Spring Security OAuth2从默认筛选器链禁用BasicAuthenticationFilter

Question

@Override
protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain) {
    ...
    ...
    String username = someDecoder(tokens[0]); // Kind of something
    ...
    ...
}

http.addFilterBefore(new CustomBasicAuthenticationFilter(authenticationManager(), authenticationEntryPoint()),
    BasicAuthenticationFilter.class);

Answer 1

我想您可以使用另一个答案:https://stackoverflow.com/a/28428154/2648577

---->>>这是一个复制/粘贴（更改筛选器名称）。

默认情况下，Spring Boot会为应用程序上下文中不存在FilterRegistrationBean的每个FilterRegistrationBean创建一个FilterRegistrationBean。这允许您通过为过滤器声明您自己的filterregistrationbean来控制注册过程，包括禁用注册。对于BasicAuthenticationFilter，所需的配置如下所示：

@Bean
public FilterRegistrationBean registration(BasicAuthenticationFilter filter) {
  FilterRegistrationBean registration = new FilterRegistrationBean(filter);
  registration.setEnabled(false);
  return registration;
}