Spring Security訪問角色

Question

我有一個j2ee web應用程序使用spring安全性在spring web流上運行。如何在運行期間更改我在會話中保存的角色？

Answer 1

如果這是可能的，這將是這樣的：如果訪問一個受限制的頁面

SecurityContext context = SecurityContextHolder.getContext(); 
Object principal = context.getAuthentication().getPrincipal(); 
Object credentials = context.getAuthentication().getCredentials(); 
GrantedAuthority[] authorities = new GrantedAuthority[1]; 

authorities[0] = new GrantedAuthorityImpl("MY_NEW_ROLE"); 

Authentication auth = new UsernamePasswordAuthenticationToken(
    principal, credentials, authorities); 
SecurityContextHolder.getContext().setAuthentication(auth);