getPrincipal() Retourne null après la connexion réussie

Question

J'utilise plusieurs éléments http [avec des modèles différents] dans ma configuration de sécurité de printemps. Chaque point pointe vers un gestionnaire d'authentification distinct. Je suis capable de me connecter avec succès pour tous les éléments http. Toutefois, après la connexion réussie, l'objet principal renvoyé est null. Aidez-moi, s'il vous plaît.

Le contenu de la sécurité du printemps sont les suivantes

<http pattern="teacher/login*" authentication-manager- 
     ref="teacherAuthenticationManager"> 
     <intercept-url pattern="teacher/login*" access="ROLE_TEACHER" /> 
      <http-basic`enter code here` /> 
     </http> 
     <http pattern="student/login*" authentication-manager- 
     ref="studentAuthenticationManager"> 
     <intercept-url pattern="student/login*" access="ROLE_STUDENT" /> 
     <http-basic /> 
     </http> 
     <authentication-manager alias="teacherAuthenticationManager"> 
     <authentication-provider> 
     <!-- <password-encoder hash="md5"/>--> 
     <jdbc-user-service data-source-ref="dataSources" 
     users-by-username-query=" 
      select username,password,true 
       from Teacher where username=?" 

      authorities-by-username-query=" 
      select username,'ROLE_TEACHER' from Teacher where username=?" /> 
     </authentication-provider> 
     </authentication-manager> 


     <authentication-manager alias="studentAuthenticationManager"> 
      <authentication-provider> 
     <!-- <password-encoder hash="md5"/>--> 
     <jdbc-user-service data-source-ref="dataSources" 
     users-by-username-query=" 
      select username,password,true 
      from Student where username=?" 

     authorities-by-username-query=" 
       select username,'ROLE_STUDENT' from Student where username=?" /> 
      </authentication-provider> 
     </authentication-manager> 

Web.xml est la suivante

<display-name>Spring Web MVC Application</display-name> 
    <welcome-file-list> 
     <welcome-file>/index.html</welcome-file> 
    </welcome-file-list> 

    <servlet> 
     <servlet-name>mvc-dispatcher</servlet-name> 
     <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> 
     <load-on-startup>1</load-on-startup> 
    </servlet> 

    <servlet-mapping> 
     <servlet-name>mvc-dispatcher</servlet-name> 
     <url-pattern>/rest/*</url-pattern> 
    </servlet-mapping> 

    <context-param> 
     <param-name>contextConfigLocation</param-name> 
     <param-value> 
      /WEB-INF/mvc-dispatcher-servlet.xml, 
      /WEB-INF/spring-security.xml 
     </param-value> 
    </context-param> 

    <listener> 
     <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class> 
    </listener> 

    <filter> 
     <filter-name>springSecurityFilterChain</filter-name> 
     <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> 
    </filter> 
    <filter-mapping> 
     <filter-name>springSecurityFilterChain</filter-name> 
     <url-pattern>/*</url-pattern> 
     <dispatcher>FORWARD</dispatcher> 
       <dispatcher>REQUEST</dispatcher> 
       <dispatcher>ERROR</dispatcher> 
    </filter-mapping> 

Code contrôleur

@RequestMapping(value = "/teacher/login", method = RequestMethod.GET) 
    public @ResponseBody MethodResponse teacherlogin(Principal principal) { 
     System.out.println("Welcome Teacher"); 
     MethodResponse methodResponse = new MethodResponse(); 
     try { 
      //org.springframework.security.core.userdetails.User user = (org.springframework.security.core.userdetails.User) SecurityContextHolder.getContext().getAuthentication().getPrincipal(); 


        System.out.println("Is Principal Null:"+Boolean.valueOf(principal==null)); 
        final String name = principal.getName(); 

        String sql="Select * from Teacher where UserName=?"; 
        Teacher teacher = jdbcTemplate.queryForObject(sql, 
          ParameterizedBeanPropertyRowMapper 
            .newInstance(Teacher.class),name); 


        methodResponse.setData(teacher); 




      //String sql = " Select * from Teacher where TeacherId=?"; 

      /* 
      List<Teacher> list = jdbcTemplate.query(sql, 
        ParameterizedBeanPropertyRowMapper 
          .newInstance(Teacher.class), teacherId); 

      Teacher[] teachers = list.toArray(new Teacher[] {}); 
      methodResponse.setDataArray(teachers);*/ 

      methodResponse 
        .setResponseCode(GlobalConstants.SERVICE_STATUS_CODE_SUCCESS); 
      methodResponse 
        .setResponseMessage(GlobalConstants.SERVICE_STATUS_MSG_SUCCESS); 
     } catch (Exception e) { 
      e.printStackTrace(); 
      methodResponse 
        .setResponseCode(GlobalConstants.SERVICE_STATUS_CODE_DATABASE_ERROR); 
      methodResponse.setResponseMessage(e.getMessage()); 
     } 
     return methodResponse; 
    } 

Answer 1

Le servlet est mappé sur/rest/* et ces URL ne sont pas protégées par vos filtres (donc je m'attendrais à ce que le principal soit nul). Est-ce que cela explique le comportement que vous voyez?