Spring Security Web检查当前经过身份验证的用户是否具有角色

Question

How i can check if currently authenticated user has a specific role?

I found some older solution for older version of spring security, but in current version in spring it's not working, so I'm looking for a solution like this but in spring-boot-starter-security version 1.5.2 .

Answer 1

verify if authorities lenght is >0 :

Collection<SimpleGrantedAuthority> authorities = (Collection<SimpleGrantedAuthority>) SecurityContextHolder.getContext().getAuthentication().getAuthorities() ;

and after compare with your role if he has roles