// 避免login没有权限,出现死循环
if (!freeResources.contains(resource) && !manager.isPublicResource(resource)) {
OnlineActivity info = manager.getAuthenticationManager().getSessionController()
.getOnlineActivity(session.getId());
if (null == info) {
Authentication auth = null;
// remember me
// if (manager.isEnableRememberMe()) {
// auth = manager.getRememberMeService().autoLogin(httpRequest);
// }
if (null == auth) {
auth = new SsoAuthentication(httpRequest);
auth.setDetails(userDetailsSource.buildDetails(httpRequest));
}
try {
manager.authenticate(auth);
} catch (AuthenticationException e) {
// 记录访问失败的URL