Spring WebSocket。获取访问配置Cookie

Question

我想通过STOMP，OAuth 2和SockJS通过Spring配置WebSocket。 新规格tells us如何使用拦截器来实现它。 这种情况是：如果用户通过认证，CONNECT请求的本地报头中有一个承载令牌，并且通过令牌设置主体没有问题。 但我的任务是将BrowserToken用于未经授权的用户（保存在Cookies中）。我如何从请求中获得它？

Answer 1

我已经找到了解决办法：

@Override 
public void registerStompEndpoints(StompEndpointRegistry registry) { 
    registry.addEndpoint("/websocket/tracker") 
     .withSockJS() 
     .setInterceptors(httpSessionHandshakeInterceptor()); 
} 
@Bean 
public HandshakeInterceptor httpSessionHandshakeInterceptor() { 
    return new HandshakeInterceptor() { 
     @Override 
     public boolean beforeHandshake(ServerHttpRequest request, ServerHttpResponse response, WebSocketHandler wsHandler, Map<String, Object> attributes) throws Exception { 
      if (request instanceof ServletServerHttpRequest) { 
       ServletServerHttpRequest servletServerRequest = (ServletServerHttpRequest) request; 
       HttpServletRequest servletRequest = servletServerRequest.getServletRequest(); 
       Cookie token = WebUtils.getCookie(servletRequest, "key"); 
       attributes.put("token", token.getValue()); 
      } 
      return true; 
     } 
     @Override 
     public void afterHandshake(ServerHttpRequest request, ServerHttpResponse response, WebSocketHandler wsHandler, Exception exception) { 
     } 
    }; 
} 

最后

@Override 
public void configureClientInboundChannel(ChannelRegistration registration) { 
    registration.setInterceptors(new ChannelInterceptorAdapter() { 
     @Override 
     public Message<?> preSend(Message<?> message, MessageChannel channel) { 
      StompHeaderAccessor accessor = 
       MessageHeaderAccessor.getAccessor(message, StompHeaderAccessor.class); 
      if (StompCommand.CONNECT.equals(accessor.getCommand())) { 
       Map<String, Object> sessionAttributes = accessor.getSessionAttributes(); 
       List<String> authorization = accessor.getNativeHeader("Authorization"); 
       Principal user = ... ; // get Principal using authentication/browser token 
       accessor.setUser(user); 
      } 

      return message; 
     } 
    }); 
}