使用 Spring Boot 获取实际用户详细信息

Question

实际上，我正在使用 Spring boot、Mongodb 和 Vue.js 构建一个论坛项目。

当我尝试发布新评论并使用 SecurityContextHolder 获取用户数据并将其转换为从 Spring boot 提供的 UserDetails 类实现的 UsersDetailImpl 时，它会引发以下错误: org.springframework.security.web.authentication.webauthenticationdetails 不能转换为 .... UserDetailsImpl

我真的不知道这个错误的原因，因为如果我从 Postman 测试它不会报告错误。

UserDetailsImpl.java

public class UserDetailsImpl implements UserDetails {
private static final long serialVersionUID = 1L;

private String id;

private String username;

private String email;

@JsonIgnore
private String password;

private Collection<? extends GrantedAuthority> authorities;

public UserDetailsImpl(String id, String username, String email, String password,
                       Collection<? extends GrantedAuthority> authorities) {
    this.id = id;
    this.username = username;
    this.email = email;
    this.password = password;
    this.authorities = authorities;
}

public static UserDetailsImpl build(User user) {
    List<GrantedAuthority> authorities = user.getRoles().stream()
            .map(role -> new SimpleGrantedAuthority(role.getName().name()))
            .collect(Collectors.toList());

    return new UserDetailsImpl(
            user.getId(),
            user.getUsername(),
            user.getEmail(),
            user.getPassword(),
            authorities);
}

@Override
public Collection<? extends GrantedAuthority> getAuthorities() {
    return authorities;
}

public String getId() {
    return id;
}

public String getEmail() {
    return email;
}

@Override
public String getPassword() {
    return password;
}

@Override
public String getUsername() {
    return username;
}

@Override
public boolean isAccountNonExpired() {
    return true;
}

@Override
public boolean isAccountNonLocked() {
    return true;
}

@Override
public boolean isCredentialsNonExpired() {
    return true;
}

@Override
public boolean isEnabled() {
    return true;
}

@Override
public boolean equals(Object o) {
    if (this == o)
        return true;
    if (o == null || getClass() != o.getClass())
        return false;
    UserDetailsImpl user = (UserDetailsImpl) o;
    return Objects.equals(id, user.id);
}
}

CommentController.java

@CrossOrigin(origins = "*", maxAge = 3600)
@RestController
@RequestMapping("/comments")
public class CommentController {
@Autowired
CommentRepository commentRepository;

@Autowired
RoleRepository roleRepository;

@PostMapping("/ask")
public ResponseEntity<?> ask (@Valid @RequestBody AskRequest askRequest) {

    Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
    UserDetailsImpl userDetails = (UserDetailsImpl) authentication.getPrincipal();

    HashSet<String> strRoles = userDetails.getAuthorities().stream()
            .map(GrantedAuthority::getAuthority)
            .collect(Collectors.toCollection(HashSet::new));

    Set<Role> roles = new HashSet<>();
    strRoles.forEach(role -> {
        int cutPoint = role.indexOf("_");
        role = role.substring(cutPoint + 1).toLowerCase();

        findRole(roles, role, roleRepository);
    });

    User user = new User(userDetails.getUsername(),  userDetails.getEmail(), roles);
    ObjectId discussion_id = ObjectId.get();
    String slug =  new Slugify().slugify(askRequest.getTitle());

    Comment comment = new Comment(discussion_id, askRequest.getTitle(),
            askRequest.getText(),slug, "full_slug_test", Instant.now(),user);

    String info = comment.getDiscussion_id().toString() +  comment.getPosted() + comment.getTitle()
            + comment.getText() + comment.getAuthor().getUsername() + comment.getAuthor().getEmail()
            + comment.getAuthor().getId() + comment.getAuthor().getRoles();

    commentRepository.save(comment);

    return ResponseEntity.ok(new MessageResponse(info));
}
}

我是所有这些技术的新手，可能存在严重错误。所有的建议都会对我有很大的帮助，因为这个项目是学术性的。

如果有人需要更多信息，请询问。

谢谢大家:)

Answer 1

将authentication.getDetails() 更改为getAuthentication().getPrincipal()

您将拥有： UserDetailsImpl userDetails = (UserDetailsImpl) authentication.getPrincipal();

Answer 2

最后我发现了错误，它在前端。我以这种方式使用 JWT 发送 de 标头。

import axios from 'axios';
import authHeader from './auth-header';

const API_URL = 'http://localhost:8080/comments/';

class CommentsService {
ask(post){
    return axios.post(API_URL + 'ask', {
        title: post.title,
        text: post.text,
        headers: authHeader()
    });
  }
}
export default new CommentsService();

这是完全错误的，所以我找到了这样做的方法。

import axios from 'axios';
import authHeader from './auth-header';

const API_URL = 'http://localhost:8080/comments/';

class CommentsService {
ask(post){
    return axios.post(API_URL + 'ask', {
        title: post.title,
        text: post.text
    },{headers: authHeader()});
  }
}
export default new CommentsService();

我还添加了挂载标题的代码。

export default function authHeader() {
let user = JSON.parse(localStorage.getItem('user'));

if (user && user.accessToken) {
  return { Authorization: 'Bearer ' + user.accessToken };
} else {
  return {};
  }
}