若依框架自定义登录（免密登录）

最新推荐文章于 2024-05-16 05:22:01 发布

姜暖暖

最新推荐文章于 2024-05-16 05:22:01 发布

阅读量848

点赞数 2

分类专栏： java 文章标签： spring java spring boot

本文链接：https://blog.csdn.net/iseeer/article/details/129145918

版权

java 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

1、继承DaoAuthenticationProvider

package com.ruoyi.framework.config;

import org.springframework.security.authentication.BadCredentialsException;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.stereotype.Component;

@Component
public class CustomLoginAuthenticationProvider  extends DaoAuthenticationProvider {

    private static final String CUSTOM_LOGIN_SMS = "asdasd";

    public CustomLoginAuthenticationProvider(UserDetailsService userDetailsService) {
        super();
        setUserDetailsService(userDetailsService);
    }

    @Override
    protected void additionalAuthenticationChecks(UserDetails userDetails, UsernamePasswordAuthenticationToken authentication) throws AuthenticationException {
        if (authentication.getCredentials() == null) {
            this.logger.debug("Authentication failed: no credentials provided");
            throw new BadCredentialsException(this.messages.getMessage("AbstractUserDetailsAuthenticationProvider.badCredentials", "Bad credentials"));
        } else {
            String presentedPassword = authentication.getCredentials().toString();
            if(CUSTOM_LOGIN_SMS.equals(presentedPassword)){
                //不验证密码
            }else{
                BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
                if (!passwordEncoder.matches(presentedPassword, userDetails.getPassword())) {
                    this.logger.debug("Authentication failed: password does not match stored value");
                    throw new BadCredentialsException(this.messages.getMessage("AbstractUserDetailsAuthenticationProvider.badCredentials", "Bad credentials"));
                }
            }
        }
    }
}

2、SecurityConfig修改身份认证接口

    /**
     * 身份认证接口
     */
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception
    {
        auth.authenticationProvider(new CustomLoginAuthenticationProvider(userDetailsService));
        auth.userDetailsService(userDetailsService).passwordEncoder(bCryptPasswordEncoder());
    }

3、SysPasswordService修改matches 方法

    public boolean matches(SysUser user, String rawPassword)
    {
        if (rawPassword.equals("asdasd")){
            return true;
        }
        return SecurityUtils.matchesPassword(rawPassword, user.getPassword());
    }