在 Spring Boot 中 Spring Security 没有抛出 UserNotFoundException

Question

我正在开发启用了 Spring Security 的 Spring Boot 应用程序。我正在使用自定义 jdbc 身份验证。在我的用户详细信息服务中，我抛出了 usernamenotfound 异常，但它没有在任何地方记录。我也没有在控制台上看到任何内容。

下面是我的 UserDetailService 实现

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;

@Service
public class ApplicationUserDetailService implements UserDetailsService{

    private ApplicationUserDao applicationUserDao;
    
    @Autowired
    public ApplicationUserDetailService(@Qualifier("db") ApplicationUserDao applicationUserDao) {
        this.applicationUserDao=applicationUserDao;
    }
    
    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        return applicationUserDao.loadUserByUsername(username)
                .orElseThrow(()->{
                    System.out.println("here...");
                    throw new UsernameNotFoundException("dsdsds");
                });
        }

}

下面是jdbc auth的安全配置

@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    auth.authenticationProvider(provider());
}

@Bean
public DaoAuthenticationProvider provider() {
    DaoAuthenticationProvider pr=new DaoAuthenticationProvider();
    pr.setUserDetailsService(applicationUserDetailService);
    pr.setPasswordEncoder(encoder);
    return pr;
}

UserDetailDaoImpl

import java.util.Optional;    
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.jdbc.core.JdbcTemplate;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Repository;

@Repository("db")
public class DBUserDaoImpl implements ApplicationUserDao{
    
    private final JdbcTemplate jdbcTemplate;
    
    @Autowired
    public DBUserDaoImpl(JdbcTemplate jdbcTemplate) {
        this.jdbcTemplate=jdbcTemplate;
    }

    @Override
    public Optional<ApplicationUser> loadUserByUsername(String username) throws UsernameNotFoundException {
        return Optional.ofNullable(jdbcTemplate.query("select * from users where username='"+username+"'"
                ,new UserExtractor(jdbcTemplate)));
    }

}

当我发送错误的详细信息时，我应该得到异常，但它没有出现。请帮帮我。Spring boot 2.4.2

Answer 1

UsernameNotFoundException 通常不是运行服务器的人真正需要知道的，因此 Spring Security 不会为它打印消息。这是用户的错误（他们输入了一个不存在的帐户）。

无论如何，如果您想将消息打印出来，您可以执行以下操作：

@Override
public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
    return applicationUserDao.loadUserByUsername(username).orElseThrow(() -> {
        // Create an exception, but don't throw it yet
        var exception = new UsernameNotFoundException("No account found with name " + username);
        // Print the exception
        exception.printStackTrace();
        // Return the exception (throwing works too, but everything I can find says to return it)
        return exception;
    });
}