grails - Grails Spring 开关用户

Question

我对j_spring_security_switch_user有问题，因为我只能在具有ROLE_SWITCH_USER角色的用户之间切换。

我可以更改它，以便它可以从具有ROLE_USER角色的用户切换到具有ROLE_SWITCH_USER的用户吗？

Answer 1

我通过以下方式解决了它:

创建文件MySwichUserFilter.groovy:

class MySwichUserFilter extends SwitchUserFilter {

    protected Authentication attemptSwitchUser(HttpServletRequest request) throws AuthenticationException {

        Authentication switchTo = super.attemptSwitchUser(request);
        SecurityContextHolder.getContext().getAuthentication();

        return switchTo;
    }
}

更正resources.groovy

beans = {
    ...
    switchUserProcessingFilter(MySwichUserFilter){
        userDetailsService  = ref('userDetailsService')
        switchUserUrl       = "/j_spring_security_switch_user"
        exitUserUrl         = "/j_spring_security_exit_user"
        targetUrl           = conf.successHandler.defaultTargetUrl
    }
    ...
}