what's the authenticati object saved in session after logon?

[creatxr]

what's the authentication object saved in session after logon?

[Ben Alex]

See HttpSessionContextIntegrationFilter, which also provides an ACEGI_SECURITY_CONTEXT_KEY for your convenience.

[creatxr]

what's the type of object stored in session?

is it myself implemented UserDetails?

[Ben Alex]

Your UserDetails (as returned by AuthenticationDao) is accessible from the Authentication object's getPrincipal() method. You can get the Authentication from the ContextHolder. Please note from 0.9.0 (and current CVS) the ContextHolder has been refactored and you'll need to use SecurityContext.getAuthentication() instead.

[creatxr]

could you show me a exmaple?

such as

ContextHolder ccc = (ContextHolder)session.getAttribute("KEY")
ccc.getXXX

to get myself UserDetailsImpl Object



thanks.

[Ben Alex]

For release 0.8.2 and earlier:

UserDetails userDetails = (UserDetails) ((SecureContext)ContextHolder.getContext()).getAuthentication().getPrincipal()

For release 0.9.0 and above (and current CVS):

UserDetails userDetails = (UserDetails) SecurityContextHolder.getContext().getAuthentication().getPrincipal()