Spring Boot集成Spring Security步骤

╰+攻爆jí腚メ 2022-03-11 08:48 221阅读 0赞

最近正在准备面试，由于之前学习了spring boot，突然想在spring boot项目中集成spring security来做认证和授权，接下来就以一个详细的项目进行描述（这里使用IDEA来进行）：

一、项目创建

1、新建项目。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70][]

2、填入项目信息。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 1][]

3、选择所需的框架，这里使用到了Spring Boot、Spring Security和Mybatis，数据库使用MySQL。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 2][]

4、现在项目存放的地址，单击finish即可 。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 3][]

至此项目已经创建成功了！

6、准备数据库和数据表。数据库名称plans

/*
     Navicat Premium Data Transfer
    
     Source Server         : mysql
     Source Server Type    : MySQL
     Source Server Version : 50719
     Source Host           : localhost:3306
     Source Schema         : plans
    
     Target Server Type    : MySQL
     Target Server Version : 50719
     File Encoding         : 65001
    
     Date: 07/03/2019 17:34:43
    */
    
    SET NAMES utf8mb4;
    SET FOREIGN_KEY_CHECKS = 0;
    
    -- ----------------------------
    -- Table structure for plan
    -- ----------------------------
    DROP TABLE IF EXISTS `plan`;
    CREATE TABLE `plan`  (
      `id` int(11) NOT NULL AUTO_INCREMENT,
      `name` varchar(45) CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL,
      `content` varchar(500) CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL,
      `createtime` datetime(0) NULL DEFAULT NULL,
      `finishtime` datetime(0) NULL DEFAULT NULL,
      PRIMARY KEY (`id`) USING BTREE
    ) ENGINE = InnoDB AUTO_INCREMENT = 8 CHARACTER SET = utf8 COLLATE = utf8_general_ci ROW_FORMAT = Dynamic;
    
    -- ----------------------------
    -- Table structure for user
    -- ----------------------------
    DROP TABLE IF EXISTS `user`;
    CREATE TABLE `user`  (
      `id` int(11) NOT NULL AUTO_INCREMENT,
      `name` varchar(20) CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL,
      `password` varchar(100) CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL,
      `username` varchar(20) CHARACTER SET utf8 COLLATE utf8_general_ci NULL DEFAULT NULL,
      PRIMARY KEY (`id`) USING BTREE
    ) ENGINE = InnoDB AUTO_INCREMENT = 3 CHARACTER SET = utf8 COLLATE = utf8_general_ci ROW_FORMAT = Dynamic;
    
    SET FOREIGN_KEY_CHECKS = 1;

二、接下来看一下项目：

1、项目的pom文件中已经添加相应的依赖如下所示：

<dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-security</artifactId>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-web</artifactId>
            </dependency>
            <dependency>
                <groupId>org.mybatis.spring.boot</groupId>
                <artifactId>mybatis-spring-boot-starter</artifactId>
                <version>2.0.0</version>
            </dependency>
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-devtools</artifactId>
                <scope>runtime</scope>
            </dependency>
            <dependency>
                <groupId>mysql</groupId>
                <artifactId>mysql-connector-java</artifactId>
                <scope>runtime</scope>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-test</artifactId>
                <scope>test</scope>
            </dependency>
            <dependency>
                <groupId>org.springframework.security</groupId>
                <artifactId>spring-security-test</artifactId>
                <scope>test</scope>
            </dependency>

2、这时我们需要自定义实现UserDetailsService接口，定义如下。

package cn.xiaoyue.myplan.service;
    
    import cn.xiaoyue.myplan.dao.UserDao;
    import cn.xiaoyue.myplan.model.User;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.security.core.GrantedAuthority;
    import org.springframework.security.core.authority.SimpleGrantedAuthority;
    import org.springframework.security.core.userdetails.UserDetails;
    import org.springframework.security.core.userdetails.UserDetailsService;
    import org.springframework.security.core.userdetails.UsernameNotFoundException;
    
    import java.util.ArrayList;
    import java.util.List;
    
    public class CussomUserService implements UserDetailsService {
        @Autowired
        private UserDao userDao;
    
        @Override
        public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
            User user= userDao.findUserByUserName(s);//User类是自定义的类
            List<GrantedAuthority> authorities=new ArrayList<>();
            authorities.add(new SimpleGrantedAuthority("ROLE_ADMIN"));
            return new org.springframework.security.core.userdetails.User(user.getUserName(),user.getPassword(),authorities);
        }
    }

userDao.findUserByUserName(s)是使用Mybatis来读取数据库中数据。

除此之外，我们还需在spring security的配置文件中注册CustomUserService，代码如下。

package cn.xiaoyue.myplan.config;
    
    import cn.xiaoyue.myplan.service.CussomUserService;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.builders.WebSecurity;
    import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    import org.springframework.security.core.userdetails.UserDetailsService;
    
    import javax.swing.text.Caret;
    
    @Configuration
    @EnableWebSecurity
    public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
    
        @Override
        protected void configure(HttpSecurity http) throws Exception {
            super.configure(http);
        }
    
        @Bean
        protected UserDetailsService userDetailsService() {
            return new CussomUserService();
        }
    
        @Override
        public void configure(AuthenticationManagerBuilder auth) throws Exception {
            auth.userDetailsService(userDetailsService()).passwordEncoder(new CustomPasswordEncoder());//passwordEncoder是为了解决There is no PasswordEncoder mapped for the id "null"
        }
    
        @Override
        public void configure(WebSecurity web) throws Exception {
            super.configure(web);
        }
    }

至此Spring Security的认证基本完成了，这里面认证的数据来源于数据库plans的user表中。

项目演示如下：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 4][]

认证成功跳转到首页

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 5][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70]: /images/20220311/f1d14b998f9b47b3adf2dd458faa14bf.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 1]: /images/20220311/98a471a1200248418ef3ebd6ef0d83b4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 2]: /images/20220311/39ca458d37d14eac8afcc110dfb8a0e2.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 3]: /images/20220311/e184f3ff4cf4437598ef37954708ca35.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 4]: /images/20220311/f21f940887b94063850dbf8a19b7ef19.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3l6al94aWFveXVl_size_16_color_FFFFFF_t_70 5]: /images/20220311/f12967c8264f47d08cd58f18b4fdbd4e.png