SpringSecurity结合Stomp使用WebSocket

威武的大野猪

已于 2024-03-21 20:12:29 修改

阅读量390

点赞数 1

分类专栏：扩展应用文章标签： websocket 网络协议网络 storm

于 2023-09-09 21:06:20 首次发布

本文链接：https://blog.csdn.net/weixin_52195362/article/details/132782195

版权

与常规使用WebSocket的对比

我们在springboot项目中使用WebSocket时，只需要使用简单的注解即可搭建完成，但是如果在系统中集成了SpringSecurity的话传统的使用注解的方式并不能很好的控制WebSocket的连接权限。

结合Stomp使用

导入依赖

        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-websocket</artifactId>
        </dependency>

        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-messaging</artifactId>
        </dependency>

配置类

配置类中对外暴露WebSocket的相关端点，同时控制连接的角色权限

@Configuration
@EnableWebSocketMessageBroker
public class WebSocketBrokerConfig extends AbstractSecurityWebSocketMessageBrokerConfigurer {
   
    private static final String[] PERMISSIONS_LIST = {
   "ROOT", "USER"};
    
    private static final String ENDPOINTS="/stomp/webSocket"
    
    @Resource(name = "webSocketInboundThreadPool")
    private ThreadPoolTaskExecutor webSocketInboundThreadPool;
    
    @Resource
    private TokenService tokenService;
    
    @Resource
    private RedisTemplate<String, Object> redisTemplate;


    /**
     * 创建WebSocket消息错误处理器
     */
    @Bean
    public StompSubProtocolErrorHandler stompSubProtocolErrorHandler() {
   
        return new WebSocketErrorHandler();
    }

    /**
     * 创建消息入站拦截器
     */
    @Bean
    public ChannelInterceptor inboundInterceptor() {
   
        return new WebSocketInboundInterceptor(constant, tokenService, redisTemplate);
    }

    @Override
    public void registerStompEndpoints(StompEndpointRegistry registry) {
   
        registry
                //配置错误处理器
                .setErrorHandler(stompSubProtocolErrorHandler())
                //配置WebSocket对外连接站点
                .addEndpoint(constant.getSocketEndpoints())
                //允许跨域
                .setAllowedOrigins("*")
                //使用SocketJS
                .withSockJS();


    }

    @Override
    public void configureMessageBroker(MessageBrokerRegistry registry) {
   
        //配置客户端订阅地址前缀
        registry.enableSimpleBroker(constant.getSocketClientSubscribePrefix(), constant.getSocketClientResponseSubscribePrefix(), constant.getSocketCommonSubPre());
        //配置客户端发送消息前缀
        registry.setApplicationDestinationPrefixes(constant.getSocketClientSendPrefix());
        //配置客户端点对点发送消息前缀
        registry.setUserDestinationPrefix(constant.getSocketClientUserPrefix());


    }

    @Override
    protected void customizeClientInboundChannel(ChannelRegistration registration) {
   
        registration
                //配置消息入站拦截器
                .interceptors(inboundInterceptor())
                //配置入站通道线程池
                .taskExecutor(webSocketInboundThreadPool);
    }

    /**
     * 允许跨域访问
     */
    @Override
    protected boolean sameOriginDisabled() {
   
        return true;
    }

    @Override
    <