Spring 安全性：在方法中获取经过身份验证的用户

Question

I am trying to get back the current authenticated user in a service class with:

Object principal = SecurityContextHolder.getContext().getAuthentication().getPrincipal();

but it returns me a String username instead of a user object.

What should I do to have the user object?

Answer 1

An example of how to get the authenticated user in Controller using @AuthenticationPrincipal :

import org.springframework.security.core.annotation.AuthenticationPrincipal;
import org.springframework.security.core.userdetails.User;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;

@RestController
public class MyController {
    @GetMapping
    public void getUser(@AuthenticationPrincipal User activeUser) {
        System.out.println("user name is "+activeUser.getUsername());
    }
}