Spring Security在每個頁面上顯示數據

Question

我想在每個頁面上顯示全名。我正在使用彈簧安全。但我只能顯示用戶名。這是代碼。

public ModelAndView indexController(ModelMap model) 
{ 
    User user = (User)SecurityContextHolder.getContext().getAuthentication().getPrincipal(); 
    model.addAttribute("fullname", user.getUsername()); 

    return new ModelAndView("index", model); 

} 

我只能在這裏顯示用戶名，即電子郵件。我怎樣才能獲得全名來顯示在每一頁上。

Answer 1

您可以在自己的某個實體中擴展spring的User類或實現UserDetails接口，並在成功驗證後將該實體的實例放入SecurityContextHolder。假設，你有User實體（不帶彈簧的org.springframework.security.core.userdetails.User混淆），那麼你就可以實現UserDetails界面類似以下內容：

@Entity 
@Table(name = "users") 
public class User implements UserDetails { 
    private String username; 
    private String password; 
    private String firstName; 
    private String lastName; 
    private Set<String> roles = new HashSet<>(); 

    public User() {} 

    public User(String username, String password, Collection<GrantedAuthority> authorities) { 
     this.username = username; 
     this.password = password; 
     this.roles = authorities.stream().map(GrantedAuthority::getAuthority).collect(Collectors.toSet()); 
    } 

    @Id 
    @Override 
    public String getUsername() { 
     return username; 
    } 

    public void setUsername(String username) { 
     this.username = username; 
    } 

    @Override 
    public String getPassword() { 
     return password; 
    } 

    public void setPassword(String password) { 
     this.password = password; 
    } 

    public String getFirstName() { 
     return firstName; 
    } 

    public void setFirstName(String firstName) { 
     this.firstName = firstName; 
    } 

    public String getLastName() { 
     return lastName; 
    } 

    public void setLastName(String lastName) { 
     this.lastName = lastName; 
    } 

    @ElementCollection 
    @CollectionTable(name = "roles") 
    public Set<String> getRoles() { 
     return roles; 
    } 

    public void setRoles(Set<String> roles) { 
     this.roles = roles; 
    } 

    @Override 
    @Transient 
    public Collection<GrantedAuthority> getAuthorities() { 
     return roles.stream().map(SimpleGrantedAuthority::new).collect(Collectors.toList()); 
    } 

    @Override 
    @Transient 
    public boolean isAccountNonExpired() { 
     return true; 
    } 

    @Override 
    @Transient 
    public boolean isAccountNonLocked() { 
     return true; 
    } 

    @Override 
    @Transient 
    public boolean isCredentialsNonExpired() { 
     return true; 
    } 

    @Override 
    @Transient 
    public boolean isEnabled() { 
     return true; 
    } 
} 

然後，你可以定義一個UserDetailsService搜索基礎上，username用戶並返回如果可能的話，User實體的實例。類似以下內容：

@Override 
@Autowired 
protected void configure(AuthenticationManagerBuilder auth) throws Exception { 
    auth 
      .userDetailsService(username -> { 
       User user = userRepository.findByUsername(username); 

       if (user == null) throw new UsernameNotFoundException("Invalid user"); 

       return user; 
      }); 
} 

最後，當你使用SecurityContextHoler，你可以投校長到你的User的實體，而在firstName和lastName屬性：

User user = (User) SecurityContextHolder.getContext().getAuthentication().getPrincipal(); 
model.addAttribute("fullname", user.getFirstName() + " " + user.getLastName());