org.springframework.security.core.userdetails.User 不能转换为 MyUserDetails (Junit 5)

Question

我正在使用 Junit 5 测试 Web 应用程序，除了

SecurityContextHolder.getContext().getAuthentication().getPrincipal()

在运行测试用例时控制器类中的线

的线返回对象代码

org.springframework.security.core.userdetails.User 而不是 MyUserDetails （而在 Spring Boot 中运行的应用程序返回对象是 MyUserDetails 并且代码运行良好）

我的测试用例类

@ExtendWith(SpringExtension.class)
@WebMvcTest(VendorController.class)
@AutoConfigureMockMvc
class VendorControllerTest {

    @Autowired
    private MockMvc mvc;

    @Test
    void test() throws Exception {
    mvc.perform(MockMvcRequestBuilders.post("/vendor/user/getVendorList").with(csrf().asHeader())
            .param("iDisplayStart","0")
            .param("iDisplayLength", "10")
            .param("iSortCol_0", "0")
            .param("sSortDir_0", "asc")
            .param("sSearch","")
            .with(user("username").password("password").roles("2"))).andExpect(status().isOk());
     }
}

我缺少什么代码，以便在使用 Junit 5 运行测试用例时返回 org.springframework.security.core.userdetails.User 对象，但如果我通过 Spring Boot 运行项目，则可以正常工作。

添加 UserDetailsS​​ervice 实现代码

@Service("userDetailsService")

public class MyUserDetailsService implements UserDetailsService {

@Autowired

private UserSvc userSvc;

@Transactional(readOnly=true)

@Override

public UserDetails loadUserByUsername(final String username) throws UsernameNotFoundException {

    com.esociety.entity.UserEntity userEntity = userSvc.findByUserName(username);

    List<GrantedAuthority> authorities = buildUserAuthority(userEntity.getUserType());

    return buildUserForAuthentication(userEntity, authorities);

}

private User buildUserForAuthentication(com.esociety.entity.UserEntity userEntity, List<GrantedAuthority> authorities) {

     MyUserDetails myUserDetails = new MyUserDetails (userEntity.getUsername(), userEntity.getPassword(), userEntity.isEnabled(), userEntity.isAccountNonExpired(), userEntity.isCredentialsNonExpired(),userEntity.isAccountNonLocked(),authorities,userEntity.getUserId(),userEntity.getSocietyId(),userEntity.getUserType(),userEntity.getFirstName(),userEntity.getMiddleName(),userEntity.getLastName());

     return myUserDetails;

}

private List<GrantedAuthority> buildUserAuthority(String userType) {

    Set<GrantedAuthority> setAuths = new HashSet<GrantedAuthority>();

    // Build user's authorities

    setAuths.add(new SimpleGrantedAuthority(userType));

    List<GrantedAuthority> Result = new ArrayList<GrantedAuthority>(setAuths);

    return Result;

}

}

MyUserDetails 类

public class MyUserDetails extends User {
 public MyUserDetails(String username, String password, boolean enabled,
        boolean accountNonExpired, boolean credentialsNonExpired,
        boolean accountNonLocked,
        Collection<? extends GrantedAuthority> authorities, Long userId,
        Long societyId, String userType, String firstName,
        String middleName, String lastName) {
    super(username, password, enabled, accountNonExpired,
            credentialsNonExpired, accountNonLocked, authorities);
    this.userId = userId;
    this.societyId = societyId;
    this.userType = userType;
    this.firstName = firstName;
    this.middleName = middleName;
    this.lastName = lastName;
 }
// getter setter goes here

}

Answer 1

问题是您使用的是SecurityMockMvcRequestPostProcessors.user(String username)RequestPostProcessor，它将创建并返回一个org.springframework.security.core.userdetails.User，它是UserDetails 的实现，但不是您想要的MyUserDetails。

相反，您可以使用SecurityMockMvcRequestPostProcessors.user(UserDetails user)，它允许提交您自己的UserDetails 实现，在本例中为您想要的MyUserDetails。

改变你的测试如下：

@Test
void test() throws Exception {
mvc.perform(MockMvcRequestBuilders.post("/vendor/user/getVendorList").with(csrf().asHeader())
        .param("iDisplayStart","0")
        .param("iDisplayLength", "10")
        .param("iSortCol_0", "0")
        .param("sSortDir_0", "asc")
        .param("sSearch","")
        .with(user(new MyUserDetails ("username", "password", true, true, true,true, Arrays.asList(new SimpleGrantedAuthority("2")),1,1,USER_TYPE,"FirstName","MiddleName","LastName")))).andExpect(status().isOk());
 }

参考 Spring Security Source code