如何向 Spring Security 用户详细信息添加其他详细信息

我想向用户详细信息添加其他信息，例如用户的 IP 地址。有什么办法可以实现这一点吗？我尝试创建一个新的 CustomSpringUser 类，但问题是如何从 Authentication 对象获取此信息。有没有其他方法来存储经过身份验证的用户的附加信息？

Authentication auth = SecurityContextHolder.getContext().getAuthentication();

我的自定义用户类别；

public class CustomSpringUser extends org.springframework.security.core.userdetails.User {

public String ip;

public CustomSpringUser(String username, String password, Collection<? extends GrantedAuthority> authorities) {
    super(username, password, authorities);
}

public CustomSpringUser(String username, String password, boolean enabled, boolean accountNonExpired, boolean credentialsNonExpired, boolean accountNonLocked, Collection<? extends GrantedAuthority> authorities, String ip) {
    super(username, password, enabled, accountNonExpired, credentialsNonExpired, accountNonLocked, authorities);
    this.ip= ip;
}

}

Edit:我发现我们可以为身份验证添加其他信息，但我找不到如何做到这一点。http://docs.spring.io/spring-security/site/docs/3.0.x/apidocs/org/springframework/security/core/Authentication.html#getDetails() http://docs.spring.io/spring-security/site/docs/3.0.x/apidocs/org/springframework/security/core/Authentication.html#getDetails()

@Override
public UserDetails loadUserByUsername(String userName) throws UsernameNotFoundException {
    try {

        AppUser appUser = new AppUser();
        appUser.setUsername(userName);

        AppUser domainUser = genericDao.getByTemplate(appUser).get(0);

        boolean enabled = true;
        boolean accountNonExpired = true;
        boolean credentialsNonExpired = true;
        boolean accountNonLocked = true;

        List<String> roles = new ArrayList<String>();
        roles.add(domainUser.getRole().getName());

        return new CustomSpringUser(
                domainUser.getUsername(),
                domainUser.getPassword().toLowerCase(),
                enabled,
                accountNonExpired,
                credentialsNonExpired,
                accountNonLocked,
                getGrantedAuthorities(roles),
                ***domainUser.getAccount().getIdentificationId())*** ;

    } catch (Exception e) {
        genericLogger.saveLog(Logger.Status.ERROR, "Couldn't login", e);
        throw new RuntimeException(e);
    }
}

为了得到UserDetails来自Authentication对象/实例使用getPrincipal()方法。这getDetails()方法用于获取有关用户的附加信息（通常是WebAuthenticationDetails).

Links

1. 验证javadoc http://docs.spring.io/spring-security/site/docs/3.1.4.RELEASE/apidocs/org/springframework/security/core/Authentication.html
2. 身份验证.getDetails()javadoc http://docs.spring.io/spring-security/site/docs/3.1.4.RELEASE/apidocs/org/springframework/security/core/Authentication.html#getDetails%28%29
3. Authentication.getPrincipal()javadoc http://docs.spring.io/spring-security/site/docs/3.1.4.RELEASE/apidocs/org/springframework/security/core/Authentication.html#getPrincipal%28%29