Shiro中new String((char[])token.getCredentials());与 token.getCredentials().toString();的区别

String password = new String((char[])token.getCredentials());

以上：这个可以正常通过测试！

String password = token.getCredentials().toString();

报错：

org.apache.shiro.authc.IncorrectCredentialsExceptionat com.accord.shiro01.MyRealm1.getAuthenticationInfo(MyRealm1.java:32)at org.apache.shiro.authc.pam.ModularRealmAuthenticator.doSingleRealmAuthentication(ModularRealmAuthenticator.java:180)at org.apache.shiro.authc.pam.ModularRealmAuthenticator.doAuthenticate(ModularRealmAuthenticator.java:267)at org.apache.shiro.authc.AbstractAuthenticator.authenticate(AbstractAuthenticator.java:198)at org.apache.shiro.mgt.AuthenticatingSecurityManager.authenticate(AuthenticatingSecurityManager.java:106)at org.apache.shiro.mgt.DefaultSecurityManager.login(DefaultSecurityManager.java:270)at org.apache.shiro.subject.support.DelegatingSubject.login(DelegatingSubject.java:256)at com.accord.shiro01.LoginLogoutTest.testCustomRealm(LoginLogoutTest.java:57)at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)at java.lang.reflect.Method.invoke(Method.java:601)at org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:44)at org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:15)at org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:41)at org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:20)at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:263)at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:69)at org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:48)at org.junit.runners.ParentRunner$3.run(ParentRunner.java:231)at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:60)at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:229)at org.junit.runners.ParentRunner.access$000(ParentRunner.java:50)at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:222)at org.junit.runners.ParentRunner.run(ParentRunner.java:292)at org.eclipse.jdt.internal.junit4.runner.JUnit4TestReference.run(JUnit4TestReference.java:50)at org.eclipse.jdt.internal.junit.runner.TestExecution.run(TestExecution.java:38)at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:459)at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.runTests(RemoteTestRunner.java:675)at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.run(RemoteTestRunner.java:382)at org.eclipse.jdt.internal.junit.runner.RemoteTestRunner.main(RemoteTestRunner.java:192)

测试代码：

public AuthenticationInfo getAuthenticationInfo(AuthenticationToken token)throws AuthenticationException {String username = token.getPrincipal().toString();String password = new String((char[])token.getCredentials());System.out.println(token.getCredentials());System.out.println((char[])token.getCredentials());System.out.println(password);System.out.println("----------------");String password2 = token.getCredentials().toString();System.out.println(token.getCredentials());System.out.println(password2);if(!("zhangsan".equals(username))) {throw new UnknownAccountException(); }if(!("123".equals(password))) {throw new IncorrectCredentialsException();}return new SimpleAuthenticationInfo(username, password, getName());}

结果：

[C@7aa91b
123
123
----------------
[C@7aa91b
[C@7aa91b

注：用String password = new String((char[])token.getCredentials());