Question

很明显，@Autowired无法在UserDetailsService

内工作

这是真的吗？如果没有，我如何在UserDetailsService内部自动装配？

如果是真的，有什么工作吗？如何执行hibernate查询？

我在AccountService中绑定的accountDao工作正常，如果我把它放在应用程序上下文中并在任何其他类中使用它。我在某处看到Autowire没有工作，因为UserDetailsService超出了弹簧绑定的范围？并且解决方法是手动将其连接到xml中。如果那是真的吗？这有什么作用？

的AccountService：

@Service
public class AccountService implements UserDetailsService {

    @Autowired
    AccountDao accountDao;

    @Override
    public UserDetails loadUserByUsername(String username)
            throws UsernameNotFoundException, DataAccessException {

        Account account = accountDao.getUser(username);
        if (account == null)
            throw new UsernameNotFoundException("No account found for '"
                    + username + "'");

        return account;
    }

    @SuppressWarnings("unused")
    private GrantedAuthority[] getAuthorities(boolean isAdmin) {
        List<GrantedAuthority> authList = new ArrayList<GrantedAuthority>(2);
        authList.add(new GrantedAuthorityImpl("ROLE_USER"));
        if (isAdmin) {
            authList.add(new GrantedAuthorityImpl("ROLE_ADMIN"));
        }
        return authList.toArray(new GrantedAuthority[] {});
    }

    public void setAccountDao(AccountDao accountDao) {
        this.accountDao = accountDao;
    }

安全背景

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:security="http://www.springframework.org/schema/security"
    xsi:schemaLocation="http://www.springframework.org/schema/beans 
      http://www.springframework.org/schema/beans/spring-beans-3.0.xsd
   http://www.springframework.org/schema/security 
   http://www.springframework.org/schema/security/spring-security-3.0.xsd">

    <!-- This is where we configure Spring-Security -->
    <security:http auto-config="true" use-expressions="true"
        access-denied-page="/krams/auth/denied">

        <security:intercept-url pattern="/" access="permitAll" />
        <security:intercept-url pattern="/campaign/*"
            access="hasRole('ROLE_ADMIN')" />
        <!-- <security:intercept-url pattern="/city/*" access="hasRole('ROLE_ADMIN')"/> -->
        <security:intercept-url pattern="/company/*"
            access="hasRole('ROLE_ADMIN')" />
        <security:intercept-url pattern="/krams/main/common"
            access="hasRole('ROLE_USER')" />

        <security:form-login login-page="/auth/login"
            authentication-failure-url="/auth/login?error=true"
            default-target-url="/home" />

        <security:logout invalidate-session="true"
            logout-success-url="/auth/login" logout-url="/auth/logout" />

    </security:http>

    <!-- Declare an authentication-manager to use a custom userDetailsService -->
    <security:authentication-manager>
        <security:authentication-provider
            user-service-ref="customUserDetailsService">
            <security:password-encoder ref="passwordEncoder" />
        </security:authentication-provider>
    </security:authentication-manager>

    <!-- Use a Md5 encoder since the user's passwords are stored as Md5 in the 
        database -->
    <bean
        class="org.springframework.security.authentication.encoding.Md5PasswordEncoder"
        id="passwordEncoder" />


    <bean id="customUserDetailsService" class="com.groupdealclone.app.service.AccountService" />
    <bean id="accountDao" class="com.groupdealclone.app.dao.JdbcAccountDao" />




</beans>

Web.xml中

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
    version="2.5">
    <context-param>
        <param-name>contextConfigLocation</param-name>
        <param-value>
            /WEB-INF/spring/root-context.xml
            /WEB-INF/spring/security-context.xml
        </param-value>
    </context-param>
    <listener>
        <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class>
    </listener>
    <servlet>
        <servlet-name>appServlet</servlet-name>
        <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class>
        <init-param>
            <param-name>contextConfigLocation</param-name>
            <param-value>/WEB-INF/spring/appServlet/servlet-context.xml</param-value>
        </init-param>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <!--    
    <servlet-mapping>
        <servlet-name>appServlet</servlet-name>
        <url-pattern>*.html</url-pattern>
    </servlet-mapping>
     -->
    <servlet-mapping>
        <servlet-name>appServlet</servlet-name>
        <url-pattern>/</url-pattern>
    </servlet-mapping>

    <filter>
        <filter-name>springSecurityFilterChain</filter-name>
        <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>springSecurityFilterChain</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>


    <filter>
        <filter-name>hibernateFilter</filter-name>
        <filter-class>
            org.springframework.orm.jpa.support.OpenEntityManagerInViewFilter
        </filter-class>
    </filter>

    <welcome-file-list>
        <welcome-file>
            index.jsp
        </welcome-file>
    </welcome-file-list>

</web-app>

Answer 1

要手动连接bean，只需执行以下操作：

<bean id="customUserDetailsService" 
      class="com.groupdealclone.app.service.AccountService" >
    <property name="accountDao" ref="accountDao" />
</bean>

Answer 2

@Autowired在UserDetailsService实现中运行得很好。其他一些必须是错误的：您注入的界面可能不在扫描包中，或其他东西。

Spring Security Autowire解决方法

2 个答案: