如何配置过滤器使用WebSecurityConfigrerAdapter？

Question

我试图添加一个过滤器，需要参数作为FilterConfig给出。我将它添加到WebApplication ation初始::onStartup（ServletContext容器）方法中，并且配置良好（init方法使用正确的FilterConfig调用）。

@Override
public void onStartup(ServletContext container) throws ServletException {
    super.onStartup(container);

    FilterRegistration.Dynamic urlRewriteFilter = container.addFilter("UrlRewriteFilter", UrlRewriteFilter.class);
    urlRewriteFilter.addMappingForServletNames(EnumSet.of(DispatcherType.REQUEST, DispatcherType.FORWARD), false, "/*");
    urlRewriteFilter.setInitParameter("confPath", "WEB-INF/urlrewrite-prod.xml");
}

关键是我使用的是SpringSecurityWebSecurityConfigureAdapter，我的过滤器从未被调用过（不在过滤器链中）。如果我用addFilterAfter添加它，就没有办法给他一个FilterConfig。

 @Override
 protected void configure(HttpSecurity http) throws Exception {
  http
  .exceptionHandling()
    .authenticationEntryPoint(spnegoEntryPoint())
    .and()
    .authorizeRequests()
        .antMatchers("/").permitAll()
        .anyRequest().authenticated()
        .and()
    .httpBasic()
        .and()
    .logout()
        .and()
    .addFilterBefore(spnegoAuthenticationProcessingFilter(authenticationManagerBean()), BasicAuthenticationFilter.class)
    .addFilterAfter(new CsrfHeaderFilter(), CsrfFilter.class)
    .addFilterAfter(new CacheFilter(), CsrfFilter.class)
    .addFilterAfter(new UrlRewriteFilter(), CsrfFilter.class);
 }

我哪里错了？

Answer 1

我的错误是在过滤器映射。我调用addMappingForServletNames而不是addMappingForUrlPatterns

@Override
public void onStartup(ServletContext container) throws ServletException {
    super.onStartup(container);

    FilterRegistration.Dynamic urlRewriteFilter = container.addFilter("UrlRewriteFilter", UrlRewriteFilter.class);
    //urlRewriteFilter.addMappingForServletNames(EnumSet.of(DispatcherType.REQUEST, DispatcherType.FORWARD), false, "/*");
    urlRewriteFilter.addMappingForUrlPatterns(EnumSet.of(DispatcherType.REQUEST, DispatcherType.FORWARD), false, "/*");
    urlRewriteFilter.setInitParameter("confPath", "WEB-INF/urlrewrite-prod.xml");
}