在RememberMeServices中获取会话 - Grails/Spring安全性

Question

我有一个实现了RememberMeServices和LogoutHandler接口的类。我已经打开会话固定并且可以选择将会话创建为true。当我试图让使用

RequestContextHolder.currentRequestAttributes（）的方法loginSuccess我的会话。的getSession（）

我得到一个错误说

java.lang.IllegalStateException: setAttribute: Session already invalidated 
    at org.apache.catalina.session.StandardSession.setAttribute(StandardSession.java:1273) 
    at org.apache.catalina.session.StandardSession.setAttribute(StandardSession.java:1238) 
    at org.apache.catalina.session.StandardSessionFacade.setAttribute(StandardSessionFacade.java:130) 
    at org.codehaus.groovy.grails.web.servlet.mvc.GrailsHttpSession.setAttribute(GrailsHttpSession.java:210) 
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
    at java.lang.reflect.Method.invoke(Method.java:597) 
    at org.codehaus.groovy.runtime.callsite.PojoMetaMethodSite$PojoCachedMethodSiteNoUnwrapNoCoerce.invoke(PojoMetaMethodSite.java:229) 
    at org.codehaus.groovy.runtime.callsite.PojoMetaMethodSite.call(PojoMetaMethodSite.java:52) 
    at org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:40) 
    at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:116) 
    at org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:128) 
    at com.teslagovernment.security.TabulaeRememberMeServices.loginSuccess(TabulaeRememberMeServices.groovy:70) 
    at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.successfulAuthentication(AbstractAuthenticationProcessingFilter.java:294) 
    at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:218) 
    at org.codehaus.groovy.grails.plugins.springsecurity.RequestHolderAuthenticationFilter.doFilter(RequestHolderAuthenticationFilter.java:40) 
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:378) 
    at org.codehaus.groovy.grails.plugins.springsecurity.MutableLogoutFilter.doFilter(MutableLogoutFilter.java:79) 
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:378) 
    at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:79) 
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:378) 
    at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:167) 

我怎样才能得到当前会话？

Answer 1

没有看到您的实际代码，也不知道您正在使用的grails版本。这听起来像你试图从某些控制器的“loginSuccess”方法获得会话？如果是这样，是不是会话简单地作为“会话”可用，而不调用该RequestContextHolder的东西？您应该可以像访问“请求”对象一样访问它，并将数据简单地填充为地图：

session.foo = "bar"