RestAPIKeyAuthenticationFilter.java 文件源码

@Override
public Authentication attemptAuthentication(HttpServletRequest request,
        HttpServletResponse response) throws AuthenticationException,
        IOException, ServletException {

    String apiKeyValue = decodeParameterValue(request, API_KEY_PARAMETER_NAME);
    logger.debug("attemptAuthentication " + apiKeyValue);

    AbstractAuthenticationToken authRequest = createAuthenticationToken(
            apiKeyValue, new RestCredentials());

    // Allow subclasses to set the "details" property
    setDetails(request, authRequest);

    return this.getAuthenticationManager().authenticate(authRequest);
}