how to get user info from session?

[minikiller]

i select WebWork as my web framework, i want to know if i can get user detail info from session. I woder where can i process in this situation.thanks

[af6140]

SecureContext.getAuthentication().getPrincipal().g etUserName()

[Ben Alex]

Don't forget to cast:

((UserDetails) ((SecureContext) ContextHolder.getContext()).getAuthentication().getPrincipal()).getUsername();

[scott.tian]

Don't forget to cast:

((UserDetails) ((SecureContext) ContextHolder.getContext()).getAuthentication().getPrincipal()).getUsername();

[Ben Alex]

Generally people use DaoAuthenticationProvider with Acegi Security, which puts the UserDetails returned by the AuthenticationDao into the Authentication object. If you have a look at the JavaDocs for the DaoAuthenticationProvider and AuthenticationDao, where the UserDetails comes from will make a lot more sense.

[blaiseg]

Hi All,

Ok, it's really easy to retrieve the UserDetails. But I want to write an app that isn't too much coupled with Spring.

Is there another way to retrieve the UserDetail from the session ? Maybe with something like

HttpSession session = request.getSession();
session.getAttribute("SPRING_USER_DETAILS");

I have seen that the session has an attribute "SPRING_SECURITY_CONTEXT" of type org.springframework.security.context.SecurityConte xtImpl, is it bad to retrieve the context from the session ?

If it is, why is it ? If it isn't is there a way to externalize that key ?


Edit : Actually I have written a static method into a personnal AuthorizationManager

public static User getPrincipal(HttpSession session) {
  // Do nothing with the session because Spring give us a better way to retrieve the principal
  return (User) ((SecurityContext) 
    SecurityContextHolder.getContext()).getAuthentication().getPrincipal();
}

, so if later my boss tell me to remove Spring from the project I have juste to rewrite this method. But I don't really like that.

[oni_FFM]

public static User getPrincipal(HttpSession session) {
// Do nothing with the session because Spring give us a better way to retrieve the principal
return (User) ((SecurityContext)
SecurityContextHolder.getContext()).getAuthenticat ion().getPrincipal();
}

thanks blaiseg. It works fine. you rescued me