Spring Security を使用するアプリケーションで facebook ログイン + DB 認証を使用したいと考えています。
そのため、次のようなリクエストを送信する index.jsp ページに fb ボタンを 1 つ追加しました。
function testAPI() {
console.log('Welcome! Fetching your information.... ');
FB.api('/me', function(response) {
console.log('Good to see you, ' + response.name + '.' + response.email);
window.location = "<%=request.getContextPath()%>/j_spring_facebook_security_check";
});
}
applicationContext-Security.xml:
<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans">
//spring security 3.
<security:http auto-config="true" use-expressions="true" access-denied-page="/accessDenied.jsp">
<security:form-login login-page="/index.jsp"
default-target-url="/jsp/home.jsp"
authentication-failure-handler-ref="authenticationFailureHandler"/>
<security:intercept-url pattern="/jsp/listInBetweenPlaces.jsp"
access="permitAll" />
<security:intercept-url pattern="/jsp/home.jsp"
access="permitAll" />
<security:intercept-url pattern="/index.jsp"
access="permitAll" />
<security:intercept-url pattern="/jsp/*"
access="isAuthenticated()" />
<security:logout logout-url="/j_spring_security_logout" logout-success-url="/index.jsp?logout=success"
invalidate-session="true" />
<security:custom-filter before="FORM_LOGIN_FILTER"
ref="facebookAuthenticationFilter" />
</security:http>
<bean id="facebookAuthenticationFilter" class="org.springframework.security.facebook.FacebookAuthenticationFilter">
<property name="authenticationManager" ref="authenticationManager"/>
<property name = "authenticationSuccessHandler">
<bean class = "org.springframework.security.web.authentication.SimpleUrlAuthenticationSuccessHandler">
<property name = "defaultTargetUrl" value = "/jsp/home.jsp" />
<property name = "alwaysUseDefaultTargetUrl" value = "true" />
</bean>
</property>
<property name = "authenticationFailureHandler">
<bean class = "org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler">
<property name = "defaultFailureUrl" value = "/fb/failure.jsp" />
</bean>
</property>
</bean>
<bean id="authenticationProviderFacebook" class="org.springframework.security.facebook.FacebookAuthenticationProvider">
<property name="roles" value="ROLE_FACEBOOK_USER" />
</bean>
<bean id="facebookHelper" class="org.springframework.security.facebook.FacebookHelper">
<property name="apiKey" value="my_api_key" />
<property name="secret" value="my_secret_key" />
</bean>
<bean id="customUserDetailsService" class="com.onmobile.carpool.authentication.CustomUserDetailsService">
<!-- <property name="carpoolService" ref="carpoolServiceImpl" /> -->
</bean>
<security:authentication-manager alias="authenticationManager">
<security:authentication-provider user-service-ref="customUserDetailsService">
<security:password-encoder hash="md5" />
</security:authentication-provider>
<security:authentication-provider ref="authenticationProviderFacebook">
</security:authentication-provider>
</security:authentication-manager>
</beans>
FacebookAuthenticationFilter.java:
public class FacebookAuthenticationFilter extends
AbstractAuthenticationProcessingFilter implements
ApplicationContextAware {
public static final String DEFAULT_FILTER_PROCESS_URL = "/j_spring_facebook_security_check";
private FacebookHelper facebookHelper = null ;
private ApplicationContext ctx;
protected FacebookAuthenticationFilter() {
super(DEFAULT_FILTER_PROCESS_URL);
}
public Authentication attemptAuthentication(HttpServletRequest req,
HttpServletResponse res) throws AuthenticationException,
IOException, ServletException {
HttpServletRequest request = (HttpServletRequest) req;
HttpServletResponse response = (HttpServletResponse) res;
if(facebookHelper == null){
facebookHelper = (FacebookHelper) ctx
.getBean("facebookHelper");
}
Long uid = null;
String sessionkey = null ;
try {
uid = facebookHelper.getLoggedInUserId(request, response);
sessionkey = facebookHelper.lookupSessionKey(request);
} catch (FacebookUserNotConnected e) {
throw new AuthenticationCredentialsNotFoundException(
"Facebook user not connected", e);
}
FacebookAuthenticationToken token = new FacebookAuthenticationToken(uid);
token.setSessionkey(sessionkey);
token.setDetails(authenticationDetailsSource.buildDetails(request));
AuthenticationManager authenticationManager = getAuthenticationManager();
Authentication authentication = authenticationManager
.authenticate(token);
return authentication;
}
public void setApplicationContext(ApplicationContext ctx)
throws BeansException {
this.ctx = ctx;
}
public FacebookHelper getFacebookHelper() {
return facebookHelper;
}
public void setFacebookHelper(FacebookHelper facebookHelper) {
this.facebookHelper = facebookHelper;
}
}
私はいつもこの呼び出しに問題があります:
uid = facebookHelper.getLoggedInUserId(request, response);
getLoggedInUserIdFacebookHelper.javaの詳細:
public Long getLoggedInUserId(HttpServletRequest request,
HttpServletResponse response) throws FacebookUserNotConnected {
FacebookWebappHelper<Document> facebook = new FacebookWebappHelper<Document>(
request, response, apiKey, secret);
Long uid = facebook.getUser();
if (uid == null)
throw new FacebookUserNotConnected(
"Facebook user id could not be obtained");
return uid;
}
以下の行は常に null と評価されるため、例外がスローされます。
Long uid = facebook.getUser();
以下のリンクからFacebook関連のクラスを受講しました。
私の必要性は、ユーザーがDBチェックまたはFB認証を介してアプリにログインできるようにすることです。
私はこれを進めることができません.誰かが私が欠けているものを指摘してもらえますか. 私は常にfailure.jspにリダイレクトされています。FB アカウントで有効にする必要があるものはありますか? または、UI からフィルターに間違ったデータを渡していますか?
これに関する完全なチュートリアルをどこにも見つけることができません。誰かが正しいリンクを指摘できますか。