security自动登陆

package*.security;

import java.util.ArrayList;

import javax.servlet.http.Cookie;

import javax.servlet.http.HttpServletRequest;

import org.apache.commons.logging.Log;

import org.apache.commons.logging.LogFactory;

import org.apache.struts2.ServletActionContext;

import org.springframework.security.authentication.AuthenticationManager;

import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;

import org.springframework.security.core.Authentication;

import org.springframework.security.core.context.SecurityContextHolder;

import org.springframework.security.core.userdetails.UserDetails;

import org.springframework.security.core.userdetails.UserDetailsService;

import org.springframework.security.core.userdetails.UsernameNotFoundException;

import org.springframework.security.web.authentication.WebAuthenticationDetails;

import com.opensymphony.xwork2.ActionSupport;

import *.security.AutoLoginFilter;

public class Login extends ActionSupport {

	private UserDetailsService userDetailService;

	private AuthenticationManager authenticationManager;

	public String poc_auto_login_user;

	public String poc_auto_login_password;

	public String errorMsg;

	private static Log log = LogFactory.getLog(AutoLoginFilter.class);

	public String login(){

		String targetUser = getPoc_auto_login_user();

//		String targetUserPassword = getPoc_auto_login_password();

		if (targetUser != null && targetUser.trim().length() > 0

//				&& targetUserPassword != null

//				&& targetUserPassword.trim().length() > 0

				) {

			Authentication oridinalAuth = SecurityContextHolder.getContext()

					.getAuthentication();

			if (oridinalAuth != null) {

				Object prin = oridinalAuth.getPrincipal();

				String user = null;

				if (prin instanceof UserDetails) {

					user = ((UserDetails) prin).getUsername();

				} else {

					user = (String) prin;

				}

				if (targetUser.equals(user)) {

					this.setErrorMsg(targetUser+"账号已经登录！！");

					log.info("尝试自动登录已经登录的账号:" + user + ",自动登录过程已经取消");

					//return INPUT;

				}

			}

			UserDetails user = null;

			// 处理自动登录逻辑，这里没有验证密码，如果要验证密码就在这里进行修改

			try {

				user = userDetailService.loadUserByUsername(targetUser);

			} catch (UsernameNotFoundException e) {

				this.setErrorMsg(targetUser+"账号不存在！！");

				log.info("由于用户账号不存在，已经取消自动登录:" + targetUser);

				//return INPUT;

			}

			// 执行登录，这里没有进行密码比较，直接进行的登录。

//			String realPassword = user.getPassword();

			if (true//targetUserPassword.equals(realPassword)

					) {

				UsernamePasswordAuthenticationToken authentication = new UsernamePasswordAuthenticationToken(

						user, user.getPassword(), new ArrayList(

								user.getAuthorities()));

				authentication.setDetails(new WebAuthenticationDetails(

						(HttpServletRequest) ServletActionContext.getRequest()));

				authentication = (UsernamePasswordAuthenticationToken) authenticationManager

						.authenticate(authentication);

				SecurityContextHolder.getContext().setAuthentication(

						authentication);

				/*HttpServletRequest req = ServletActionContext.getRequest();

				String loginParam = req.getParameter("loginParam").trim();

				if(null != loginParam && !loginParam.equals("")){

					Cookie cookie =  new Cookie("loginParam", loginParam);

					cookie.setPath("/");

					ServletActionContext.getResponse().addCookie(cookie);

				}*/

				log.info("已经自动登录账号:" + targetUser);

				return SUCCESS;

			} else {

				this.setErrorMsg(targetUser+"密码错误");

				log.info("用户密码错误:" + targetUser);

				//return INPUT;

			}

		}else{

			this.setErrorMsg("请输入用户名和密码");

		}

		return SUCCESS;

	}

	public String getPoc_auto_login_user() {

		return poc_auto_login_user;

	}

	public void setPoc_auto_login_user(String poc_auto_login_user) {

		this.poc_auto_login_user = poc_auto_login_user;

	}

	public String getPoc_auto_login_password() {

		return poc_auto_login_password;

	}

	public void setPoc_auto_login_password(String poc_auto_login_password) {

		this.poc_auto_login_password = poc_auto_login_password;

	}

	public String getErrorMsg() {

		return errorMsg;

	}

	public void setErrorMsg(String errorMsg) {

		this.errorMsg = errorMsg;

	}

	public void setUserDetailService(UserDetailsService userDetailService) {

		this.userDetailService = userDetailService;

	}

	public void setAuthenticationManager(AuthenticationManager authenticationManager) {

		this.authenticationManager = authenticationManager;

	}

}