scala - 如何使用 Play Silhouette 实现无状态 cookie 身份验证？

Question

下面的链接说您可以将 CookieAuthenticator 用作无状态或有状态。

http://silhouette.mohiva.com/docs/authenticator

但我在下面的链接中看不到任何可供选择的选项。

http://silhouette.mohiva.com/v3.0/docs/config-authenticators#cookieauthenticator

我已经复制了以下示例的实现。这是无状态的还是有状态的？如果它是有状态的，我该如何实现无状态身份验证？

https://github.com/mohiva/play-silhouette-seed

Answer 1

都是正确的。

查看CookieAuthenticator.scalagithub 上的源代码：https ://github.com/mohiva/play-silhouette/blob/master/silhouette/app/com/mohiva/play/silhouette/impl/authenticators/CookieAuthenticator.scala

/**
 * The service that handles the cookie authenticator.
 *
 * @param settings The cookie settings.
 * @param repository The repository to persist the authenticator. Set it to None to use a stateless approach.
 * @param fingerprintGenerator The fingerprint generator implementation.
 * @param idGenerator The ID generator used to create the authenticator ID.
 * @param clock The clock implementation.
 * @param executionContext The execution context to handle the asynchronous operations.
 */
class CookieAuthenticatorService(
  settings: CookieAuthenticatorSettings,
  repository: Option[AuthenticatorRepository[CookieAuthenticator]],
  fingerprintGenerator: FingerprintGenerator,
  idGenerator: IDGenerator,
  clock: Clock)(implicit val executionContext: ExecutionContext)
  extends AuthenticatorService[CookieAuthenticator]

因此，您只需要CookieAuthenticatorService使用定义的存储库进行创建。

在您的示例中，您可以找到一个字符串

new CookieAuthenticatorService(config, None, fingerprintGenerator, idGenerator, clock)

这里的repository参数NonesoCookieAuthenticator是无状态的。