本篇文章給大家分享的是有關(guān)利用SpringSecurity怎么從數(shù)據(jù)庫(kù)中獲取用戶(hù)信息進(jìn)行驗(yàn)證，小編覺(jué)得挺實(shí)用的，因此分享給大家學(xué)習(xí)，希望大家閱讀完這篇文章后可以有所收獲，話(huà)不多說(shuō)，跟著小編一起來(lái)看看吧。
數(shù)據(jù)庫(kù) user 表
注，密碼是由 BCrypt 算法加密對(duì)應(yīng)用戶(hù)名所得。
root $2a$10$uzHVooZlCWBkaGScKnpha.ZrK31NI89flKkSuTcKYjdc5ihTPtPyq blu $2a$10$mI0TRIcNF4mg34JmH6T1KeystzTWDzWFNL5LQmmlz.fHndcwYHZGe kaka $2a$10$/GMSSJ3AzeeBK3rBC4t8BOZ5zkfb38IlwlQl.6mYTEpf22r/cCZ1a admin $2a$10$FKf/V.0WdHnTNWHDTtPLJe2gBxTI6TBVyFjloXG9IuH4tjebOTqcS
數(shù)據(jù)庫(kù) role 表
注：role名稱(chēng)必須帶上前綴 ROLE_ （SpringSecurity框架要求）
role_user 表
實(shí)體類(lèi) SysUser
重慶分公司
重慶分公司
@Data
public class SysUser {
private Integer id;
private String name;
private String password;
}實(shí)體類(lèi) SysRole
@Data
public class SysRole {
private Integer id;
private String name;
}UserMapper
public interface UserMapper {
@Select("select * from user where name = #{name}")
SysUser loadUserByUsername(String name);
}RoleMapper
public interface RoleMapper {
@Select("SELECT role.`name` FROM role WHERE role.id in (SELECT role_id FROM "
+ " role_user as r_s JOIN `user` as u ON r_s.user_id = u.id and u.id = #{id})")
List findRoleByUserId(int id);
} UserService 接口
該接口需繼承UserDetailsService
package com.blu.service;
import org.springframework.security.core.userdetails.UserDetailsService;
public interface UserService extends UserDetailsService {
}UserServiceImpl 實(shí)現(xiàn)類(lèi)
package com.blu.service.impl;
import java.util.ArrayList;
import java.util.List;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;
import org.springframework.transaction.annotation.Transactional;
import com.blu.entity.SysRole;
import com.blu.entity.SysUser;
import com.blu.mapper.LoginMapper;
import com.blu.mapper.UserMapper;
import com.blu.service.UserService;
@Service
@Transactional
public class UserServiceImpl implements UserService {
@Autowired
private UserMapper userMapper;
@Autowired
private RoleMapper roleMapper;
@Override
public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
try {
SysUser sysUser = userMapper.loadUserByUsername(username);
if(sysUser==null) {
return null;
}
List authorities = new ArrayList<>();
List list = roleMapper.findRoleByUserId(sysUser.getId());
for(SysRole role : list) {
authorities.add(new SimpleGrantedAuthority(role.getName()));
}
//封裝 SpringSecurity 需要的UserDetails 對(duì)象并返回
UserDetails userDetails = new User(sysUser.getName(),sysUser.getPassword(),authorities);
return userDetails;
} catch (Exception e) {
e.printStackTrace();
//返回null即表示認(rèn)證失敗
return null;
}
}
} 加密類(lèi)
@Bean
public BCryptPasswordEncoder bcryptPasswordEncoder(){
return new BCryptPasswordEncoder();
}SpringSecurity 配置類(lèi)
package com.blu.config;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import com.blu.service.impl.UserServiceImpl;
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter{
@Autowired
private UserServiceImpl userServiceImpl;
@Autowired
private BCryptPasswordEncoder bcryptPasswordEncoder;
@Override
protected void configure(HttpSecurity http) throws Exception {
http.authorizeRequests()
.antMatchers("/").permitAll()
.antMatchers("/level1/**").hasRole("vip1")
.antMatchers("/level2/**").hasRole("vip2")
.antMatchers("/level3/**").hasRole("vip3");
http.formLogin().loginPage("/tologin")
.usernameParameter("name")
.passwordParameter("password")
.loginProcessingUrl("/login");
http.csrf().disable();
http.logout().logoutSuccessUrl("/");
http.rememberMe().rememberMeParameter("remember");
}
@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
auth.userDetailsService(userServiceImpl).passwordEncoder(bcryptPasswordEncoder);
}
}以上方式在認(rèn)證時(shí)是將數(shù)據(jù)庫(kù)中查出的用戶(hù)信息通過(guò) UserServiceImpl 封裝成 UserDetails 交給 SpringSecurity去認(rèn)證的，我們還可以讓用戶(hù)實(shí)體類(lèi)直接實(shí)現(xiàn)UserDetails：
MyUser：
package com.blu.entity;
import java.util.Collection;
import java.util.List;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.userdetails.UserDetails;
import com.fasterxml.jackson.annotation.JsonIgnore;
public class MyUser implements UserDetails {
@Data
private Integer id;
private String name;
private String password;
private List roles;
@JsonIgnore
@Override
public Collection getAuthorities() {
return roles;
}
@Override
public String getPassword() {
return password;
}
@JsonIgnore
@Override
public String getUsername() {
return name;
}
@JsonIgnore
@Override
public boolean isAccountNonExpired() {
return true;
}
@JsonIgnore
@Override
public boolean isAccountNonLocked() {
return true;
}
@JsonIgnore
@Override
public boolean isCredentialsNonExpired() {
return true;
}
@JsonIgnore
@Override
public boolean isEnabled() {
return true;
}
} MyRole：
package com.blu.entity;
import org.springframework.security.core.GrantedAuthority;
import com.fasterxml.jackson.annotation.JsonIgnore;
@Data
public class MyRole implements GrantedAuthority {
private Integer id;
private String name;
@JsonIgnore
@Override
public String getAuthority() {
return name;
}
}MyUserMapper：
package com.blu.mapper;
import com.blu.entity.MyUser;
public interface MyUserMapper {
MyUser findByName(String name);
}
