SpringSecurity登录JSON传参

1.自定义相关过滤器继承UsernamePasswordAuthenticationFilter，只需要将这个过滤器替换掉即可。

import cn.hutool.json.JSONUtil;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.gla.common.lang.Result;
import com.gla.entity.User;
import com.gla.service.UserService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.MediaType;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
import org.springframework.stereotype.Component;

import javax.servlet.ServletOutputStream;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.io.InputStream;
import java.util.Map;

/**
 * @author ：jerry
 * @date ：Created in 2022/3/22 11:49
 * @description：JSON传参
 * @version: V1.1
 */
public class CustomAuthenticationFilter extends UsernamePasswordAuthenticationFilter {

   

        @Override	
        public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException {	
            if (request.getContentType().equals(MediaType.APPLICATION_JSON_UTF8_VALUE)	
                    || request.getContentType().equals(MediaType.APPLICATION_JSON_VALUE)) {	
                ObjectMapper mapper = new ObjectMapper();	
                UsernamePasswordAuthenticationToken authRequest = null;	
                try (InputStream is = request.getInputStream()) {	
                    Map<String,String> authenticationBean = mapper.readValue(is, Map.class);	
                    authRequest = new UsernamePasswordAuthenticationToken(	
                            authenticationBean.get("username"), authenticationBean.get("password"));	
                } catch (IOException e) {	
                    e.printStackTrace();	
                    authRequest = new UsernamePasswordAuthenticationToken(	
                            "", "");	
                } finally {	
                    setDetails(request, authRequest);	
                    return this.getAuthenticationManager().authenticate(authRequest);	
                }	
            }	
            else {	
                return super.attemptAuthentication(request, response);	
            }	
        }	

}

实例:

 

2.SecurityConfig配置

    @Override    
    protected void configure(HttpSecurity http) throws Exception {    
        http.authorizeRequests().anyRequest().authenticated()    
                .and()    
                .formLogin()    
                .and().csrf().disable();    
        http.addFilterAt(customAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);    
    }    
    @Bean    
    CustomAuthenticationFilter customAuthenticationFilter() throws Exception {    
        CustomAuthenticationFilter filter = new CustomAuthenticationFilter();    
        filter.setAuthenticationSuccessHandler(new AuthenticationSuccessHandler() {    
            @Override    
            public void onAuthenticationSuccess(HttpServletRequest req, HttpServletResponse resp, Authentication authentication) throws IOException, ServletException {    
                resp.setContentType("application/json;charset=utf-8");    
                PrintWriter out = resp.getWriter();    
                RespBean respBean = RespBean.ok("登录成功!");    
                out.write(new ObjectMapper().writeValueAsString(respBean));    
                out.flush();    
                out.close();    
            }    
        });    
        filter.setAuthenticationFailureHandler(new AuthenticationFailureHandler() {    
            @Override    
            public void onAuthenticationFailure(HttpServletRequest req, HttpServletResponse resp, AuthenticationException e) throws IOException, ServletException {    
                resp.setContentType("application/json;charset=utf-8");    
                PrintWriter out = resp.getWriter();    
                RespBean respBean = RespBean.error("登录失败!");    
                out.write(new ObjectMapper().writeValueAsString(respBean));    
                out.flush();    
                out.close();    
            }    
        });    
        filter.setAuthenticationManager(authenticationManagerBean());    
        return filter;    
    }

实例: