MockMvc使用不调用DispatcherServlet的自定义过滤器执行基本Authentificaton Point

Question

我使用@AutoConfigureMockMvc，所有无身份验证请求和请求都需要完美地进行身份验证（使用调用DispatcherServlet）

但当我试图执行auth point（用户名、密码）来全面测试身份验证时：

var resp = mockMvc.perform(post("/api/auth")
    .content(objectMapper.writeValueAsString(requestDto))
    .andExpect(status().isOk())
    .andReturn().getResponse().getContentAsString();

处理完所有自定义身份验证过滤器后，在auth上下文中创建UserDetails，但变量resp为空。

我尝试调试（CustomUsernamePasswordAuthenticationFilter=CustomFilter）：

CustomFilter.attemptAuthentication
CustomFilter.doFilter
CustomFilter.successfulAuthentication
this.successHandler.onAuthenticationSuccess
ForwardAuthenticationSuccessHandler.onAuthenticationSuccess
request.getRequestDispatcher(this.forwardUrl).forward(request, response)
MockRequestDispatcher.forward

MockRequest estDispatcher.forward-此模拟请求调度程序返回空响应

当我通过邮递员而不是MockRequest estDispatcher调用/api/auth时，它从apache调用Application ationDispatcher，它的前向方法调用realDispatcherServlet

而不是自动配置mockMvc，我尝试使用这个，没有效果：

mockMvc = MockMvcBuilders.webAppContextSetup(webApplicationContext)
            .addFilters(filters)
            .build();

当我删除addFilters时，DispatcherServlet可以工作，但身份验证未处理（过滤器不调用）

有人知道如何将MockRequestDispatcher重写为ApplicationDispatcher以调用真正的DispatcherServlet和controller吗？

Answer 1

我通过覆盖身份验证过滤器中的ForwardAuthentiation成功处理程序解决了这个问题：

@Bean
public MockMvc mockMvcWithAuthSupport(
        @Qualifier("springSecurityFilterChain") Filter springSecurityFilterChain,
        WebApplicationContext webApplicationContext
) {
    FilterChainProxy filterChain = (FilterChainProxy) springSecurityFilterChain;
    UsernamePasswordAuthenticationFilter[] filters = filterChain.getFilterChains().stream()
            .flatMap(chain -> chain.getFilters().stream())
            .filter(this::isUsernamePasswordFilter)
            .map(f -> (UsernamePasswordAuthenticationFilter) f)
            .peek(filter -> filter.setAuthenticationSuccessHandler(new MockMvcSuccessHandler()))
            .toArray(UsernamePasswordAuthenticationFilter[]::new);

    return MockMvcBuilders.webAppContextSetup(webApplicationContext)
            .addFilters(filters)
            .build();
}

自定义成功处理程序：

private class MockMvcSuccessHandler implements AuthenticationSuccessHandler {
    @Override
    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException {
        MockFilterChain filterChain = new MockFilterChain(mockMvc.getDispatcherServlet(), new Filter[0]);
        filterChain.doFilter(request, response);
    }
}