找不到UsernamePasswordAuthenticationToken的AuthenticationProvider - Spring-boot + Oauth2:Restful API

时间:2016-01-03 03:53:29

标签: java spring hibernate spring-boot oauth2

我正在尝试使用Spring-boot和oauth2使用hibernate构建Restful API。

我已经创建了一个CustomAuthenticationProvider来对数据库中的用户进行身份验证,但我对服务器有以下响应

注意: json回复。

error": "unauthorized",
"error_description": "No AuthenticationProvider found for org.springframework.security.authentication.UsernamePasswordAuthenticationToken"
}

这是我的CustomAuthenticationProvider:

@Component
public class CustomAuthenticationProvider implements AuthenticationProvider {
    public CustomAuthenticationProvider() {
        super();
    }
    @Autowired
    private UsuarioDAO user;

@Override
public Authentication authenticate(Authentication auth) throws AuthenticationException {
    String username = String.valueOf(auth.getName());
    String password = String.valueOf(auth.getCredentials().toString());

    Usuarios us = null;
    try {
        us = user.userAuthentication(username, password);
    } catch (Exception ex) {
    }
    if (us != null) {
        final List<GrantedAuthority> grantedAuths = new ArrayList<>();
        grantedAuths.add(new SimpleGrantedAuthority("ROLE_ADMIN"));
        final UserDetails principal = new User(username, password, grantedAuths);
        final Authentication authentication = new UsernamePasswordAuthenticationToken(principal, password, grantedAuths);
        us = null;
        return authentication;
    } else {
        throw new BadCredentialsException("Bad Credentials");
    }
}

@Override
public boolean supports(Class<? extends Object> authentication) {
    return (UsernamePasswordAuthenticationToken.class.isAssignableFrom(authentication));
}

}

这是我的WebSecurityConfiguration:

@Configuration
@EnableWebSecurity
public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter {

@Override
@Bean
public AuthenticationManager authenticationManagerBean() throws Exception {
    return super.authenticationManagerBean();
}
}

1 个答案:

答案 0 :(得分:2)

您必须配置Spring Security才能使用自定义身份验证提供程序。 将以下代码添加到WebSecurityConfiguration类:

@Autowired
CustomAuthenticationProvider customAuthenticationProvider;

@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    auth.authenticationProvider(customAuthenticationProvider);
}