发送登录请求时，@AuthenticationPrincipal的用户为null

Question

当我尝试从前端登录时，我遇到了一个错误。我可以注册，但我不能登录。

错误：

Java语言lang.NullPointerException：无法调用“com.app.auction.user.user.getName（）”，因为“user”在com上为null。应用程序。拍卖使用者UserVM。（UserVM.java:17）~（classes/：na）位于com。应用程序。拍卖授权。AuthController。handleAuthentication（AuthController.java:21）~[类/：na]

我尝试向此api发送请求。

AuthController

@RestController
public class AuthController {
    
    @Autowired
    UserRepository userRepository;

    @PostMapping("/auth")
    UserVM handleAuthentication(@CurrentUser User user) {
        return new UserVM(user);
    }
}

@用户

@Target({ElementType.PARAMETER})/
@Retention(RetentionPolicy.RUNTIME)
@AuthenticationPrincipal  
public @interface CurrentUser {

}

用户虚拟机

package com.app.auction.user;

import lombok.Data;

@Data
public class UserVM {
    
    private String name;
    
    private String username;
    
    private String email;
    
    private String image;
    
    public UserVM(User user) {
        this.name = user.getName();
        this.email = user.getEmail();
        this.username=user.getUsername();
        this.image=user.getImage();
    }
}

用户无角色

@Data
public class UserWithoutRole {
    
    @NotNull(message="Name can not be null")
    @Size(min = 2, max=50, message = "Name must be more than 2 letters ")
    private String name;
    

    @NotNull(message="Username can not be null")
    @UniqueUsername
    @Size(min=1,max=100  )
    private String username;
    
    @NotNull(message="Email can not be null")
    private String email;
    
    
    @NotNull(message="Password can not be null")
    @Size(min = 4, max=16 , message = "Password must be a minimum of 4 characters and a maximum of 16 characters. ")
    private String password;

    private String image;
    
}

用户

@Data
@Entity
public class User  implements UserDetails{
    
    

    /**
     * 
     */
    private static final long serialVersionUID = -2725432351214985546L;

    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY) 
    private long id;
    
    private String name;
    

    private String username;
    
    private String email;
    
    
    private String password;

    @ManyToMany(fetch = FetchType.EAGER, cascade = CascadeType.ALL)
    @JoinTable(name = "users_roles", 
    joinColumns = @JoinColumn(name = "user_id"), 
    inverseJoinColumns = @JoinColumn(name = "role_id"))
    private Collection<Role> roles;
    
    
    private String image;

    public User() {
        
    }
    public User(UserWithoutRole user) {
        this.name = user.getName();
        this.email = user.getEmail();
        this.username=user.getUsername();
        this.image=user.getImage();
    }
    
    

   @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        Collection<Role> roles = getRoles();
        List<SimpleGrantedAuthority> authorities = new ArrayList<>();
         
        for (Role role : roles) {
            authorities.add(new SimpleGrantedAuthority(role.getName()));
        }
         
        return authorities;
    }

    @Override
    public boolean isAccountNonExpired() {
        return true;
    }

    @Override
    public boolean isAccountNonLocked() {
        return true;
    }

    @Override
    public boolean isCredentialsNonExpired() {
        return true;
    }

    @Override
    public boolean isEnabled() {
        return true;
    }


    
}

安全配置（SecurityConfiguration）

@EnableWebSecurity
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
    
    @Autowired
    UserAuthService userAuthService;
    
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.csrf().disable();
        http.httpBasic(); 
        
        http.httpBasic().authenticationEntryPoint(new AuthEntryPoint());

        http.authorizeRequests()
            .antMatchers("/").permitAll()
            .antMatchers(HttpMethod.POST,"/auth").authenticated()
            .and()
            .authorizeRequests().anyRequest().permitAll();
        
        
        http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
    }
    
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userAuthService).passwordEncoder(passwordEncoder());
    }
    

    @Bean
    PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }
}

用户详细信息服务

@Service
public class UserAuthService implements UserDetailsService{

@Autowired
UserRepository userRepository;

@Override
public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
    User user = userRepository.findByUsername(username); //my user implements UserDetails it can return
     if(user != null && user.isEnabled()){
        return buildUserForAuthentication(user, mapRolesToAuthorities(user.getRoles()));
    }else {
        throw new UsernameNotFoundException("User not found");
    }
}

private Collection<? extends GrantedAuthority> mapRolesToAuthorities(Collection<Role> roles) {
    return roles.stream()
            .map(role -> new SimpleGrantedAuthority(role.getName()))
            .collect(Collectors.toList());
}

UserDetails buildUserForAuthentication(User user, Collection<? extends GrantedAuthority> collection) {
      return new org.springframework.security.core.userdetails.User(user.getUsername(),
        user.getPassword(), collection);
}

}

Answer 1

我解决了问题。即使User实现了User详细信息，我也无法获取@MONtUser。我将身份验证作为参数并转换为我的User类。

@PostMapping("/auth")
UserVM handleAuthentication(Authentication authentication) {//@CurrentUser User user
    User user=userService.getByUsername(authentication.getName());
    return new UserVM(user);
}