使用自定义过滤器的MockMVC执行基本的Authentificaton点未调用DispatcherServlet

Question

我使用@AutoconFigureMockmvc，所有无授权的请求和请求，都需要身份验证完美工作（使用调用dispatcherServlet），

但是当我尝试执行Auth Auth Point（用户名，密码）以进行全面测试认证时：

var resp = mockMvc.perform(post("/api/auth")
    .content(objectMapper.writeValueAsString(requestDto))
    .andExpect(status().isOk())
    .andReturn().getResponse().getContentAsString();

之后它被处理我的所有自定义身份验证过滤器，在身份验证上创建用户删除，但是变量reves是空的。

I try to debug (CustomUsernamePasswordAuthenticationFilter = CustomFilter):

CustomFilter.attemptAuthentication
CustomFilter.doFilter
CustomFilter.successfulAuthentication
this.successHandler.onAuthenticationSuccess
ForwardAuthenticationSuccessHandler.onAuthenticationSuccess
request.getRequestDispatcher(this.forwardUrl).forward(request, response)
MockRequestDispatcher.forward

MockRequestDispatcher.forward - this mock request dispatcher return empty response

When我通过Postman而不是MockRequestDisPatcher来调用/api/auth，它被称为applicationDisPatcher来自apache及其正向方法调用real dispatcherservlet < /code>

而不是自动配置的oigmvc，而是尝试使用它，无效：

mockMvc = MockMvcBuilders.webAppContextSetup(webApplicationContext)
            .addFilters(filters)
            .build();

当我删除addfilters时，dispatcherServlet可以正常工作，但是身份验证未处理（过滤器不调用）

有人知道如何重写mockequequestDispatcher到applicationDispatcher mockmvc调用真实的dispatcherservlet和控制器？

Answer 1

我通过在Auth Filters中覆盖远期义务核心访问者来解决此问题：

@Bean
public MockMvc mockMvcWithAuthSupport(
        @Qualifier("springSecurityFilterChain") Filter springSecurityFilterChain,
        WebApplicationContext webApplicationContext
) {
    FilterChainProxy filterChain = (FilterChainProxy) springSecurityFilterChain;
    UsernamePasswordAuthenticationFilter[] filters = filterChain.getFilterChains().stream()
            .flatMap(chain -> chain.getFilters().stream())
            .filter(this::isUsernamePasswordFilter)
            .map(f -> (UsernamePasswordAuthenticationFilter) f)
            .peek(filter -> filter.setAuthenticationSuccessHandler(new MockMvcSuccessHandler()))
            .toArray(UsernamePasswordAuthenticationFilter[]::new);

    return MockMvcBuilders.webAppContextSetup(webApplicationContext)
            .addFilters(filters)
            .build();
}

自定义成功处理程序：

private class MockMvcSuccessHandler implements AuthenticationSuccessHandler {
    @Override
    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException {
        MockFilterChain filterChain = new MockFilterChain(mockMvc.getDispatcherServlet(), new Filter[0]);
        filterChain.doFilter(request, response);
    }
}