我正在尝试使用扩展 BaseAuthenticator 的 @PicketLinked 类。

我的设置是 wildfly 9.0.2.Final 上的一个 ear 项目。

我在我的 jboss-deployment-structure.xml 中使用它

<?xml version="1.0" encoding="UTF-8"?>  
<jboss-deployment-structure>  
<deployment>  
     <dependencies>  
          <!-- This will enable PicketLink Authentication/Authorization and IDM dependencies to your deployment. -->
        <module name="org.picketlink.core.api" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.core" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.idm.api" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.idm" meta-inf="import" annotations="true"/>    
        <module name="org.picketlink.common" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.idm.schema" meta-inf="import" annotations="true"/>
    </dependencies>  
</deployment> 
<sub-deployment name="prestiz-web.war">
    <dependencies>  
          <!-- This will enable PicketLink Authentication/Authorization and IDM dependencies to your deployment. -->
        <module name="org.picketlink.core.api" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.core" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.idm.api" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.idm" meta-inf="import" annotations="true"/>    
        <module name="org.picketlink.common" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.idm.schema" meta-inf="import" annotations="true"/>
    </dependencies> 
</sub-deployment>
<sub-deployment name="prestiz-ejb.jar">
    <dependencies>  
          <!-- This will enable PicketLink Authentication/Authorization and IDM dependencies to your deployment. -->
        <module name="org.picketlink.core.api" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.core" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.idm.api" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.idm" meta-inf="import" annotations="true"/>    
        <module name="org.picketlink.common" meta-inf="import" annotations="true"/>
        <module name="org.picketlink.idm.schema" meta-inf="import" annotations="true"/>
    </dependencies> 
</sub-deployment>
</jboss-deployment-structure>

我的 BaseAuthenticator 类在我的 ejb.jar 中声明如下

@RequestScoped
@PicketLink
public class PicketlinkAuthenticator extends BaseAuthenticator

我的 LoginController 配置如下:

@Path("/login")
public class LoginController {
    @Inject
    private Identity identity;

    @Inject
    private DefaultLoginCredentials credentials;

    @GET
    @Path("/dologin/{username}/{password}")
    @Produces(MediaType.TEXT_PLAIN)
    @Transactional(TxType.REQUIRED)
    public String doLogin(@PathParam("username") String username, @PathParam("password") String password){
        credentials.setUserId(username);
        credentials.setPassword(password);
        AuthenticationResult authResult=identity.login();
        if(authResult.equals(AuthenticationResult.SUCCESS)){
            return "success";
        }else{
            return "failed";
        }
    }

调用 identity.login() 后，我在日志中看到了这一点:

11:49:09,630 INFO  [org.picketlink.idm] (default task-2) PLIDM001000:  Bootstrapping PicketLink IDM Partition Manager
11:49:09,667 INFO  [org.picketlink.idm.identity.store] (default task-2) PLIDM001001: Initializing Identity Store [class org.picketlink.idm.file.internal.FileIdentityStore]
11:49:09,679 WARN  [org.picketlink.idm.identity.store.file] (default task-2) PLIDM001101: Working directory [C:\Users\bgadeyne\AppData\Local\Temp\pl-idm] is marked to be always created. All your existing data will be lost.
11:49:09,688 INFO  [org.picketlink.idm.identity.store.file] (default task-2) PLIDM001100: Using working directory [C:\Users\bgadeyne\AppData\Local\Temp\pl-idm].

我的身份 validator 的身份验证方法也有一些日志记录，但未显示。

我在这里错过了什么？

最佳答案

解决方案是您需要一个 AuthenticatorSelector 来选择您的 validator 。这允许您拥有多个身份 validator :

import javax.enterprise.context.RequestScoped;
import javax.enterprise.inject.Instance;
import javax.enterprise.inject.Produces;
import javax.inject.Inject;
import javax.inject.Named;

import lombok.Setter;
import org.picketlink.annotations.PicketLink;
import org.picketlink.authentication.Authenticator;
import org.picketlink.authentication.internal.IdmAuthenticator;



@RequestScoped
@Named
public class AuthenticatorSelector {
    @Inject private Instance<SingleSignOnAuthenticator> ssoAuthenticator;
    @Inject private Instance<IdmAuthenticator> idmAuthenticator;
    @Inject private Instance<TokenAuthenticator> tokenAuthenticator;

    @Setter private boolean singleSignOn = false; 
    @Setter private boolean tokenAuth = false; 

    public boolean getSingleSignOn() {return singleSignOn;}

    @Produces
    @PicketLink
    public Authenticator selectAuthenticator() {
        if (singleSignOn) {
            return ssoAuthenticator.get();
        } else if (tokenAuth) {
            return tokenAuthenticator.get();
        } else {
            return idmAuthenticator.get();
        }
    }

关于java - @PicketLink 注释类未在 identity.login() 中使用，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/35360818/