Spring Security通过会话ID获取登录用户

Question

Recently I am trying to get existing logged user by JSESSIONID with Spring Security. After tracing the source code I still cannot find the way to do this. Is it possible? Where Spring Security store the mapping between JSESSIONID and AuthUser?

Any help will be very appreciated.

Answer 1

Something like this:

@RequestMapping(value = "/userAndSession/{providedSessionId}", method = RequestMethod.GET)
public String getUserAndSessionId(UsernamePasswordAuthenticationToken principal,
            HttpServletRequest httpServletRequest, @PathVariable("providedSessionId") String sessionID) {
    // Session ID
    String sessionId = httpServletRequest.getRequestedSessionId();

    if(sessionId.equals(providedSessionId)) {
        // Username 
        String name = principal.getName();
    }

}