使用spring security修改密码例子

关注

原创最新推荐文章于 2026-06-16 05:00:00 发布 6.2k 阅读 AI 写同款· GEO 优化 ›

AI权益加码！Claude Code、Cursor等20+工具免费用！购周边限时加赠Coding Plan Lite，畅享主流AI工具！学习进阶更高效！阅读详情

@RequestMapping(value = "/account/changePassword", method = RequestMethod.POST)
   public String submitChangePasswordPage(
           @RequestParam("oldpassword") String oldPassword,
           @RequestParam("password") String newPassword,
           HttpServletRequest request) {
       System.out.println("change password.............");
       try{
           jdbcUserDetailsManager.changePassword(oldPassword, newPassword);
       }
       catch( AuthenticationException e )
       {
           System.out.println( "Old password is incorrect!please rechange" );
           //e.printStackTrace();
           return "redirect:/account/change";
       }

       Authentication auth = SecurityContextHolder.getContext().getAuthentication();
       User user = (User)auth.getPrincipal();
       String userName = user.getUsername();

       SecurityContextHolder.clearContext();


       UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken(userName, newPassword);
       try {
           token.setDetails(new WebAuthenticationDetails(request));
           Authentication authenticatedUser = authenticationManager
                   .authenticate(token);

           request.getSession();

           SecurityContextHolder.getContext().setAuthentication(
                   authenticatedUser);
           request.getSession()
                   .setAttribute(
                           HttpSessionSecurityContextRepository.SPRING_SECURITY_CONTEXT_KEY,
                           SecurityContextHolder.getContext());
       } catch (AuthenticationException e) {
           System.out.println("Authentication failed: " + e.getMessage());
           return "redirect:/account/change";
       }

       return "redirect:/";
   }

收录于