spring security webflux 数据库存储认证用户

---

spring security webflux 数据库存储认证用户

 

从数据库中读取用户的认证信息，进行授权认证

 

 

********************

相关类及接口

 

ReactiveUserDetailsService：根据用户名读取用户信息

public interface ReactiveUserDetailsService {
    Mono<UserDetails> findByUsername(String var1);
}

 

MapReactiveUserDetailsService：内存中存储用户信息

public class MapReactiveUserDetailsService implements ReactiveUserDetailsService, ReactiveUserDetailsPasswordService {
    private final Map<String, UserDetails> users;

    public MapReactiveUserDetailsService(Map<String, UserDetails> users) {
        this.users = users;
    }

    public MapReactiveUserDetailsService(UserDetails... users) {
        this((Collection)Arrays.asList(users));
    }

    public MapReactiveUserDetailsService(Collection<UserDetails> users) {
        Assert.notEmpty(users, "users cannot be null or empty");
        this.users = new ConcurrentHashMap();
        Iterator var2 = users.iterator();

        while(var2.hasNext()) {
            UserDetails user = (UserDetails)var2.next();
            this.users.put(this.getKey(user.getUsername()), user);
        }

    }

    public Mono<UserDetails> findByUsername(String username) {
        String key = this.getKey(username);
        UserDetails result = (UserDetails)this.users.get(key);
        return result == null ? Mono.empty() : Mono.just(User.withUserDetails(result).build());
    }

    public Mono<UserDetails> updatePassword(UserDetails user, String newPassword) {
        return Mono.just(user).map((u) -> {
            return User.withUserDetails(u).password(newPassword).build();
        }).doOnNext((u) -> {
            String key = this.getKey(user.getUsername());
            this.users.put(key, u);
        });
    }

    private String getKey(String username) {
        return username.toLowerCase();
    }
}

 

 

UserDetails：用户认证信息接口

public interface UserDetails extends Serializable {
    Collection<? extends GrantedAuthority> getAuthorities();

    String getPassword();

    String getUsername();

    boolean isAccountNonExpired();

    boolean isAccountNonLocked();

    boolean isCredentialsNonExpired();

    boolean isEnabled();
}

 

 

User：UserDetails接口实现类

public class User implements UserDetails, CredentialsContainer {
    private static final long serialVersionUID = 530L;
    private static final Log logger = LogFactory.getLog(User.class);
    private String password;
    private final String username;
    private final Set<GrantedAuthority> authorities;
    private final boolean accountNonExpired;
    private final boolean accountNonLocked;
    private final boolean credentialsNonExpired;
    private final boolean enabled;


**************
构造函数

    public User(String username, String password, Collection<? extends GrantedAuthority> authorities) {
    public User(String username, String password, boolean enabled, boolean accountNonExpired, boolean credentialsNonExpired, boolean accountNonLocked, Collection<? extends GrantedAuthority> authorities) {

**************
普通方法

    public Collection<GrantedAuthority> getAuthorities() {
    public String getPassword() {
    public String getUsername() {
    public boolean isEnabled() {
    public boolean isAccountNonExpired() {
    public boolean isAccountNonLocked() {
    public boolean isCredentialsNonExpired() {

    public void eraseCredentials() {
    private static SortedSet<GrantedAuthority> sortAuthorities(Collection<? extends GrantedAuthority> authorities) {

    public boolean equals(Object rhs) {
    public int hashCode() {
    public String toString() {


**************
返回内部类：User.UserBuilder

    public static User.UserBuilder withUsername(String username) {
        return builder().username(username);
    }

    public static User.UserBuilder builder() {
        return new User.UserBuilder();
    }

    public static User.UserBuilder withUserDetails(UserDetails userDetails) {


**************
内部类：User.UserBuilder

    public static class UserBuilder {
        private String username;
        private String password;
        private List<GrantedAuthority> authorities;
        private boolean accountExpired;
        private boolean accountLocked;
        private boolean credentialsExpired;
        private boolean disabled;
        private Function<String, String> passwordEncoder;


**********
构造方法

        private UserBuilder() {
            this.passwordEncoder = (password) -> {
                return password;
            };
        }


