春季第三方认证

Question

What I want is first check local database for authentication. if user is not authenticated. make a rest call with username and password to another server which returns a success message and complete user bean. which I want to store in spring security session. how can I achive this.? I tried with loadUserByUsername() method but there is no password parameter.

Answer 1

Start with this and then expand your research from there:

http://docs.spring.io/spring-security/site/docs/3.2.5.RELEASE/reference/htmlsingle/#ns-auth-manager

Answer 2

You need to implement your own version of AuthenticationProvider interface.

Inject it in your security configuration with something like:

<authentication-manager>
  <authentication-provider ref="myAuthenticationProvider" />
</authentication-manager>