聊聊SecurityContextPersistenceFilter

look_w

序

本文主要研究下SecurityContextPersistenceFilter的作用。
filter顺序

spring security内置的各种filter：
Alias     Filter Class     Namespace Element or Attribute
CHANNEL_FILTER     ChannelProcessingFilter     http/intercept-url@requires-channel
SECURITY_CONTEXT_FILTER     SecurityContextPersistenceFilter     http
CONCURRENT_SESSION_FILTER     ConcurrentSessionFilter     session-management/concurrency-control
HEADERS_FILTER     HeaderWriterFilter     http/headers
CSRF_FILTER     CsrfFilter     http/csrf
LOGOUT_FILTER     LogoutFilter     http/logout
X509_FILTER     X509AuthenticationFilter     http/x509
PRE_AUTH_FILTER     AbstractPreAuthenticatedProcessingFilter Subclasses     N/A
CAS_FILTER     CasAuthenticationFilter     N/A
FORM_LOGIN_FILTER     UsernamePasswordAuthenticationFilter     http/form-login
BASIC_AUTH_FILTER     BasicAuthenticationFilter     http/http-basic
SERVLET_API_SUPPORT_FILTER     SecurityContextHolderAwareRequestFilter     http/@servlet-api-provision
JAAS_API_SUPPORT_FILTER     JaasApiIntegrationFilter     http/@jaas-api-provision
REMEMBER_ME_FILTER     RememberMeAuthenticationFilter     http/remember-me
ANONYMOUS_FILTER     AnonymousAuthenticationFilter     http/anonymous
SESSION_MANAGEMENT_FILTER     SessionManagementFilter     session-management
EXCEPTION_TRANSLATION_FILTER     ExceptionTranslationFilter     http
FILTER_SECURITY_INTERCEPTOR     FilterSecurityInterceptor     http
SWITCH_USER_FILTER     SwitchUserFilter     N/A

    可以看到SecurityContextPersistenceFilter优先级仅次于ChannelProcessingFilter