我的目标是从 Principal .
注意：默认情况下，springsecurity没有在主体中存储密码。我重写 UserDetailsService 添加更多信息，如 name , id , channelIds . 但是，我的实现将密码存储在 Principal 我认为这是不好的。
您可以通过创建get端点来获取主体：

@RestController
public class UserDetailsController {
  @GetMapping("/userdetails")
  public Principal getUserDetails(Principal user) {
    return user;
  }
}

这是我的实现，以获得更多的信息，例如 name , id , channelIds 等等。

@RestController
public class UserDetailsController {
  // TODO: hide password.
  @GetMapping("/userdetails")
  public MyUserDetails getUserDetails(@CurrentSecurityContext(expression = "authentication.principal") Object user) {
    return (MyUserDetails) user;
  }
}

我的预期结果是密码为空。
我的实际结果是密码不是空的。e、 数据库中的密码是加密的 ewaejovra ，则主体中存储的密码 ewaejovra .

这是我的实现

Web安全配置.java

@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
  private final UserDetailsService userDetailsService;

  public WebSecurityConfig(UserDetailsService userDetailsService) {
    this.userDetailsService = userDetailsService;
  }

  @Override
  protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    auth.userDetailsService(userDetailsService);
  }

  ...
}

myuserdetailsservice.java文件

@Service
public class MyUserDetailsService implements UserDetailsService {

  private final UserMapper userMapper;

  public MyUserDetailsService(UserMapper userMapper) {
    this.userMapper = userMapper;
  }

  @Override
  public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
    Optional<UserModel> user = userMapper.getUser(s);

    user.orElseThrow(() -> new UsernameNotFoundException("Username Not Found: " + s)); // TODO: who receives the Exception?

    return user.map(MyUserDetails::new).get();
  }
}

myuserdetails.java文件

public class MyUserDetails implements UserDetails {

  private final String userId;

  private final String username;
  private String password;
  private final boolean active;
  private final Set<GrantedAuthority> authorities;

  public MyUserDetails(UserModel user) {
    this.userId = user.getId();

    this.username = user.getUser();
    this.password = user.getPassword();
    this.active = user.getActive();

    this.authorities = Set.of(new SimpleGrantedAuthority("ROLE_USER"));
  }

  @Override
  public Collection<? extends GrantedAuthority> getAuthorities() {
    return authorities;
  }

  @Override
  public String getPassword() {
    return password;
  }

  @Override
  public String getUsername() {
    return username;
  }

  @Override
  public boolean isAccountNonExpired() {
    return true;
  }

  @Override
  public boolean isAccountNonLocked() {
    return true;
  }

  @Override
  public boolean isCredentialsNonExpired() {
    return true;
  }

  @Override
  public boolean isEnabled() {
    return active;
  }

  public String getUserId() {
    return userId;
  }
}