Glassfish JDBCRealm and request.login()

Question

我在使用 realm 和 request.login（） 登录用户时遇到了一些问题，我发现了一些类似的问题，但没有一个能解决我的问题。

登录.xhtml

        <h:form>
            <h:outputLabel for="usernameInput">
                #{bundle['login.email']}:
            </h:outputLabel>
            <h:inputText id="usernameInput" value="#{loginBean.email}" 
                         required="true" />
            <br />
            <h:outputLabel for="passwordInput">
                #{bundle['login.password']}:
            </h:outputLabel>
            <h:inputSecret id="passwordInput" value="#{loginBean.password}" 
                           required="true" />
            <br />
            <h:commandButton value="${bundle['login.submit']}" 
                             action="#{loginBean.login}" />
        </h:form>

登录豆.java

@Stateless
@Named
public class LoginBean {
@EJB
private UserFacadeREST ejbRef;
private String email;
private String password;
public String getEmail() {
    return this.email;
}
public void setEmail(String email) {
    this.email = email;
}
public String getPassword() {
    return this.password;
}
public void setPassword(String password) {
    this.password = password;
}
public String login() {
    FacesContext context = FacesContext.getCurrentInstance();
    HttpServletRequest request = (HttpServletRequest)
                                context.getExternalContext().getRequest();
    User user = getUser(this.email);
    if (user != null) {
        hashPassword();
        context.addMessage(null, new FacesMessage(this.email));
        context.addMessage(null, new FacesMessage(this.password));
        context.addMessage(null, new FacesMessage(user.getEmail()));
        context.addMessage(null, new FacesMessage(user.getPassword()));
        if (user.getPassword().equals(this.password)) {
            try {
                request.login(this.email, this.password);
            } catch (ServletException e) {
                context.addMessage(null, new FacesMessage("Login failed."));
                return "error";
            }
            return "admin/index";
        } else {
            context.addMessage(null, new FacesMessage("Incorrect password"));
        }
    } else {
        context.addMessage(null, new FacesMessage("There is no account "
                                                    + "with that email"));
    }
    return "error";
}
public void logout() {
    FacesContext context = FacesContext.getCurrentInstance();
    HttpServletRequest request = (HttpServletRequest)
                                context.getExternalContext().getRequest();
    try {
        request.logout();
    } catch (ServletException e) {
        context.addMessage(null, new FacesMessage("Logout failed."));
    }
}
private User getUser(String email) {
    try {
        User user = (User) getEntityManager().
                            createNamedQuery("User.findByEmail").
                            setParameter("email", email).
                            getSingleResult();
        return user;
    } catch (NoResultException e) {
        System.err.println("NoResultException" + e.getMessage());
        return null;
    }
}
public EntityManager getEntityManager() {
    return ejbRef.getEntityManager();
}
/*
 * md5 password. 
 */
public void hashPassword(){
    try {
        byte[] hash = this.password.getBytes();
        MessageDigest md = MessageDigest.getInstance("md5");
        hash = md.digest(hash);
        StringBuilder hexString = new StringBuilder();
        for (int i = 0; i < hash.length; i++) {
            if ((0xff & hash[i]) < 0x10) {
                hexString.append("0").append(Integer.toHexString((0xFF & hash[i])));
            } else {
                hexString.append(Integer.toHexString(0xFF & hash[i]));
            }
        }
        String md5Password = hexString.toString();
        setPassword(md5Password);
    } catch (NoSuchAlgorithmException ex) {
        Logger.getLogger(UserController.class.getName()).log(Level.SEVERE, null, ex);
    }
}

}

网络.xml

    <?xml version="1.0" encoding="UTF-8"?>
    <web-app version="3.1" xmlns="http://xmlns.jcp.org/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd">
    <context-param>
        <param-name>javax.faces.PROJECT_STAGE</param-name>
        <param-value>Development</param-value>
    </context-param>
    <servlet>
        <servlet-name>Faces Servlet</servlet-name>
        <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>Faces Servlet</servlet-name>
        <url-pattern>/faces/*</url-pattern>
    </servlet-mapping>
    <login-config>
        <auth-method>FORM</auth-method>
        <realm-name>JDBCRealm</realm-name>
        <form-login-config>
            <form-login-page>/Login.xhtml</form-login-page>
            <form-error-page>/Login.xhtml</form-error-page>
        </form-login-config>
    </login-config>
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>Secure Pages</web-resource-name>
            <description/>
            <url-pattern>/admin/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>ADMIN</role-name>
        </auth-constraint>
    </security-constraint> 
    <session-config>
        <session-timeout>
            30
        </session-timeout>
    </session-config>
    <welcome-file-list>
        <welcome-file>faces/index.xhtml</welcome-file>
    </welcome-file-list>
</web-app>

玻璃鱼网.xml

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE glassfish-web-app PUBLIC "-//GlassFish.org//DTD GlassFish Application Server         3.1 Servlet 3.0//EN" "http://glassfish.org/dtds/glassfish-web-app_3_0-1.dtd">
<glassfish-web-app error-url="">
  <class-loader delegate="true"/>
  <jsp-config>
    <property name="keepgenerated" value="true">
      <description>Keep a copy of the generated servlet class' java code.</description>
    </property>
  </jsp-config>
  <security-role-mapping>
    <role-name>USERS</role-name>
    <group-name>USERS</group-name>
  </security-role-mapping>
  <security-role-mapping>
    <role-name>ADMINS</role-name>
    <group-name>ADMINS</group-name>
  <principal-name>berry</principal-name>
  </security-role-mapping>
</glassfish-web-app>

领域设置：

Realm Name : JDBCRealm
Class Name : com.sun.enterprise.security.ee.auth.realm.jdbc.JDBCRealm
JAAS Context:jdbcRealm
JNDI: mysql/blueberrysoup
User Table: user
User Name Column: email
Password Column: password
Group Table: groups
Group Name Column: role_name
Password Encryption Algorithm: MD5
Digest Algorithm: MD5
Charset: UTF-8

最后是玻璃鱼抛出的异常：

WARNING:   No Principals mapped to Role [ADMIN].
INFO:   Loading application [blueberrysoup] at [/blueberrysoup]
INFO:   blueberrysoup was successfully deployed in 3,944 milliseconds.
WARNING:   WEB9102: Web Login Failed:    com.sun.enterprise.security.auth.login.common.LoginException: Login failed: Security   Exception
WARNING:   JSF1064: Unable to find or serve resource, /user/error.xhtml.

Answer 1

我认为这是线索：WARNING: No Principals mapped to Role [ADMIN]..

在您的 web.xml 文件中，您有：

<auth-constraint>
        <role-name>ADMIN</role-name>
</auth-constraint>

在您的玻璃鱼网中.xml文件中，您有：

<security-role-mapping>
<role-name>ADMINS</role-name>
<group-name>ADMINS</group-name>

当我理解这种机制时，您必须将角色从 web.xml映射到 glassfish-web 中的组名.xml。两个文件中的角色名称应相同。还要检查数据库表中给定用户的角色名称是否正确。

在这里，您有一些资源：

https://netbeans.org/kb/docs/web/security-webapps.htmlhttps://netbeans.org/kb/docs/javaee/ecommerce/security.html