使用Spring Security的“记住我”选项时登录错误

Question

我使用的是Grails 1.3.4和Spring Security Core 1.0.1。

如果我选择的选项“记住我”当我登录有时当我再次加载网页它给这个错误：

errors.GrailsExceptionResolver Error executing tag <g:render>: Error executing tag <sec:ifLoggedIn>: Cannot create a session after the response has been committed at D:/Workspace/steer/grails-app/views/templates/_header.gsp:18 at D:/Workspace/steer/grails-app/views/layouts/main.gsp:29 
org.codehaus.groovy.grails.web.taglib.exceptions.GrailsTagException: Error executing tag <g:render>: Error executing tag <sec:ifLoggedIn>: Cannot create a session after the response has been committed at D:/Workspace/steer/grails-app/views/templates/_header.gsp:18 at D:/Workspace/steer/grails-app/views/layouts/main.gsp:29 
at D__Workspace_steer_grails_app_views_layouts_main_gsp$_run_closure2.doCall(D__Workspace_steer_grails_app_views_layouts_main_gsp:66) 
at D__Workspace_steer_grails_app_views_layouts_main_gsp$_run_closure2.doCall(D__Workspace_steer_grails_app_views_layouts_main_gsp) 
at D__Workspace_steer_grails_app_views_layouts_main_gsp.run(D__Workspace_steer_grails_app_views_layouts_main_gsp:75) 
at java.lang.Thread.run(Thread.java:662) 
Caused by: org.codehaus.groovy.grails.web.taglib.exceptions.GrailsTagException: Error executing tag <sec:ifLoggedIn>: Cannot create a session after the response has been committed at D:/Workspace/steer/grails-app/views/templates/_header.gsp:18 
at D__Workspace_steer_grails_app_views_templates__header_gsp.run(D__Workspace_steer_grails_app_views_templates__header_gsp:35) 
... 4 more 
Caused by: java.lang.IllegalStateException: Cannot create a session after the response has been committed 
at D__Workspace_steer_grails_app_views_templates__header_gsp$_run_closure1.doCall(D__Workspace_steer_grails_app_views_templates__header_gsp:22) 
at D__Workspace_steer_grails_app_views_templates__header_gsp$_run_closure1.doCall(D__Workspace_steer_grails_app_views_templates__header_gsp) 
at grails.plugins.springsecurity.SecurityTagLib$_closure6.doCall(SecurityTagLib.groovy:130) 
... 5 more 

有谁知道为什么我得到这个错误？

_Hearer.gsp

 <%@ page import="com.mycompany.myapp.partymodel.roles.SystemUserRole" %> 
    <sec:ifLoggedIn> 
    <% 
    def userId = session.SPRING_SECURITY_CONTEXT?.authentication?.principal?.id 
    def userDetails = SystemUserRole.get(userId) 
    %> 
    <div class="mast_head"> 
     <ul> 
      <li>Welcome ${userDetails?.party?.firstName}</li> 
      <li> | </li> 
      <li><a href="${createLink(controller: "systemUserRole", action: "editprofile")}">Profile</a></li> 
      <li> | </li> 
      <li><a href="${createLink(controller: "systemUserRole", action: "changepassword")}">Edit Password</a></li> 
      <li> | </li> 
      <li><a href="${createLink(controller: "logout", action: "index")}">Sign Out</a></li> 
     </ul> 
    </div> 
    </sec:ifLoggedIn> 
    <div id="grailsLogo" class="logo"> 
     <a href="http://www.mycompany.in/"><img src="${resource(dir:'images',file:'mycompany_trans.png')}" alt="Grails" border="0" height=67 /></a> 
    </div> 

LayoutTagLib.groovy

 package com.mycompany.myapp.layout 
    import com.mycompany.myapp.trips.Trip 

    class LayoutTagLib { 
     static namespace = "my" 

      def header = { attrs -> 
      Trip.withNewSession { 
       sec.ifLoggedIn() { 
       out << "<div class="mast_head"> 
     <ul> 
      <li>Welcome ${userDetails?.party?.firstName}</li> 
      <li> | </li> 
      <li><a href="${createLink(controller: "systemUserRole", action: "editprofile")}">Profile</a></li> 
      <li> | </li> 
      <li><a href="${createLink(controller: "systemUserRole", action: "changepassword")}">Edit Password</a></li> 
      <li> | </li> 
      <li><a href="${createLink(controller: "logout", action: "index")}">Sign Out</a></li> 
     </ul> 
    </div>" 
       } 
      } 
      } 
    } 

Answer 1

我觉得这是一个有关，因为它是由SiteMesh的休眠处理后使用的那种标签layouts限制会议提交。

解决方案是在会话中封装（withNewSession关闭域类）。喜欢的东西：

LayoutTagLib是一个标签库，你也可以用命令创建创建，标签库

grails create-tag-lib com.app.layout.LayoutTagLib 

重要：与任何现有的域类应用程序的更换“SomeDomain”。

class LayoutTagLib { 
    static namespace = "my" 

    def header = { attrs -> 
    SomeDomain.withNewSession { 
     sec.ifLoggedIn() { 
     out << "Logged In" 
     } 
    } 
    } 
} 

out是将在页面中打印的html。因此，可以使用头文件模板中的任何内容进行更改。

那么你有一个_header.gsp是否正确？只需用您的taglib调用替换<sec:ifLoggedIn>块。

<my:header /> 

编辑：

你需要用你的查询的该withNewSession内。也可以从头文件中移除内容，只需调用taglib即可。要获取用户数据，您可以使用springSecurityService。

package com.mycompany.myapp.layout 
import com.mycompany.myapp.trips.Trip 

class LayoutTagLib { 
    //dependency injection of the plugin service 
    def springSecurityService 

    static namespace = "my" 

     def header = { attrs -> 

     Trip.withNewSession { 

      sec.ifLoggedIn() { 

      def userId = springSecurityService.currentUser.id 
      def userDetails = SystemUserRole.get(userId) 

      //better transform this in a private method or a template! 
      out << """<div class="mast_head"> 
       <ul> 
       <li>Welcome ${userDetails?.party?.firstName}</li> 
       <li> | </li> 
       <li><a href="${createLink(controller: "systemUserRole", action: "editprofile")}">Profile</a></li> 
       <li> | </li> 
       <li><a href="${createLink(controller: "systemUserRole", action: "changepassword")}">Edit Password</a></li> 
       <li> | </li> 
       <li><a href="${createLink(controller: "logout", action: "index")}">Sign Out</a></li> 
       </ul> 
      </div>"""    
      } 
     } 
     } 
} 

_header.gsp

<my:header/> <!-- This line will call your taglib!! --> 
<div id="grailsLogo" class="logo"> 
     <a href="http://www.mycompany.in/"><img src="${resource(dir:'images',file:'mycompany_trans.png')}" alt="Grails" border="0" height=67 /></a> 
    </div>