0

我正在尝试使用 sitemesh 在屏幕上将内容拉到一起。您必须“登录”到站点才能查看站点网格正在显示的页面，并且您必须登录才能查看站点网格试图拉入和装饰的组件。

我正在使用 spring security 和 PersistentTokenBasedRememberMeServices 来做到这一点。发生的情况是，当站点网格调用以获取其组件进行装饰时，即使用户已登录并可以访问该页面，它也会获得由 Spring Security 提供的登录屏幕而不是内容。

挖掘站点网格代码，站点网格正在创建一个 URL 和一个 URLconnection 来调用装饰。

URL url = new URL(this.page);

URLConnection urlConn = url.openConnection();

urlConn.setUseCaches(true);

BufferedReader in = new BufferedReader(new InputStreamReader(urlConn.getInputStream()));

所以我想我的问题是......我可以像这样将弹簧安全令牌附加到 urlConnection 吗？

URL url = new URL(page);
URLConnection urlConn = url.openConnection();
urlConn.setRequestProperty("Cookie", myCookie);
urlConn.setUseCaches(true);
urlConn.connect();

If so, what does the format of the cookie need to be? I've tried what is below (the gibberish is the value of the security cookie generated by spring security)

securityCookie=Y2E0cFR1WWp6RTRjTzRBSFhYaG50dz09OjR mNzlON2syVXh3M01BSXRONGV2QXc9PQ

It doesn't work as I get a cookie theft exception from Spring Security. Any ideas? Do I need to add the path or domain? If so what is the format?

Does the cookie value need to be encoded in some way?

4

0 回答 0