spring在使用spring安全时无法取消马歇尔豆子

Question

我有一个从org.springframework.security.core.userdetails.user扩展而来的bean，并将这个bean与openid一起使用。bean看起来像：

package com.employee;

import java.util.Collection;

import javax.xml.bind.annotation.XmlRootElement;

import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.userdetails.User;

@XmlRootElement(name="Employee")
public class Employee extends User{

    private int empId;
    private String deptName;

    public Employee() {
        super("", "unused", null);
    }
     public Employee(String username, Collection<GrantedAuthority> authorities) {
           super(username, "unused", authorities);
       }

    public int getEmpId() {
        return empId;
    }
    public void setEmpId(int empId) {
        this.empId = empId;
    }
    public String getDeptName() {
        return deptName;
    }
    public void setDeptName(String deptName) {
        this.deptName = deptName;
    }
}

控制器将Employee的实例接受为：

@RequestMapping（值=“/addemp.do”,方法=RequestMethod.Post）public@ResponseBody String addEmployee(@RequestBody Employee emp）{...}

我发送了一个带有以下正文的POST请求：

<?xml version="1.0" encoding="UTF-8"?>
<Employee>
    <empId>10</empId>
    <deptName>abc</deptName>
</Employee>

但在调用addEmp操作时会出现以下JAXB异常：

2012-12-16 15:25:55,364{HH:mm:ss} DEBUG [http-bio-8080-exec-1] (AbstractHandlerExceptionResolver.java:132) -
Resolving exception from handler [public java.lang.String com.main.EmpController.addEmployee(com .employee.Employee)]: 
org.springframework.http.converter.HttpMessageNotReadableException: Could not unmarshal to 
[class com.employee.Employee]: Unable to create an instance of com.employee.Employee; nested exception is 
javax.xml.bind.UnmarshalException: Unable to create an instance of com.employee.Employee

Answer 1

错误消息：

无法创建com.employee的实例

可能暗示输入未提供有效的员工属性。在构造函数中

public Employee() {
    super("", "unused", null);
}

默认用户名设置为“”，但spring安全不接受空白用户名。