Spring Security 基于数据库的认证 -清零世界

bubuko 2022/1/25 19:39:31 java 字数 20291 阅读 1203 0 来源 http://www.bubuko.com/infolist-5-1.html

介绍

之前使用的全是基于内存的认证，这里使用基于数据库的认证。

设计数据表

这里设计数据表

创建项目

这里使用Mybatis作为项目。

添加如下依赖

添加driud连接池依赖

 <dependency>
             <groupId>com.alibaba</groupId>
             <artifactId>druid</artifactId>
             <version>1.1.9</version>
         </dependency>

完整的pom如下

 <?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
     <modelVersion>4.0.0</modelVersion>
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
         <version>2.3.1.RELEASE</version>
         <relativePath/> <!-- lookup parent from repository -->
     </parent>
     <groupId>com.example</groupId>
     <artifactId>demo</artifactId>
     <version>0.0.1-SNAPSHOT</version>
     <name>demo</name>
     <description>Demo project for Spring Boot</description>
 ?
     <properties>
         <java.version>1.8</java.version>
     </properties>
 ?
     <dependencies>
         <dependency>
             <groupId>com.alibaba</groupId>
             <artifactId>druid</artifactId>
             <version>1.1.9</version>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-security</artifactId>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
         </dependency>
         <dependency>
             <groupId>org.mybatis.spring.boot</groupId>
             <artifactId>mybatis-spring-boot-starter</artifactId>
             <version>2.1.3</version>
         </dependency>
 ?
         <dependency>
             <groupId>mysql</groupId>
             <artifactId>mysql-connector-java</artifactId>
             <scope>runtime</scope>
         </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-test</artifactId>
             <scope>test</scope>
             <exclusions>
                 <exclusion>
                     <groupId>org.junit.vintage</groupId>
                     <artifactId>junit-vintage-engine</artifactId>
                 </exclusion>
             </exclusions>
         </dependency>
         <dependency>
             <groupId>org.springframework.security</groupId>
             <artifactId>spring-security-test</artifactId>
             <scope>test</scope>
         </dependency>
     </dependencies>
 ?
     <build>
         <plugins>
             <plugin>
                 <groupId>org.springframework.boot</groupId>
                 <artifactId>spring-boot-maven-plugin</artifactId>
             </plugin>
         </plugins>
     </build>
 ? 
</project>

配置数据库

 spring:
   datasource:
     type: com.alibaba.druid.pool.DruidDataSource
     username: root
     password: ABCcba20170607
     url: jdbc:mysql://cdb-1yfd1mlm.cd.tencentcdb.com:10056/test

创建对应的实体类

 package com.example.demo.domain;
 ?
 import org.springframework.security.core.GrantedAuthority;
 import org.springframework.security.core.authority.SimpleGrantedAuthority;
 import org.springframework.security.core.userdetails.UserDetails;
 ?
 import java.util.ArrayList;
 import java.util.Collection;
 import java.util.List;
 ?
 public class User implements UserDetails {
     private Integer id;
     private String username;
     private String password;
     private Boolean enabled;
     private Boolean locked;
     private List<Role> roles;
 ?
 ?
     @Override
     // 实体类和SpringSecurity转换
     public Collection<? extends GrantedAuthority> getAuthorities() {
         List<SimpleGrantedAuthority> authorities = new ArrayList<>();
         for (Role role : roles) {
             authorities.add(new SimpleGrantedAuthority(role.getName()));
         }
         return authorities;
     }
 ?
     @Override
     public String getPassword() {
         return null;
     }
 ?
     @Override
     public String getUsername() {
         return null;
     }
 ?
     @Override
     public boolean isAccountNonExpired() {
         return false;
     }
 ?
     @Override
     public boolean isAccountNonLocked() {
         return false;
     }
 ?
     @Override
     public boolean isCredentialsNonExpired() {
         return false;
     }
 ?
     @Override
     public boolean isEnabled() {
         return false;
     }
 ?
     public Integer getId() {
         return id;
     }
 ?
     public void setId(Integer id) {
         this.id = id;
     }
 ?
     public void setUsername(String username) {
         this.username = username;
     }
 ?
     public void setPassword(String password) {
         this.password = password;
     }
 ?
     public Boolean getEnabled() {
         return enabled;
     }
 ?
     public void setEnabled(Boolean enabled) {
         this.enabled = enabled;
     }
 ?
     public Boolean getLocked() {
         return locked;
     }
 ?
     public void setLocked(Boolean locked) {
         this.locked = locked;
     }
 ?
     public List<Role> getRoles() {
         return roles;
     }
 ?
     public void setRoles(List<Role> roles) {
         this.roles = roles;
     }
 }
 package com.example.demo.domain;
 ?
 public class Role {
     private Integer id;
     private String name;
     private String nameZh;
 ?
     public Integer getId() {
         return id;
     }
 ?
     public void setId(Integer id) {
         this.id = id;
     }
 ?
     public String getName() {
         return name;
     }
 ?
     public void setName(String name) {
         this.name = name;
     }
 ?
     public String getNameZh() {
         return nameZh;
     }
 ?
     public void setNameZh(String nameZh) {
         this.nameZh = nameZh;
     }
 }

创建UserService

 package com.example.demo.mapper;
 ?
 import com.example.demo.domain.Role;
 import org.apache.ibatis.annotations.Mapper;
 import org.apache.ibatis.annotations.Select;
 import org.graalvm.compiler.nodeinfo.StructuralInput;
 import org.springframework.security.core.userdetails.User;
 ?
 import java.util.List;
 ?
 @Mapper
 public interface UserMapper {
     @Select("select * from user where username=#{username}")
     public User loadUserByUsername(String username);
 ?
     @Select("select * from role r, user_role ur where r.id = ur.rid and ur.uid = #{id}")
     public List<Role> getUserRoleByUid(Integer id);
 }

配置Spring Security

 package com.example.demo.config;
 ?
 import com.example.demo.service.UserService;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Configurable;
 import org.springframework.context.annotation.Bean;
 import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
 import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.crypto.password.PasswordEncoder;
 ?
 ?
 @Configurable
 public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
     @Autowired
     private UserService userService;
 ?
     @Bean
     PasswordEncoder passwordEncoder(){
         return new BCryptPasswordEncoder();
     }
 ?
     @Override
     protected void configure(AuthenticationManagerBuilder auth) throws Exception {
         auth.userDetailsService(userService);
     }
 ?
     @Override
     protected void configure(HttpSecurity http) throws Exception {
         http.authorizeRequests()
                 .antMatchers("/admin/**").hasRole("admin")
                 .anyRequest().authenticated()
                 .and()
                 .formLogin()
                 .loginProcessingUrl("/login").permitAll()
                 .and()
                 .csrf().disable();
     }
 }

至此完成。

学习java，你掌握这些。二三线也能轻松拿8K以上

Spring Security 基于数据库的认证

原文：https://www.cnblogs.com/coderjava/p/13182692.html

如果您也喜欢它,动动您的小指点个赞吧