities(boolean isAdmin) {
List<GrantedAuthority> authList = new ArrayList<GrantedAuthority>(2);
authList.add(new GrantedAuthorityImpl("ROLE_USER"));
if (isAdmin) {
authList.add(new GrantedAuthorityImpl("ROLE_ADMIN"));
}
return authList.toArray(new GrantedAuthority[] {});
}
public void setAccountDao(AccountDao accountDao) {
this.accountDao = accountDao;
}
安全背景
<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:security="http://www.springframework.org/schema/security"
xsi:schemaLocation="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
http://www.springframework.org/schema/security
http://www.springframework.org/schema/security/spring-security-3.0.xsd">
<!-- This is where we configure Spring-Security -->
<security:http auto-config="true" use-expressions="true"
access-denied-page="/krams/auth/denied">
<security:intercept-url pattern="/" access="permitAll" />
<security:intercept-url pattern="/campaign/*"
access="hasRole('ROLE_ADMIN')" />
<!-- <security:intercept-url pattern="/city/*" access="hasRole('ROLE_ADMIN')"/> -->
<security:intercept-url pattern="/company/*"
access="hasRole('ROLE_ADMIN')" />
<security:intercept-url pattern="/krams/main/common"
access="hasRole('ROLE_USER')" />
<security:form-login login-page="/auth/login"
authentication-failure-url="/auth/login?error=true"
default-target-url="/home" />
<security:logout invalidate-session="true"
logout-success-url="/auth/login" logout-url="/auth/logout" />
</security:http>
<!-- Declare an authentication-manager to use a custom userDetailsService -->
<security:authentication-manager>
<security:authentication-provider
user-service-ref="customUserDetailsService">
<security:password-encoder ref="passwordEncoder" />
</security:authentication-provider>
</security:authentication-manager>
<!-- Use a Md5 encoder since the user's passwords are stored as Md5 in the
database -->
<bean
class="org.springframework.security.authentication.encoding.Md5PasswordEncoder"
id="passwordEncoder" />
<bean id="customUserDetailsService" class="com.groupdealclone.app.service.AccountService" />
<bean id="accountDao" class="com.groupdealclone.app.dao.JdbcAccountDao" />
</beans>
Web.xml
<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
version="2.5">
<context-param>
<param-name>contextConfigLocation</param-name>
<param-value>
/WEB-INF/spring/root-context.xml
/WEB-INF/spring/security-context.xml
</param-value>
</context-param>
<listener>
<listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
</listener>
<servlet>
<servlet-name>appServlet</servlet-name>
<servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
<init-param>
<param-name>contextConfigLocation</param-name>
<param-value>/WEB-INF/spring/appServlet/servlet-context.xml</param-value>
</init-param>
<load-on-startup>1</load-on-startup>
</servlet>
<!--
<servlet-mapping>
<servlet-name>appServlet</servlet-name>
<url-pattern>*.html</url-pattern>
</servlet-mapping>
-->
<servlet-mapping>
<servlet-name>appServlet</servlet-name>
<url-pattern>/</url-pattern>
</servlet-mapping>
<filter>
<filter-name>springSecurityFilterChain</filter-name>
<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
</filter>
<filter-mapping>
<filter-name>springSecurityFilterChain</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
<filter>
<filter-name>hibernateFilter</filter-name>
<filter-class>
org.springframework.orm.jpa.support.OpenEntityManagerInViewFilter
</filter-class>
</filter>
<welcome-file-list>
<welcome-file>
index.jsp
</welcome-file>
</welcome-file-list>
</web-app>
推荐答案
@Autowired 在 UserDetailsService 实现中工作得很好。其他一些必须是错误的：您注入的界面可能不在扫描包中，或其他东西。
@Autowired works just fine inside an UserDetailsService implementation. Something else must be wrong: your injected interface may not be in a scanned package, or something else.
这篇关于SpringSecurity Autowire解决方法的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
查看全文
