[英]RememberMe Spring Security: success handler is called multiple times
我正在通过Tomcat7运行Spring应用程序。 我在Spring中使用security.xml中的以下bean实现了“记住我”服务:
<remember-me key="SOMEKEY" user-service-ref="defaultUserService"
authentication-success-handler-ref="rememberMeAuthenticationSuccessHandler" />
我的成功控制器如下所示:
@Service
public class RememberMeAuthenticationSuccessHandler implements AuthenticationSuccessHandler {
@Autowired
private UserService userService;
private static final Logger logger = LoggerFactory.getLogger(RememberMeAuthenticationSuccessHandler.class);
public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) {
User authenticatedUser = (User)authentication.getPrincipal();
if (authenticatedUser != null) {
logger.info("Successfully auto-logged in user: " + authenticatedUser.getUsername());
authenticatedUser.setLastLogin(new Date());
userService.save(authenticatedUser);
} else {
logger.error("Auto-logged in user is empty!");
}
}
}
问题是该回调多次运行,因此我将对数据库具有四个访问权限。
日志如下所示:
2015.07.29 18:13:28 [http-bio-8080-exec-9] INFO Successfully auto-logged in user: t50@t.it
2015.07.29 18:13:28 [http-bio-8080-exec-1] INFO Successfully auto-logged in user: t50@t.it
2015.07.29 18:13:28 [http-bio-8080-exec-7] INFO Successfully auto-logged in user: t50@t.it
2015.07.29 18:13:28 [http-bio-8080-exec-6] INFO Successfully auto-logged in user: t50@t.it
我认为每个线程都有一个注册的回调。 我认为这与它是服务类型有关,但是我需要它以便自动连接userRepository
有没有办法优雅地解决此问题?
非常感谢
这是不正常的,您可以只记录有关该请求的更多信息并再次检查您的客户端代码吗?
我很确定这是多个客户来电的结果
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.