当应用程序在Pod GKE中工作时，不会传递SpringSecurityContext

Question

我需要在servlet过滤器中获取用户详细信息。所以我从SecurityContextHolder.getContext（）. getAuthentication（）中获取它，如下所示-

  @Override
  public void doFilter(ServletRequest request, ServletResponse response, FilterChain filterChain) throws ServletException, IOException {
     UserDetails userDetails = (UserDetails) SecurityContextHolder.getContext().getAuthentication()
        .getPrincipal();
...
}

在本地从安全上下文中获取用户，但在将应用部署到GKE时，SecurityContextHolder.getContext（）. getAuthentication（）为空。

我试图配置SecurityContextHolderMODE_INHERITABLETHREADLOCAL这样，但没有帮助

@Configuration
public class SecurityContextHolderConfig {
  public SecurityContextHolderConfig() {
    SecurityContextHolder.setStrategyName(SecurityContextHolder.MODE_INHERITABLETHREADLOCAL);
  }
}

仍然没有将SecurityContext传递给pod中的Filter。（应用程序打包为WAR）配置-具有JWT身份验证的Spring oAuth2-client（在标头中）

Answer 1

这对我有用：

 @Override
  public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws ServletException, IOException {

    HttpServletRequest httpServletRequest =
    (HttpServletRequest) servletRequest;

    Principal userPrincipal = httpServletRequest.getUserPrincipal();