java - Spring Boot编码过滤器

Question

我使用 spring boot 和 spring security，我需要对请求进行编码。所以我在 spring security 中使用编码过滤器，并将其添加在其他过滤器之前。但这不起作用。我得到以下结果:

@Configuration
@EnableWebSecurity
public class SecurityJavaConfig extends WebSecurityConfigurerAdapter {

@Autowired
private MyUserDetailsService myUserDetailsService;

@Autowired
private UserDao userDao;

@Autowired
private RestAuthenticationEntryPoint restAuthenticationEntryPoint;

@Autowired
private AuthenticationSuccessHandler authenticationSuccessHandler;

@Autowired
private CustomAuthenticationFailureHandler customAuthenticationFailureHandler;

@Bean(name = "myAuthenticationManager")
@Override
public AuthenticationManager authenticationManagerBean() throws Exception {
    return super.authenticationManagerBean();
}

@Bean
public PasswordEncoder customPasswordEncoder() {
    return new PasswordEncoder() {
        @Override
        public String encode(CharSequence rawPassword) {
            return DigestUtils.md5Hex(rawPassword.toString());
        }
        @Override
        public boolean matches(CharSequence rawPassword, String encodedPassword) {
            return DigestUtils.md5Hex(rawPassword.toString()).equals(encodedPassword);
        }
    };
}

@Bean
public CustomUsernamePasswordAuthenticationFilter customUsernamePasswordAuthenticationFilter()
        throws Exception {
    CustomUsernamePasswordAuthenticationFilter customUsernamePasswordAuthenticationFilter = new CustomUsernamePasswordAuthenticationFilter(userDao);
    customUsernamePasswordAuthenticationFilter.setRequiresAuthenticationRequestMatcher(new AntPathRequestMatcher("/login", "POST"));
    customUsernamePasswordAuthenticationFilter.setAuthenticationSuccessHandler(authenticationSuccessHandler);
    customUsernamePasswordAuthenticationFilter.setAuthenticationFailureHandler(customAuthenticationFailureHandler);
    customUsernamePasswordAuthenticationFilter
            .setAuthenticationManager(authenticationManagerBean());
    return customUsernamePasswordAuthenticationFilter;
}

@Override
protected void configure(AuthenticationManagerBuilder auth)
        throws Exception {
    auth.userDetailsService(myUserDetailsService).passwordEncoder(customPasswordEncoder());
}


@Override
protected void configure(HttpSecurity http) throws Exception {
    CharacterEncodingFilter filter = new CharacterEncodingFilter();
    filter.setEncoding("UTF-8");
    filter.setForceEncoding(true);
    http.addFilterBefore(filter,CsrfFilter.class);
    //Implementing Token based authentication in this filter
    final TokenAuthenticationFilter tokenFilter = new TokenAuthenticationFilter(userDao);
    http.addFilterBefore(tokenFilter, BasicAuthenticationFilter.class);
    http.addFilterBefore(customUsernamePasswordAuthenticationFilter(), CustomUsernamePasswordAuthenticationFilter.class);

    http.csrf().disable();
    http.cors();

    http.sessionManagement()
            .sessionCreationPolicy(SessionCreationPolicy.STATELESS);
    http.exceptionHandling()
            .authenticationEntryPoint(restAuthenticationEntryPoint)
            .and()
            .authorizeRequests()
            .antMatchers("/news/create").hasAnyAuthority("ADMIN")
            .antMatchers("/news/update").hasAnyAuthority("ADMIN")
            .antMatchers("/news/update/*").hasAnyAuthority("ADMIN")
            .antMatchers("/news/delete").hasAnyAuthority("ADMIN")
            .antMatchers("/**").hasAnyAuthority("USER", "ADMIN")
            .and()
            .logout();
}

//cors configuration bean
...
}

我用了很多不同的方法来解决这个问题。但没有任何作用...我现在无法发布这个问题，因为有很多代码。很抱歉，但我必须写一些句子才能发布)谢谢

Answer 1

尝试在application.properties中添加编码配置

如下:

spring.http.encoding.charset=UTF-8
spring.http.encoding.enabled=true
spring.http.encoding.force=true

参见doc欲了解更多信息