spring - grails/spring security-关于使所有用户都连接的问题

Question

我遵循了一篇文章，在Grails中使所有具有 Spring 安全性的连接用户受益，但是在getAllPrincipals方法中却失败了:
“消息:无法在空对象上调用方法getAllPrincipals()”

编码:

resources.groovy

import org.springframework.security.web.authentication.session.ConcurrentSessionControlStrategy
import org.springframework.security.web.session.ConcurrentSessionFilter
import org.springframework.security.core.session.SessionRegistryImpl
import org.springframework.security.web.authentication.session.SessionAuthenticationStrategy

beans = {

    sessionRegistry(SessionRegistryImpl)

    sessionAuthenticationStrategy(ConcurrentSessionControlStrategy, sessionRegistry) {
        maximumSessions = -1
    }

    concurrentSessionFilter(ConcurrentSessionFilter){
        sessionRegistry = sessionRegistry
       expiredUrl = '/login/concurrentSession'
   }
} 

web.xml

<listener>
        <listener-class>org.springframework.security.web.session.HttpSessionEventPublisher</listener-class>
</listener> 

Controller

def sessionRegistry  
def users= new ArrayList<User>(sessionRegistry.getAllPrincipals())

http://classpattern.com/spring-security-sessionregistry-on-grails.html#.U5GICfl_uhF

Answer 1

安装模板:grails install-templates

web.xml将在以下位置找到:src/templates/war

确保侦听器标记在servlet标记之前:

获取所有用户:
sessionRegistry.getAllPrincipals().collect{User.get(it.id)}