springboot2.2.2+springSecurity+mybatis(二)基于数据库的认证

---

配置类
密码加密

@Bean
    PasswordEncoder passwordEncoder(){
         return  new BCryptPasswordEncoder();
     }

定义认证规则

  @Resource
    UserService userService;

@Override
     protected void configure(AuthenticationManagerBuilder auth) throws Exception {
          auth.userDetailsService(userService);
     }

授权规则

@Override
    protected void configure(HttpSecurity http) throws Exception {
          http.authorizeRequests()
                  .antMatchers("/admin/**").hasRole("admin")
                  .antMatchers("/db/**").hasRole("dba")
                  .antMatchers("/user/**").hasRole("user")
                  .anyRequest().authenticated()
                  .and()
                  .formLogin()
                  .loginProcessingUrl("/login").permitAll()
                  .and()
                  .csrf()
                  .disable();

    }

userService

@Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        User user = userMapper.loadUserByUsername(username);
        System.out.println(user);
        if(user==null){
            throw new UsernameNotFoundException("账户不存在！");
        }
        user.setRoles(userMapper.getUserRolesByUid(user.getId()));
        return user;
    }

实体类

public class User implements UserDetails {
    public Integer getId() {
        return id;
    }

    public void setId(Integer id) {
        this.id = id;
    }
    private Integer id;
    private String username;
    private String password;
    private Boolean enabled;
    private Boolean locked;
    private List<Role> roles;

    public List<Role> getRoles() {
        return roles;
    }

    public void setRoles(List<Role> roles) {
        this.roles = roles;
    }
    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        List<SimpleGrantedAuthority> authorities=new ArrayList<>();
        for (Role role:
                roles) {
            authorities.add(new SimpleGrantedAuthority(role.getName()));
        }
        return authorities;
    }

    @Override
    public String getPassword() {
        return password;
    }

    @Override
    public String getUsername() {
        return username;
    }

    @Override
    public boolean isAccountNonExpired() {
        return true;
    }

    @Override
    public boolean isAccountNonLocked() {
        return !locked;
    }

    @Override
    public boolean isCredentialsNonExpired() {
        return true;
    }

    @Override
    public boolean isEnabled() {
        return enabled;
    }
    
**sql**

<mapper namespace="com.example.demo.mapper.UserMapper">
     <select id="loadUserByUsername" resultType="com.example.demo.pojo.User">
         select * from user  where username=#{username}
     </select>
     <select id="getUserRolesByUid" resultType="com.example.demo.pojo.Role">
        SELECT * FROM `role` r,`user_role` u WHERE r.`id`=u.`rid` AND u.`uid`=#{id}
     </select>
</mapper>

数据库：