Spring Boot 集成Security

最新推荐文章于 2024-08-24 11:39:59 发布

lijilinjy

最新推荐文章于 2024-08-24 11:39:59 发布

阅读量130

点赞数

分类专栏： Spring

本文链接：https://blog.csdn.net/lijilinjy/article/details/100147000

版权

Spring 专栏收录该内容

20 篇文章 0 订阅

订阅专栏

1、在pom.xml 添加 Security依赖和thymeleaf依赖

<dependency>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-security</artifactId>
       </dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-thymeleaf</artifactId>
</dependency>

2、添加SecurityConfig.java

package com.example.demo.session;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.NoOpPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;

import com.example.demo.session.user.MyUserDetailsService;

@Configuration
@EnableWebSecurity // 开启Security
public class SecurityConfig extends WebSecurityConfigurerAdapter { //继承WebSecurityConfigurerAdapter类

   @Autowired
   private MyUserDetailsService myUserDetailsService;

@Override
protected void configure(HttpSecurity http) throws Exception {

// TODO Auto-generated method stub
//super.configure(http);
http
.formLogin().loginPage("/demo-sign.html").loginProcessingUrl("/login/form").failureUrl("/login-error").permitAll() //表单登录，permitAll()表示这个不需要验证登录页面，登录失败页面
.and()
.authorizeRequests().anyRequest().authenticated()
.and()
.csrf().disable();
}




// @Override
// protected void configure(AuthenticationManagerBuilder auth) throws Exception{
//
// auth
// .inMemoryAuthentication().passwordEncoder(new MyPasswordEncoder())
// .withUser("admin").password("123456").roles("USER")
// .and()
// .withUser("test").password("test123").roles("ADMIN");
// }


@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception { // 调用  myUserDetailsService 类进行用户验证
auth.userDetailsService(myUserDetailsService).passwordEncoder(NoOpPasswordEncoder.getInstance());
}

@Bean
public PasswordEncoder passwordEncoder() {
return new BCryptPasswordEncoder();
}

}

3、创建MyUserDetailsService类，获取用户信息已经用户权限

package com.example.demo.session.user;

import java.util.ArrayList;
import java.util.List;

import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;

@Service
public class MyUserDetailsService implements UserDetailsService{

   @Override
   public UserDetails loadUserByUsername(String arg0) throws UsernameNotFoundException {
//   SysUser sysUser = userService.getUserByName(username);
//   if (null == sysUser) {
//   throw new UsernameNotFoundException(username);
//   }
   List<SimpleGrantedAuthority> authorities = new ArrayList<>();
   authorities.add(new SimpleGrantedAuthority("001"));
return new User("admin", "123", authorities);
   }

}

4、在resource的static目录下添加登录页面

<!DOCTYPE html>
<html xmlns:th="http://www.thymeleaf.org">