spring-security(七)
摘自《pro spring security》基于spring security 4.2.2.RELEASE
SecurityContext and SecurityContextHolder
org.springframework.security.core.context.SecurityContext
(实际上是它的实现类SecurityContextImpl
),就是spring security存储有效Authentication object
的地方,并且与当前线程绑定。org.springframework.security.core.context.SecurityContextHolder
是可以在框架中用来去访问SecurityContext
,代理了可配置策略去处理这些SecurityContext
,比如线程绑定的SecurityContext
(默认),或者是全局的SecurityContext
public interface SecurityContext extends Serializable {
Authentication getAuthentication();
void setAuthentication(Authentication authentication);
}