【登录系列】手把手教学spring-security

最新推荐文章于 2024-08-12 11:01:48 发布

Serena0814

最新推荐文章于 2024-08-12 11:01:48 发布

阅读量320

点赞数

分类专栏： JAVA Spring 文章标签： spring java 后端

本文链接：https://blog.csdn.net/Serena0814/article/details/131232585

版权

最近接触到登录这块的内容，记录一下～

spring-security手把手教学

前期准备
编写异常处理类
- AuthenticationEntryPoint
- AccessDeineHandler
编写过滤处理器
- 根据token查询用户信息服务类
- token校验过滤器
编写配置信息

前期准备

先配置相应的maven依赖

    <dependency>
      <groupId>org.springframework.boot</groupId>
      <artifactId>spring-boot-starter-security</artifactId>
      <version>2.7.10</version>
    </dependency>
    
    <dependency>
      <groupId>com.auth0</groupId>
      <artifactId>java-jwt</artifactId>
      <version>4.3.0</version>
    </dependency>

编写异常处理类

AuthenticationEntryPoint 用来解决匿名用户访问无权限资源时的异常
AccessDeineHandler 用来解决认证过的用户访问无权限资源时的异常

AuthenticationEntryPoint

@Slf4j
public class JwtAuthenticationEntryPoint implements AuthenticationEntryPoint {
   

    @Override
    public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException e) throws IOException, ServletException {
   
        log.warn("请求未认证 {} {}", request.getRequestURI(), e.getMessage());
        response.setCharacterEncoding("UTF-8");
        response.setContentType("application/json; charset=utf-8");
        response.setStatus(ResultCode.HTTP_UNAUTHORIZED.getHttpStatusCode());
        try (PrintWriter writer = response.getWriter()) {
   
            writer.write(JsonUtil.toJsonString(ApiResultBean.error(ResultCode.HTTP_UNAUTHORIZED)));
            writer.flush();
        } catch (Exception ex) {
   
            log.error("write response error {}", ex.getMessage());
        }
    }
}

AccessDeineHandler

@Slf4j
public class JwtAccessDeniedHandler implements AccessDeniedHandler {
   

    @Override
    public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException) throws IOExcep