java - 在 Spring Security 中配置记住我功能

Question

RememberMeConfigurer 通过调用它的方法 loadUserByUsername() 来使用 UserDetailsS​​ervice，问题是，我希望它传递用户的电子邮件而不是用户名。它适用于简单登录，但不适用于记住我选项。我怎样才能记住我将电子邮件（不是用户名）传递给 UserDetailsS​​ervice.loadUserByUsername() 的便利？登录表单：

<form action="login" method="POST" >

              <legend>Sing In</legend>

              <div class="form-group">

                <div class="input-group">
                  <label class="form-label" for="email">
                    Email
                  </label>

                  <div class="form-input-field">

                      <input id="email" name="username"
                             type="text" autocomplete="off"/>
                  </div>
                </div>

              </div>

              <div class="form-group">

                <div class="input-group">
                  <label class="form-label" for="password">
                    Password
                  </label>

                  <div class="form-input-field">

                      <input id="password" name="password"
                             type="password" autocomplete="off" />
                  </div>
                </div>

              </div>

              <div class="form-group">

              <div class="input-group">
                <label id="checkbox-label" class="form-label" for="remember">
                  Remember me
                </label>

                <div class="form-input-field">

                    <input id="remember" name="remember"
                           type="checkbox" />
                </div>

              </div>

              <div id="submit-button">

                  <input type="submit" value="Sign In" />

              </div>

      </form>

网络安全配置：

@Override
    public void configure(HttpSecurity httpSecurity) throws Exception {

        httpSecurity.formLogin()
                        .loginPage("/login")
                        .permitAll()
                        .defaultSuccessUrl("/account")
                    .and()
                        .rememberMe()
                        .key("rem-me-key")
                        .userDetailsService(userDetailsService)
                        .rememberMeParameter("remember")
                        .rememberMeCookieName("rememberMeCookie")
                        .tokenValiditySeconds(60 * 60 * 24 * 3)
                    .and()
                        .logout()
                        .deleteCookies("JSESSIONID")
                        .permitAll();

        httpSecurity.authorizeRequests()
                    .mvcMatchers("/admin").hasRole("ADMIN")
                    .mvcMatchers("/account").hasRole("CUSTOMER")
                    .mvcMatchers("/cart").hasRole("CUSTOMER")
                    .anyRequest().permitAll();


        httpSecurity.csrf()
                    .disable();

    }

UserDetailsS​​ervice 实现：

@Service
public class AppUserDetailsService implements UserDetailsService {

    private static final Logger log =
            LogManager.getLogger(AppUserDetailsService.class.getName());

    private AppUserRetrievalRepository appUserRetrievalRepository;

    public AppUserDetailsService(
            @Autowired
            AppUserRetrievalRepository appUserRetrievalRepository) {

        this.appUserRetrievalRepository = appUserRetrievalRepository;
    }

    @Override
    public UserDetails loadUserByUsername(String email)
            throws UsernameNotFoundException {

        log.info("Trying to load user by name: " + email);

        Optional<AppUser> optUser =
                appUserRetrievalRepository.getUserByEmail(email);

        UserDetails userDetails =
                new AppUserDetails(optUser.orElseThrow(
                        () -> new UsernameNotFoundException(email + " cannot be found") )
                );

        return userDetails;
    }
}

显示问题的日志：~当我使用登录而不记住我选项时：

*** LOG4J *** Trying to load user by name: [e-mail]

〜当我使用登录并选中记住我选项时：

*** LOG4J *** Trying to load user by name: cody

标签： javaspringspring-mvcspring-security