Spring Security SAML SSO重定向到控制器

Question

在IDP启动的设置中使用代码片段重定向到控制器(/bootstrap/v1):

public SavedRequestAwareAuthenticationSuccessHandler successRedirectHandler() {
    SavedRequestAwareAuthenticationSuccessHandler successRedirectHandler = new SavedRequestAwareAuthenticationSuccessHandler();
    successRedirectHandler.setDefaultTargetUrl("/bootstrap/v1");
    return successRedirectHandler;
}

控制器代码片段：

public class BootstrapController extends ParentController {

    @RequestMapping(value = "/v1", method = RequestMethod.POST)
    public ResponseEntity<BootstrapResponseDto> bootstrap(@RequestBody BootstrapRequestDto bootstrapRequestDto, @RequestHeader(value = "MAC-ADDRESS", required = false) String macAddress) {

        myAppUserDetails userDetails = SecurityContextUtils.getUserDetails();

        BootstrapResponseDto bootstrapResponseDto = new BootstrapResponseDto();

        // some app specific logic goes here...

        return new ResponseEntity<>(bootstrapResponseDto, HttpStatus.OK);
    }
}

调试级日志片段：

安全筛选器链：[MetadataGeneratorFilter
WebSyncManagerIntegrationFilter SecurityContextPersistenceFilter
CustomLogFilter HeaderWriterFilter LogoutFilter
UsernamePasswordAuthenticationFilter BasicAuthenticationFilter
FilterChainProxy RequestCacheawareFilter
SecurityContextHolderRequestFilter
AnonymousAuthenticationFilter SessionManagementFilter

11-29-2018 13:33:53 e7a5edb2-4051-4132-bad0-856d58af1c7d信息http-nio-8080-exec-6 O.O.C.B.S.SamlProtocolMessageXMLSignatureSecurityPolicyRule：验证协议消息签名成功，消息类型：{urn：Oasis：Names：TC：SAML：2.0:protocol}响应11-29-2018 13:33:53 e7a5edb2-4051-4132-bad0-856d58af1c7d

收到GET“/bootstrap/v1”得请求：

org.springframework.session.web.http.sessionrepositoryfilter$sessionrepositoryrequestwrapper@5f9e2aff

servletpath：/bootstrap/v1 pathinfo：null headers：host：localhost：8080 user-agent：mozilla/5.0（Macintosh；Intel Mac OS X 10.13；rv：63.0）gecko/20100101 firefox/63.0接受：text/html,application/xhtml+xml,application/xml；q=0.9,/；q=0.8接受-语言：en-US,en；q=0.5接受-编码：gzip,deflate dnt：1连接：keep-alive cookie：

安全筛选器链：[MetadataGeneratorFilter
WebSyncManagerIntegrationFilter SecurityContextPersistenceFilter
CustomLogFilter HeaderWriterFilter LogoutFilter
UsernamePasswordAuthenticationFilter BasicAuthenticationFilter
FilterChainProxy RequestCacheawareFilter
SecurityContextHolderRequestFilter
AnonymousAuthenticationFilter SessionManagementFilter

11-29-2018 13:33:53 e7a5edb2-4051-4132-bad0-856d58af1c7d警告http-nio-8080-exec-7 O.S.W.S.PageNotFound：不支持请求方法“Get”

ExpiringUsernameAuthenticationToken设置为返回：

HTTP状态405-方法不允许错误

Answer 1

我相信这个问题与SAML一点关系都没有，而是一个通用的Spring Security问题。而且，您没有指定BootstrapRequestDto主体的来源。

您有一个SuccessHandler,它执行重定向：

SuccessRedirectHandler.SetDefaultTargetURL（“/bootstrap/v1”）；执行获取

public class BootstrapController extends ParentController {

    @RequestMapping(value = "/v1", method = RequestMethod.GET)
    public ResponseEntity<BootstrapResponseDto> bootstrap() {

        myAppUserDetails userDetails = SecurityContextUtils.getUserDetails();
        BootstrapResponseDto bootstrapResponseDto = new bootstrapResponseDto();

        // some app specific logic goes here...
        return new ResponseEntity<>(bootstrapResponseDto, HttpStatus.OK);
    }

    @RequestMapping(value = "/v1", method = RequestMethod.POST)
    public ResponseEntity<BootstrapResponseDto> bootstrap(@RequestBody BootstrapRequestDto bootstrapRequestDto, @RequestHeader(value = "MAC-ADDRESS", required = false) String macAddress) {

        myAppUserDetails userDetails = SecurityContextUtils.getUserDetails();

        BootstrapResponseDto bootstrapResponseDto = new BootstrapResponseDto();

        // some app specific logic goes here...

        return new ResponseEntity<>(bootstrapResponseDto, HttpStatus.OK);
    }
}