Get access to HttpServletRequest within a custom AuthenticationProvider

Question

How do I get access to HttpServletRequest within a custom AuthenticationProvider. I have tried doing this

RequestAttributes requestAttributes = RequestContextHolder.getRequestAttributes();

HttpServletRequest request = ((ServletRequestAttributes) requestAttributes).getRequest();
String username = (String) httpReq.getAttribute("j_username");

OR

RequestAttributes requestAttributes = RequestContextHolder.getRequestAttributes();
HttpServletRequest httpReq = ((ServletRequestAttributes)RequestContextHolder.currentRequestAttributes()).getRequest();

String username = (String) httpReq.getAttribute("j_username");

i am getting username null

but RequestContextHolder.getRequestAttributes(); returns null.

I want to reference the requestcontext, pass it in, or have Spring do its Magic so I can reference it.

I am also giving the RequestContextListener in my web.xml

  <listener>
    <listener-class>org.springframework.web.context.request.RequestContextListener</listener-class>
  </listener>

I have searched the security forum but still havent found anything yet.

Thanks in advance.

Shouldn't those credentials be contained within the Authentication object? static.springsource.org/spring-security/site/docs/3.0.x/apidocs/… — dardo
– dardo, Commented Jul 5, 2012 at 18:09
Dardo is correct. I think you should probably look at some basic samples and read some of the documentation, then explain in more detail what you are trying to achieve, because I can't think of a valid reason for trying to access the username in this way. — Shaun the Sheep
– Shaun the Sheep, Commented Jul 8, 2012 at 14:26
The credentials will indeed be in the Authentication object. However, I'm also looking for a solution. I too need to access the request but for another reason. In my app the URL plays a role in the authentication. Any ideas on how to get it in this class? — Wouter
– Wouter, Commented Apr 20, 2014 at 8:27

Abel ANEIROS · Accepted Answer · 2013-02-04 12:29:19Z

9

I just added the listener to my web.xml and RequestContextHolder.getRequestAttributes() returns the RequestAttributes instead of null.

<listener>
  <listener-class>org.springframework.web.context.request.RequestContextListener</listener-class>
</listener>

If you want to customize you login form, why you don't extend this filter: org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter

answered Feb 4, 2013 at 12:29

Abel ANEIROS

6,5343 gold badges28 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Javien · Accepted Answer · 2024-11-10 08:01:30Z

0

I've tested on 3.3 version.

Add RequestContextFilter

.addFilterBefore(new RequestContextFilter(), myFilter)

Register RequestContextListener

@Configuration
public class WebConfig {

    @Bean
    RequestContextListener requestContextListener() {
        return new RequestContextListener();
    }
}

It's the same method as the answer above, but it uses java configuration.

answered Nov 10, 2024 at 8:01

Javien

1882 silver badges9 bronze badges

Comments

Nilam Patil - Naik · Accepted Answer · 2014-12-03 07:59:40Z

-3

Use request.getParameter("j_username"); instead of request.getAttribute("j_username");

It works for me. See if it helps you.

answered Dec 3, 2014 at 7:59

Nilam Patil - Naik

751 gold badge2 silver badges15 bronze badges

Collectives™ on Stack Overflow

Get access to HttpServletRequest within a custom AuthenticationProvider

3 Answers 3

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related