Spring Security獲取已登錄的用戶信息的兩種方法

第一種是直接從session中手動拿:

@RequestMapping(value = "/user", method = RequestMethod.GET)
public ResponseEntity<Map<String, Object>> getUser(HttpSession httpSession){
   Authentication au;
   CloudinsUser user = null;
   CloudinsUserDetail userDetail;
   String[] meta = new String[1];
   SecurityContext ctx =
         (SecurityContext) httpSession.getAttribute("SPRING_SECURITY_CONTEXT");
   if(ctx!=null) {
      au = ctx.getAuthentication();
      userDetail = (CloudinsUserDetail) au.getPrincipal();
      if (userDetail != null){
         userDetail.setPassword("");

	//userDetail直接轉成json會報錯,需要從中構造一個簡單對象
         user = userDetail.castToCloudinsUser();
         meta[0] = "UserId:" +user.getId();
      }
   }
   return SeverUtil.cacheResp(makeResMap(user,meta));
}

第二種是Spring Security提供的方法:

@RequestMapping(value = "/user", method = RequestMethod.GET)
public ResponseEntity<Map<String, Object>> getUser(){
   Object principal = SecurityContextHolder.getContext().getAuthentication().getPrincipal();
   System.out.println(principal);

   return null;
}

其中principal 也不能直接轉化為json

轉自：http://blog.163.com/xiong_jinhua/blog/static/236171063201712833519249/