我不知道是Spring的哪个部件造成的

Question

10.5. AuthenticationManager AuthenticationManager是定义Spring Security的过滤器如何执行身份验证的API。然后，调用AuthenticationManager的控制器（即Spring Security的过滤器）在SecurityContextHolder上设置返回的身份验证。如果您没有与Spring Security的过滤器集成，则可以直接设置SecurityContextHolder，并且不需要使用AuthenticationManager。

我无法弄清楚Spring的哪个组件正在这样做-"SecurityContextHolder.getContext（）. setAuthentication（）"

1. 然后，调用AuthenticationManager的控制器（即Spring Security的过滤器）在SecurityContextHolder上设置返回的身份验证

Answer 1

org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter#成功认证

    protected void successfulAuthentication(HttpServletRequest request,
            HttpServletResponse response, FilterChain chain, Authentication authResult)
            throws IOException, ServletException {

        if (logger.isDebugEnabled()) {
            logger.debug("Authentication success. Updating SecurityContextHolder to contain: "
                    + authResult);
        }

        SecurityContextHolder.getContext().setAuthentication(authResult);

        rememberMeServices.loginSuccess(request, response, authResult);

        // Fire event
        if (this.eventPublisher != null) {
            eventPublisher.publishEvent(new InteractiveAuthenticationSuccessEvent(
                    authResult, this.getClass()));
        }

        successHandler.onAuthenticationSuccess(request, response, authResult);
    }