RememberMe Spring Security：成功處理程序被多次調用

Question

我正在通過Tomcat7運行Spring應用程序。 我在Spring中使用security.xml中的以下bean實現了“記住我”服務：

<remember-me key="SOMEKEY" user-service-ref="defaultUserService"
             authentication-success-handler-ref="rememberMeAuthenticationSuccessHandler" />

我的成功控制器如下所示：

@Service
public class RememberMeAuthenticationSuccessHandler implements AuthenticationSuccessHandler {
    @Autowired
    private UserService userService;

    private static final Logger logger = LoggerFactory.getLogger(RememberMeAuthenticationSuccessHandler.class);

    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) {
        User authenticatedUser = (User)authentication.getPrincipal();

        if (authenticatedUser != null) {
            logger.info("Successfully auto-logged in user: " + authenticatedUser.getUsername());
            authenticatedUser.setLastLogin(new Date());
            userService.save(authenticatedUser);
        } else {
            logger.error("Auto-logged in user is empty!");
        }
    }
}

問題是該回調多次運行，因此我將對數據庫具有四個訪問權限。

日志如下所示：

2015.07.29 18:13:28 [http-bio-8080-exec-9] INFO  Successfully auto-logged in user: t50@t.it
2015.07.29 18:13:28 [http-bio-8080-exec-1] INFO  Successfully auto-logged in user: t50@t.it
2015.07.29 18:13:28 [http-bio-8080-exec-7] INFO  Successfully auto-logged in user: t50@t.it
2015.07.29 18:13:28 [http-bio-8080-exec-6] INFO  Successfully auto-logged in user: t50@t.it

我認為每個線程都有一個注冊的回調。 我認為這與它是服務類型有關，但是我需要它以便自動連接userRepository

有沒有辦法優雅地解決此問題？

非常感謝

Answer 1

這是不正常的，您可以只記錄有關該請求的更多信息並再次檢查您的客戶端代碼嗎？

我很確定這是多個客戶來電的結果