用户操作-登录代码实现

Spring Security使用数据库认证

在Spring Security中如果想要使用数据进行认证操作，有很多种操作方式，这里我们介绍使用UserDetails、UserDetailsService来完成操作。

UserDetails

public interface UserDetails extends Serializable {
	Collection<? extends GrantedAuthority> getAuthorities();
	String getPassword();
	String getUsername();
	boolean isAccountNonExpired();
	boolean isAccountNonLocked();
	boolean isCredentialsNonExpired();
	boolean isEnabled();
}

UserDetails是一个接口，我们可以认为UserDetails作用是于封装当前进行认证的用户信息，但由于其是一个接口，所以我们可以对其进行实现，也可以使用Spring Security提供的一个UserDetails的实现类User来完成

以下是User类的部分代码

public class User implements UserDetails, CredentialsContainer {
	private String password;
	private final String username;
	private final Set<GrantedAuthority> authorities;
	private final boolean accountNonExpired; //帐户是否过期
	private final boolean accountNonLocked; //帐户是否锁定
	private final boolean credentialsNonExpired; //认证是否过期
	private final boolean enabled; //帐户是否可用
｝

UserDetailsService

public interface UserDetailsService {
	UserDetails loadUserByUsername(String username) throws UsernameNotFoundException;
}

上面将UserDetails与UserDetailsService做了一个简单的介绍，那么我们具体如何完成Spring Security的数据库认证操作哪，我们通过用户管理中用户登录来完成Spring Security的认证操作。

用户管理

用户登录

spring security的配置

<security:authentication-manager>
	<security:authentication-provider user-service-ref="userService">
	<!-- 配置加密的方式
	<security:password-encoder ref="passwordEncoder"/>
	-->
	</security:authentication-provider>
</security:authentication-manager>

登录页面login.jsp

Service

public interface IUserService extends UserDetailsService{

}

@Service("userService")
@Transactional
public class UserServiceImpl implements IUserService {

	@Autowired
	private IUserDao userDao;
	
	@Override
	public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
		UserInfo userInfo = userDao.findByUsername(username);
		List<Role> roles = userInfo.getRoles();
		List<SimpleGrantedAuthority> authoritys = getAuthority(roles);
		User user = new User(userInfo.getUsername(), "{noop}" + userInfo.getPassword(),
		userInfo.getStatus() == 0 ? false : true, true, true, true, authoritys);
		return user;
	}
	private List<SimpleGrantedAuthority> getAuthority(List<Role> roles) {
		List<SimpleGrantedAuthority> authoritys = new ArrayList();
		for (Role role : roles) {
		authoritys.add(new SimpleGrantedAuthority(role.getRoleName()));
		}
		return authoritys;
	}
}

IUserDao

public interface IUserDao {

	@Select("select * from user where id=#{id}")
	public UserInfo findById(Long id) throws Exception;
	
	@Select("select * from user where username=#{username}")
	@Results({
	@Result(id = true, property = "id", column = "id"),
	@Result(column = "username", property = "username"),
	@Result(column = "email", property = "email"),
	@Result(column = "password", property = "password"),
	@Result(column = "phoneNum", property = "phoneNum"),
	@Result(column = "status", property = "status"),
	@Result(column = "id", property = "roles", javaType = List.class, many =
	@Many(select = "com.learn.ssm.dao.IRoleDao.findRoleByUserId")) })
	public UserInfo findByUsername(String username);
	}
}