springboot-security使用方法

1、准备SQL

use ss;
create table users(
id bigint primary key auto_increment,
username varchar(20) unique not null,
password varchar(100)
);
// chenxin/123456
// yueguan/456
-- 密码加密算法：System.err.println(BCrypt.hashpw("456", BCrypt.gensalt()));
insert into users values(1,'chenxin','$2a$10$L0U9ug8ovkCk0toW3b0cyeKlpyggMiblqQ7w2rehA4CXYSZnD0hue');
insert into users values(2,'lisi','123');
create table role(
id bigint primary key auto_increment,
name varchar(20)
);
insert into role values(1,'管理员');
insert into role values(2,'普通用户');
create table role_user(
uid bigint,
rid bigint
);
insert into role_user values(1,1);
insert into role_user values(2,2);
create table menu(
id bigint primary key auto_increment,
name varchar(20),
url varchar(100),
parentid bigint,
permission varchar(20)
);
insert into menu values(1,'系统管理','',0,'menu:system');
insert into menu values(2,'用户管理','',0,'menu:user');
create table role_menu(
mid bigint,
rid bigint
);
insert into role_menu values(1,1);
insert into role_menu values(2,1);
insert into role_menu values(2,2);

2、添加依赖

<!--mybatis-plus-->
<dependency>
<groupId>com.baomidou</groupId>
<artifactId>mybatis-plus-boot-starter</artifactId>
<version>3.0.5</version>
</dependency>
<!--mysql-->
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
</dependency>
<!--lombok 用来简化实体类-->
<dependency>
<groupId>org.projectlombok</groupId>
<artifactId>lombok</artifactId>
</dependency>

3、实体类准备

@Data
public class Users {
private Integer id;
private String username;
private String password;
}

4、创建Mapper接口（继承BaseMapper）

package com.chenxin.springsecurity.mapper;

import com.baomidou.mybatisplus.core.mapper.BaseMapper;
import com.chenxin.springsecurity.bean.User;

@Repository
public interface UserMapper extends BaseMapper<User> {
}

5、在MyUserDetailsServcie调用Mapper里面的方法查询数据库进行认证

@Service("userDetailsService")
public class MyUserDetailsServcie implements UserDetailsService {

@Autowired
UserMapper userMapper;

@Override
public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
// 调用userMapper的方法，根据用户名查询数据库
QueryWrapper<Users> wrapper = new QueryWrapper<>();
wrapper.eq("username",username);
Users user = userMapper.selectOne(wrapper);
if (null == user) {
// 数据库没有用户，认证失败
throw new UsernameNotFoundException("当前用户不存在...");
}
List<GrantedAuthority> auths = AuthorityUtils.commaSeparatedStringToAuthorityList("role");
return new User(users.getUsername(),users.getPassword(),auths);
}
}

6、在启动类添加注解（扫描路径）

@SpringBootApplication
@MapperScan("com.chenxin.springsecurity.mapper")
public class SpringbootSecurityApplication {

public static void main(String[] args) {
SpringApplication.run(SpringbootSecurityApplication.class, args);
}

}

7、记得数据库连接配置(application.properties)

spring.datasource.driver-class-name=com.mysql.cj.jdbc.Driver
spring.datasource.username=root
spring.datasource.password=root
spring.datasource.url=jdbc:mysql:///ss?serverTimezone=Asia/Shanghai

8\创建配置类，设置使用哪个userDetailsService实现类

@Configuration
public class SecurityConfigV2 extends WebSecurityConfigurerAdapter {

@Autowired
private UserDetailsService userDetailsService;
@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
auth.userDetailsService(userDetailsService).passwordEncoder( passwordEncoder());
}

@Bean
PasswordEncoder passwordEncoder() {
return new BCryptPasswordEncoder();
}
}

9 编写controller测试

@RestController
@RequestMapping("/test")
public class TestHandler {
    @GetMapping("add")
    public String add() {
        return "Hello Security...";
    }
}