spring security快速入门（无多余额外功能） ps:情人节不得学一手认证鉴权压压惊

71 阅读 0 评论 47 点赞

我是靠谱客的博主清秀烤鸡，这篇文章主要介绍spring security快速入门（无多余额外功能） ps:情人节不得学一手认证鉴权压压惊，现在分享给大家，希望可以做个参考。

ps:情人节不得学一手认证鉴权压压惊

1.导入依赖

复制代码

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
 <dependencies>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
<groupId>org.projectlombok</groupId>
<artifactId>lombok</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
</dependency>
<dependency>
<groupId>com.baomidou</groupId>
<artifactId>mybatis-plus-boot-starter</artifactId>
<version>3.5.1</version>
</dependency>
</dependencies>

配置数据库连接 yml

复制代码

1
2
3
4
5
6
7
8
server:
port: 8080
spring:
datasource:
driver-class-name: com.mysql.cj.jdbc.Driver
url: jdbc:mysql://localhost:3306/easymybatis?serverTimezone=GMT%2B8
username: root
password: 123456

2.实现UserDetailsServic接口（自行创建mapper接口）

数据库结构：

复制代码

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
@Service
public class MyUserDetailService implements UserDetailsService {
@Autowired
private UserMapper userMapper;
@Override
public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
QueryWrapper<MemberUser> queryWrapper=new QueryWrapper<>();
queryWrapper.eq("name",s);
MemberUser memberUser = userMapper.selectOne(queryWrapper);
if (memberUser==null){
throw new UsernameNotFoundException("验证失败");
}
List<GrantedAuthority> auths= AuthorityUtils.commaSeparatedStringToAuthorityList("role");
return new User(memberUser.getName(),new BCryptPasswordEncoder().encode(memberUser.getPassword()),auths);
}
}

3.编写相关配置类继承WebSecurityConfigurerAdapter

复制代码

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
@SpringBootConfiguration
public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
@Autowired
private MyUserDetailService userDetailService;
@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
//super.configure(auth);
//用DetailService 方式鉴权
auth.userDetailsService(userDetailService).passwordEncoder(passwordEncoder());
}
//老版不分离自定义登录方案
/* @Override
protected void configure(HttpSecurity http) throws Exception {
http.formLogin()
.loginPage("index.html") //登录页面
.successForwardUrl("success.html")
//登录成功跳转
.loginProcessingUrl("/user/login").permitAll()
//请求服务器路径
.and().authorizeRequests()
.antMatchers("/","index/html").permitAll() //不需要认证
.antMatchers("/test").hasAnyAuthority("role") //拥有权限才能访问
.anyRequest().authenticated()
.and().csrf().disable();
}
*/
//加密措施
@Bean
PasswordEncoder passwordEncoder(){
return new BCryptPasswordEncoder();
}
}

4.测试

复制代码

1
2
3
4
5
6
7
8
@RestController
@RequestMapping("test")
public class TestController {
@GetMapping("hello")
public String test(){
return "hello security";
}
}