0
我有一个自定义的InjectionProvider,它从SecurityContext中检索User
对象并使其可用。自定义ResourceFilter
执行HTTP基本身份验证,创建SecurityContext并使用Principal来填充它。这是基于this suggestion。Jersey:注入在资源方法中工作,但不能用于EJB属性
当我从一个资源的方法访问它,它按预期工作:
@Stateless
@Path("foo")
public class FooResource {
@GET
@ResourceFilters(value = {UserAuthenticationFilter.class})
public Response get(@Context User user) {
return Response.ok().entity(user).build();
}
}
然而,当我尝试注入的对象作为一个属性/字段添加到EJB,异常抛出,即使我可以在日志中看到,InjectionProvider被调用:
@Stateless
@Path("foo")
public class FooResource {
@Context
private User user;
@GET
@ResourceFilters(value = {UserAuthenticationFilter.class})
public Response get() {
return Response.ok().entity(user).build();
}
}
唯一的例外是奇怪:
[#|2011-10-31T13:35:47.691+0000|WARNING|glassfish3.1.1|javax.enterprise.system.container.web.com.sun.enterprise.web|_ThreadID=18;_ThreadName=Thread-3;|StandardWrapperValve[Gateway Servlet]: PWC1406: Servlet.service() for servlet Gateway Servlet threw exception javax.ejb.CreateException: Could not create stateless EJB at com.sun.ejb.containers.StatelessSessionContainer.createStatelessEJB(StatelessSessionContainer.java:534) at com.sun.ejb.containers.StatelessSessionContainer.access$000(StatelessSessionContainer.java:95) at com.sun.ejb.containers.StatelessSessionContainer$SessionContextFactory.create(StatelessSessionContainer.java:724) at com.sun.ejb.containers.util.pool.NonBlockingPool.getObject(NonBlockingPool.java:247) at com.sun.ejb.containers.StatelessSessionContainer._getContext(StatelessSessionContainer.java:449) at com.sun.ejb.containers.BaseContainer.getContext(BaseContainer.java:2528) at com.sun.ejb.containers.BaseContainer.preInvoke(BaseContainer.java:1895) at com.sun.ejb.containers.EJBLocalObjectInvocationHandler.invoke(EJBLocalObjectInvocationHandler.java:212) at com.sun.ejb.containers.EJBLocalObjectInvocationHandlerDelegate.invoke(EJBLocalObjectInvocationHandlerDelegate.java:88) at $Proxy166.get(Unknown Source) .... Caused by: com.sun.jersey.spi.inject.Errors$ErrorMessagesException at com.sun.jersey.spi.inject.Errors.processErrorMessages(Errors.java:170) at com.sun.jersey.spi.inject.Errors.postProcess(Errors.java:136) at com.sun.jersey.spi.inject.Errors.processWithErrors(Errors.java:199) at com.sun.jersey.server.impl.application.WebApplicationImpl$ComponentProcessorFactoryImpl.get(WebApplicationImpl.java:499) at com.sun.jersey.server.impl.ejb.EJBInjectionInterceptor.get(EJBInjectionInterceptor.java:104) at com.sun.jersey.server.impl.ejb.EJBInjectionInterceptor.init(EJBInjectionInterceptor.java:71) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at com.sun.ejb.containers.interceptors.SystemInterceptorProxy.doCallback(SystemInterceptorProxy.java:133) at com.sun.ejb.containers.interceptors.SystemInterceptorProxy.init(SystemInterceptorProxy.java:120) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at com.sun.ejb.containers.interceptors.CallbackInterceptor.intercept(InterceptorManager.java:964) at com.sun.ejb.containers.interceptors.CallbackChainImpl.invokeNext(CallbackChainImpl.java:65) at com.sun.ejb.containers.interceptors.InterceptorManager.intercept(InterceptorManager.java:393) at com.sun.ejb.containers.interceptors.InterceptorManager.intercept(InterceptorManager.java:376) at com.sun.ejb.containers.StatelessSessionContainer.createStatelessEJB(StatelessSessionContainer.java:526) ... 55 more
我在做什么错?
编辑:我只注意到抛出异常之前,错误报告在server.log:
[#|2011-10-31T15:33:01.854+0000|SEVERE|glassfish3.1.1|com.sun.jersey.spi.inject.Errors|_ThreadID=18;_ThreadName=Thread-3;|The following errors and warnings have been detected with resource and/or provider classes: SEVERE: Missing dependency for field: private com.skalio.bonusapp.core.User com.skalio.bonusapp.gateway.FooResource.user|#]
好吧,我明白了。资源本身不是请求范围,但方法调用显然是。谢谢。还有其他方法吗?或者它会在每个(相关)方法调用中注入用户是否是一种很好的模式? – Hank
平原资源是请求范围的 - 但无状态EJB资源不是。你可以尝试的一个想法是使User对象成为一个单例(实现单例注入提供者),它利用ThreadLocals为给定上下文提供它的属性的正确值。或者你可以使用带有getUser()方法的UserInfo对象,它返回给定线程的正确用户(使用ThreadLocals),并且你会注入它。您可以使用ContainerRequestFilter为给定线程和ContainerResponseFilter设置该对象的值,以在请求处理完成后进行清理。 –