认证流程源码杂记

今天药忘吃喽~ 2022-01-31 13:45 210阅读 0赞

认证流程源码

认证处理流程说明  
认证结果如何在多个请求之间共享  
获取认证用户信息  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70]

首选是UsernamePasswordAuthenticationFilter 
    获取到请求中携带的用户名和密码，然后构建一个UsernamePasswordAuthenticationToken 对象
    public class UsernamePasswordAuthenticationFilter extends AbstractAuthenticationProcessingFilter {
    public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException {
        if (this.postOnly && !request.getMethod().equals("POST")) {
            throw new AuthenticationServiceException("Authentication method not supported: " + request.getMethod());
        } else {
            String username = this.obtainUsername(request);
            String password = this.obtainPassword(request);
            if (username == null) {
                username = "";
            }
    
            if (password == null) {
                password = "";
            }
    
            username = username.trim();
            UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(username, password);
            this.setDetails(request, authRequest);
            return this.getAuthenticationManager().authenticate(authRequest);
        }
    }
    }
    
    
    
    
    public class UsernamePasswordAuthenticationToken extends AbstractAuthenticationToken
    
    
    public interface AuthenticationManager {
        Authentication authenticate(Authentication var1) throws AuthenticationException;
    }
    
    
    public class ProviderManager implements AuthenticationManager, MessageSourceAware, InitializingBean

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 1]

DaoAuthenticationProvider

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 2]  
![在这里插入图片描述][20190516184318576.png]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 3]

AbstractAuthenticationProcessingFilter  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 4]

SecurityContextImpl

![在这里插入图片描述][2019051619235016.png]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 5]

拿到用户登录信息

@RequestMapping("user")
    //每个方法的路径前面都有一个user 可以抽取出来放到类上 ，spring 会将类上的路径+方法上的路径 作为访问路径
    @RestController
    public class UserController implements Serializable {
    
    
        @GetMapping("/me")
        public Object getCurrentUser(){
            Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
            return  authentication;
        }
    
        @GetMapping("/me1")
        public Object getCurrentUser1(Authentication authentication ){
            //spring 会自动找到Authentication类型的数据注入
            return  authentication;
        }
    
        @GetMapping("/me2")
        public Object getCurrentUser2(@AuthenticationPrincipal UserDetails user){
            return user;
        }

![在这里插入图片描述][20190516193634596.png]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70]: /images/20220131/579e093868ef4c89a13e68c1496a175b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 1]: /images/20220131/464a020c372044b186965ec0225eacb7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 2]: /images/20220131/dc09f9224151477791bf645d8e75e615.png
[20190516184318576.png]: /images/20220131/841e9d618c4748d6ba011e7ca5b4453e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 3]: /images/20220131/29a7788c69c040aa95972bf794e4fb29.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 4]: /images/20220131/55e11d2893964fbdbd6651736249ecb2.png
[2019051619235016.png]: /images/20220131/fb0bdf1b14964043a0f034a567f57e86.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3VvdGFpbA_size_16_color_FFFFFF_t_70 5]: /images/20220131/e572b796b1fc450c82bcaa7c76815dd9.png
[20190516193634596.png]: /images/20220131/01835729e3de46eea4b1b850fbdceb9b.png