使用javaconfig进行Spring Security预认证

Question

我正在尝试使用外部服务在Spring设置预身份验证安全性。登录入口点重定向到一个外部页面，该页面在成功登录后会将身份验证信息放入 Cookie 中。之后，外部应用程序重定向回我的应用程序，并且我的 AbstractPreauthicatedProcessingFilter被正确调用，并且我能够返回一个主体值，然后我希望将其传递给我的用户详细信息服务，在那里我可以创建正确的用户对象，但它最终会在此之前抛出错误。这是代码

@Configuration
@EnableWebMvcSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    private UserDetailsService userDetailsService;
    private PreAuthenticatedAuthenticationProvider preAuthenticatedProvider;

    @Autowired
    private CspProperties cspProperties;

    public SecurityConfig() {
        super();

        userDetailsService = new CspUserDetailService();
        UserDetailsByNameServiceWrapper<PreAuthenticatedAuthenticationToken> wrapper = 
                new UserDetailsByNameServiceWrapper<PreAuthenticatedAuthenticationToken>(userDetailsService);

        preAuthenticatedProvider = new PreAuthenticatedAuthenticationProvider();
        preAuthenticatedProvider.setPreAuthenticatedUserDetailsService(wrapper);
    }

    @Autowired
    public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
        auth.authenticationProvider(preAuthenticatedProvider);
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        CspAuthenticationFilter cspFilter = new CspAuthenticationFilter();
        cspFilter.setAuthenticationManager(authenticationManager());

        //entry point
        LoginUrlWithReturnUrlEntryPoint entryPoint = new LoginUrlWithReturnUrlEntryPoint(cspProperties.getNoCookieURL());

        http
            .addFilter(cspFilter)
            .authorizeRequests()
                .antMatchers("/secure").authenticated()
                .anyRequest().permitAll()
                .and()
            .httpBasic()
                .authenticationEntryPoint(entryPoint);
    }
}

这就是我犯的错误

2014-06-28 12:30:46.522 DEBUG 13752 --- [nio-8080-exec-3] secure.CspAuthenticationFilter           : Checking secure context token: null
2014-06-28 12:30:46.524 DEBUG 13752 --- [nio-8080-exec-3] secure.CspAuthenticationFilter           : preAuthenticatedPrincipal = 6045656|aeb4b387f41c1557cfb2604
881840b96|W|40|CDTTut,CompXL|xxxxx|PROD|201406290157, trying to authenticate
2014-06-28 12:30:46.524 DEBUG 13752 --- [nio-8080-exec-3] secure.CspAuthenticationFilter           : Cleared security context due to exception

org.springframework.security.authentication.ProviderNotFoundException: No AuthenticationProvider found for org.springframework.security.web.authentication.preau
th.PreAuthenticatedAuthenticationToken
    at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:199)
    at org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter.doAuthenticate(AbstractPreAuthenticatedProcessingFilter.jav
a:121)
    at org.springframework.security.web.authentication.preauth.AbstractPreAuthenticatedProcessingFilter.doFilter(AbstractPreAuthenticatedProcessingFilter.java:91)

任何帮助都将不胜感激

Answer 1

结果证明这个配置是正确的，问题出在预授权过滤器，在某些情况下它应该返回null。