java - 检查当前用户是否通过 Spring Security 中的记住我过滤器登录

Question

如何以编程方式检查用户是否使用 Spring Security 中的记住我过滤器登录？

例如如何在 Spring Controller 中执行此操作

@RequestMapping({"/sell-all-assets"})
public String sellAllAssets(Model model, HttpServletRequest request) {
    if (isRememberMeAuthenticated()) {
        return "redirect:/login";
    } else {
        accountService.sellAllAssets(getCurrentUser());
        return "pages/myaccount";
    }
}

public static boolean isRememberMeAuthenticated() {
    ???
}

Answer 1

看起来 AuthenticationTrustResolverImpl 类包含回答我的问题的代码。在这里

public static boolean isRememberMeAuthenticated() {
    // Check authentication exists
    Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
    if (authentication == null) {
        return false;
    }

    return RememberMeAuthenticationToken.class.isAssignableFrom(authentication.getClass());
}