Javascript Spring安全认证和Ionic/Angular 1.X

一些背景：我有一个在Spring MVC和html5/css/jquery中构建的现有应用程序。它目前由spring security保护。登录表单使用用户名和密码发布到/j_spring_security_check.action，浏览器中会自动设置cookie/JSESSIONID

问题：我们正在使用ionic/Angular.js构建一个（混合）移动应用程序，我在简单身份验证方面遇到了问题。有没有办法模仿这种行为

我在没有任何运气的情况下尝试了下面的代码-Spring security说头是无效的

$http({
    method: 'POST',
    url: 'https://localhost:8080/j_spring_security_check.action',
    withCredentials:true,
    headers: {'Content-Type': 'application/x-www-form-urlencoded'},
    data: 'j_username=test@someemail.com&j_password=abc123',
})
.success(function(){})
.error(function(){});

如果能够让spring安全性在每次REST调用中识别用户，那就太好了，这样我就能够使用spring安全性注释，比如@Role等等

谢谢

将此添加到您的代码中

public class CorsFilter extends OncePerRequestFilter {
    static final String ORIGIN = "Origin";

    @Override
    protected void doFilterInternal(HttpServletRequest request,
            HttpServletResponse response, FilterChain filterChain)
            throws ServletException, IOException {
        System.out.println(request.getHeader(ORIGIN));
        System.out.println(request.getMethod());
        if (request.getHeader(ORIGIN) == null) {
            response.addHeader("Access-Control-Allow-Origin", "*");// * or
                                                                    // origin as
                                                                    // u prefer
            response.addHeader("Access-Control-Allow-Credentials", "false");
            response.addHeader("Access-Control-Allow-Methods",
                    "GET, POST, PUT, DELETE");

            response.addHeader("Access-Control-Allow-Headers",
                    request.getHeader("Access-Control-Request-Headers"));
        } else {
            response.addHeader("Access-Control-Allow-Origin", request.getHeader(ORIGIN));// * or
            // origin as
            // u prefer
            response.addHeader("Access-Control-Allow-Credentials", "true");
            response.addHeader("Access-Control-Allow-Methods",
                    "GET, POST, PUT, DELETE");

            response.addHeader("Access-Control-Allow-Headers",
                    request.getHeader("Access-Control-Request-Headers"));
        }
        if (request.getMethod().equals("OPTIONS")) {
            try {
                response.getWriter().print("OK");
                response.getWriter().flush();
            } catch (IOException e) {
                e.printStackTrace();
            }
        } else {
            filterChain.doFilter(request, response);
        }
    }
}

此外，还应该添加xml web安全文件

<beans:bean id="CorsFilter" class="com.yourpackagetoyourclass.CorsFilter" />
    <custom-filter ref="CorsFilter" after="PRE_AUTH_FILTER" />

---

您可以共享控制器吗？