Spring security认证授权流程
2022-04-28 00:18:28 3 举报
登录查看完整内容
Spring security认证授权流程
作者其他创作
大纲/内容
AnonymousAuthenticationFilter
AbstractSecurityInterceptor#attemptAuthorization
DefaultSecurityFilterChain
DelegatingFilterProxyRegistrationBeanspringSecurityFilterChain
DispatchServlet.doService()
SecurityContextPersistenceFilter
ApplicationFilterChain
OrderedFormContentFilterformContentFilter
应用启动：
TokenFilter(自定义)
@Import
RequestCacheAwareFilter
WebSecurityConfiguration
AuthrizationFilter
LogoutFilter
SecurityContextHolderAwareFitlerRequestFilter
DispatchServlet.getHandler()
RequestMappingHandlerAdapter#handleInternal
认证流程：
RequestMappingHandlerAdapter#invokeHandlerMethod
HeadWriteFilter
DispatchServlet.service()
SessionManagementFilter
Spring Security 启动流程
internalDoFilter()
FilterSecurityInterceptor#beforeInvocation
SecurityAutoConfiguration
doFilter()
DispatchServlet.processRequest()
WebAsyncManagerIntegrationFilter
WebSecurityEnablerConfiguration
ExceptionTranslationFilter
setFilterChainProxySecurityConfigurer()
uri配置
ErrorPageSecurityFilter
这里只讲Spring boot 自动装配Spring Security
OrderedRequestContextFilterrequestContextFilter
OrderedCharacterEncodingFiltercharacterEncodingFilter
MethodSecurityInterceptor#beforeInvocation
InvocableHandlerMethod#doInvoke
HandlerAdapter.handle()
登录请求
AccessDecisionManager#decide
InvocableHandlerMethod#invokeForRequest
@EnableWebSecurity
org.springframework.aop.framework.CglibAopProxy.DynamicAdvisedInterceptor#intercept
AbstractHandlerMethodAdapter#handle
FilterChainProxy
注解配置
标注
DispatchServlet.doDispatch()
0 条评论
回复 删除
下一页