**********
普通方法

        public User.UserBuilder username(String username) {
        public User.UserBuilder password(String password) {
        public User.UserBuilder passwordEncoder(Function<String, String> encoder) {

        public User.UserBuilder roles(String... roles) {
            List<GrantedAuthority> authorities = new ArrayList(roles.length);
            String[] var3 = roles;
            int var4 = roles.length;

            for(int var5 = 0; var5 < var4; ++var5) {
                String role = var3[var5];
                Assert.isTrue(!role.startsWith("ROLE_"), () -> {
                    return role + " cannot start with ROLE_ (it is automatically added)";
                });
                authorities.add(new SimpleGrantedAuthority("ROLE_" + role));
            }

            return this.authorities((Collection)authorities);
        }

        public User.UserBuilder authorities(GrantedAuthority... authorities) {
            return this.authorities((Collection)Arrays.asList(authorities));
        }

        public User.UserBuilder authorities(Collection<? extends GrantedAuthority> authorities) {
            this.authorities = new ArrayList(authorities);
            return this;
        }

        public User.UserBuilder authorities(String... authorities) {
            return this.authorities((Collection)AuthorityUtils.createAuthorityList(authorities));
        }

        public User.UserBuilder accountExpired(boolean accountExpired) {
        public User.UserBuilder accountLocked(boolean accountLocked) {
        public User.UserBuilder credentialsExpired(boolean credentialsExpired) {
        public User.UserBuilder disabled(boolean disabled) {


        public UserDetails build() {
            String encodedPassword = (String)this.passwordEncoder.apply(this.password);
            return new User(this.username, encodedPassword, !this.disabled, !this.accountExpired, !this.credentialsExpired, !this.accountLocked, this.authorities);
        }
    }

    private static class AuthorityComparator implements Comparator<GrantedAuthority>, Serializable {
        private static final long serialVersionUID = 530L;

        private AuthorityComparator() {
        }

        public int compare(GrantedAuthority g1, GrantedAuthority g2) {
            if (g2.getAuthority() == null) {
                return -1;
            } else {
                return g1.getAuthority() == null ? 1 : g1.getAuthority().compareTo(g2.getAuthority());
            }
        }
    }
}

 

 

********************

示例

 

****************

service 层

 

CustomReactiveUserDetailsService

@Service
public class CustomReactiveUserDetailsService implements ReactiveUserDetailsService {

    @Resource
    private UserService userService;

    @Resource
    private PasswordEncoder passwordEncoder;

    @Override
    public Mono<UserDetails> findByUsername(String s) {
        QueryWrapper<User> queryWrapper=new QueryWrapper<>();
        queryWrapper.eq("name",s);

        User user=userService.getOne(queryWrapper);

        UserDetails userDetails= org.springframework.security.core.userdetails.User.builder()
                .username(user.getName())
                .password(user.getPassword())
                .passwordEncoder(passwordEncoder::encode)
                .roles(JSONObject.parseArray(user.getRoles(),String.class).toArray(new String[]{}))
                .build();

        return userDetails == null ? Mono.empty() : Mono.just(org.springframework.security.core.userdetails.User.withUserDetails(userDetails).build());
    }
}

 

WebSecurityConfig

@Configuration
public class WebSecurityConfig {

    @Bean
    public SecurityWebFilterChain initSecurityWebFilterChain(ServerHttpSecurity http){
        http.formLogin().and().authorizeExchange()
                .pathMatchers("/hello2").hasAnyRole("user")
                .pathMatchers("/**").permitAll();

        return http.build();
    }

    @Bean
    public PasswordEncoder initPasswordEncoder(){
        return new BCryptPasswordEncoder();
    }
}

 

 

****************

controller 层

 

UserController

@RestController
@RequestMapping("/user")
public class UserController {

    @Resource
    private PasswordEncoder passwordEncoder;

    @Resource
    private UserService userService;

    @RequestMapping("/add")
    public String addUser(){
        User user=new User();

        user.setName("瓜田李下");
        user.setAge(20);
        user.setPassword("123456");

        List<String> roles=new ArrayList<>();
        roles.add("user");
        roles.add("admin");
        String rolesString=JSONObject.toJSONString(roles);
        user.setRoles(rolesString);

        userService.save(user);

        return "success";
    }
}

 

 

 

********************

使用测试

 

localhost:8080/user/add：向数据库添加认证用户

 

 

localhost:8080/hello2

                        

认证通过后，输出：hello 瓜田李下