Spring security Spring会话和安全上下文集成

Spring security Spring会话和安全上下文集成,spring-security,spring-session,Spring Security,Spring Session,如何将Spring会话与Spring安全性集成 问题是Spring会话没有将会话属性“Spring\u SECURITY\u CONTEXT”设置为当前SecurityContext。我有一个错误: org.springframework.security.authentication.InsufficientAuthenticationException: Full authentication is required to access this resource 此筛选器将修复它: pu

如何将Spring会话与Spring安全性集成

问题是Spring会话没有将会话属性“Spring\u SECURITY\u CONTEXT”设置为当前SecurityContext。我有一个错误:

org.springframework.security.authentication.InsufficientAuthenticationException: Full authentication is required to access this resource
此筛选器将修复它:

public static class SessionSecurityContextIntegarionFilter extends GenericFilterBean {

    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
        HttpServletRequest servletRequest = (HttpServletRequest) request;
        HttpSession session = servletRequest.getSession(false);
        if (null != session && session.getAttribute("SPRING_SECURITY_CONTEXT") != null) {
            SecurityContextHolder.setContext((SecurityContext) session.getAttribute("SPRING_SECURITY_CONTEXT"));
        }
        chain.doFilter(request, response);
    }
}
如何将Spring会话与Spring安全性集成