CustomAuthenticationProvider.java 文件源码

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {

    String username = authentication.getName().trim();
    String password = authentication.getCredentials().toString().trim();

    try {
        User storedCredentials = userService.testCredentials(username, password);

        // if user is authenticated return Spring authentication
        if (storedCredentials != null) {
            return new UsernamePasswordAuthenticationToken(username, storedCredentials.getPassword(),
                    Arrays.asList(new SimpleGrantedAuthority(storedCredentials.getRole().toString())));
        }

    } catch (IOException e) {
        logger.error("Error while accessing database", e);
    }

    throw new BadCredentialsException("Bad credentials");
}