如何从spring security获得一个字段？

Question

型号

@Column(name="id_usr_adm_tkn")
private int id;

@Column(name="npp_usr_adm_tkn")
private String npp;

@Column(name="jbtn_usr_adm_tkn")
private String jabatan;
@Id
@Column(name="username_usr_adm_tkn")
private String username;

@Column(name="password_usr_adm_tkn")
private String password;
//describes the tables in the database
@Column(name="email_usr_adm_tkn")
private String email;

@Column(name="nm_adm_usr_tkn")
private String nama;

@Column(name="ktk_adm_usr_tkn")
private String kontak;

@Column(name="sts")
private int sts;

@Column(name="id_wlyh")
private int id_wlyh;

spring-security.xml

<authentication-manager>
    <authentication-provider>
        <jdbc-user-service data-source-ref="dataSource"
            users-by-username-query="select username_usr_adm_tkn,password_usr_adm_tkn, sts from adm_tkn_tebel where username_usr_adm_tkn=?"
            authorities-by-username-query="select username, role from roles where username =?  " />
    </authentication-provider>
</authentication-manager>

我可以使用这样的步骤从 spring security 中检索用户名

 Authentication auth = SecurityContextHolder.getContext().getAuthentication();
                UserDetails userDetail = (UserDetails) auth.getPrincipal();
                String admin = userDetail.getUsername();

问题是我无法获取“id_wlyh”等其他字段？怎么办？

Answer 1

您必须创建自己的身份验证提供程序

 <authentication-manager>
        <authentication-provider ref="myprovider" />
 </authentication-manager>

该类将如下所示：

@Component("myprovider")
public class MyProvider extends AbstractUserDetailsAuthenticationProvider {

    @Autowired
    private UserDao userdao;

    @Override
    public void additionalAuthenticationChecks(final UserDetails arg0, final UsernamePasswordAuthenticationToken arg1) throws AuthenticationException {
        // Nothing
    }

    @Override
    protected UserDetails retrieveUser(final String username, final UsernamePasswordAuthenticationToken authentication) throws AuthenticationException {
        MyUser u = userdao.getUser(username);
        if (u != null) {
            return u;
        }else{
            throw new BadCredentialsException("user invalid");
        }
    }

}

您必须创建您的用户类，添加任意数量的字段：

public class MyUser extends org.springframework.security.core.userdetails.User {
}

然后在访问主体时，您可以将其转换为您自己的定义：

Authentication auth = SecurityContextHolder.getContext().getAuthentication();
MyUser userDetail = (MyUser) auth.getPrincipal();

这样你就可以访问任何你想要的数据