Question

我使用Spring Security进行身份验证。我修改了我的注释@Page，它定义了哪种类型的用户能够访问页面。

在我的验收测试之后，我开始出错：

public void login(@Named("email") String email, @Named("password") String password) {
    fillUpLoginForm(email, password);
    waitForElement(MosquitoElements.MainNavigationBar.LOGOUT);
    securityService.login(email, password); // authenticates user in test environment too
}

我发现这里有问题：

        UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken(email, password);
    getSecurityContext().setAuthentication(authenticationManager.authenticate(token));

什么可能导致问题？

错误：

org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'scopedTarget.securityContext': Scope 'session' is not active for the current thread; consider defining a scoped proxy for this bean if you intend to refer to it from a singleton; nested exception is java.lang.IllegalStateException: No thread-bound request found: Are you referring to request attributes outside of an actual web request, or processing a request outside of the originally receiving thread? If you are actually operating within a web request and still receive this message, your code is probably running outside of DispatcherServlet/DispatcherPortlet: In this case, use RequestContextListener or RequestContextFilter to expose the current request.

注释更改：

之前

boolean requiresAdminPrivileges() default false;

之后

Authorities[] requiredAuthorities();

在appliaction一切正常，只有测试有问题。

Answer 1

尝试在测试应用程序上下文中模拟会话范围：

<bean class="org.springframework.beans.factory.config.CustomScopeConfigurer">
    <property name="scopes">
    <map>
        <entry key="session">
            <bean class="org.springframework.context.support.SimpleThreadScope"/>
        </entry>
    </map>
    </property>
</bean>

验收测试期间BeanCreationException

1 个答案: