Check if the current user is registered using the "remember me" filter in Spring Security

Question

How can I programmatically check if a user with a Remember Me filter is registered in Spring Security?

eg. how to do it in spring controller

@RequestMapping({"/sell-all-assets"})
public String sellAllAssets(Model model, HttpServletRequest request) {
    if (isRememberMeAuthenticated()) {
        return "redirect:/login";
    } else {
        accountService.sellAllAssets(getCurrentUser());
        return "pages/myaccount";
    }
}

public static boolean isRememberMeAuthenticated() {
    ???
}

Answer 1

It looks like the AuthenticationTrustResolverImpl class contained code answering my question. Here

public static boolean isRememberMeAuthenticated() {
    // Check authentication exists
    Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
    if (authentication == null) {
        return false;
    }

    return RememberMeAuthenticationToken.class.isAssignableFrom(authentication.getClass());
}

Answer 2

Why do it yourself. Spring Security can do it for you.

<intercept-url pattern="/sell-all-assets" access="hasRole("user") and isFullyAutheticated()"/>

See http://docs.spring.io/spring-security/site/docs/current/reference/htmlsingle/#overview for more details .

Answer 3

Deinum,

isRememberMe () - returns true if the current main user is a remembering
user isAuthenticated () - returns true if the user is not anonymous
isFullyAuthenticated () . Returns true if the user is not anonymous or does not remember me.