我认为基本控制器不是一个好主意,如果它唯一的代码是用于 UserAuthentication ......而不是使用 Spring 安全性。这是最好的选择。
或者,您可以使用这样的方法......看看 Spring 参考......
@Controller("loginController")
public class LoginController {
@RequestMapping(value="/login.do", method=RequestMethod.POST)
public String login(Model model, HttpServletRequest request) {
String userIdFromRequest = (String)request.getParameter("userId");
String password = (String)request.getParameter("password");
boolean verified = ...send userIdFromRequest and password to the user service for
verification...
if (verified){
request.getSession().setAttribute("userId", userIdFromRequest);
}
}
//More Methods
}
有帮助吗?
-SB