springboot springsecurity实现后台线路管理

灰太狼 2022-05-17 07:07 129阅读 0赞

[https://github.com/fwm1/springboot-firetech.git][https_github.com_fwm1_springboot-firetech.git]  
一、springsecurity实现权限控制

@Configuration
    @EnableWebSecurity
    @EnableGlobalMethodSecurity(prePostEnabled = true)
    public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
        @Override
        protected void configure(HttpSecurity http) throws Exception {
            //允许所有用户访问"/"
            http.authorizeRequests()
                    .antMatchers("/").permitAll()
                    .antMatchers("/admin").permitAll()
                    //其他地址的访问均需验证权限
                    .anyRequest().authenticated()
                    .and()
                    .formLogin()
                    //指定登录页是"/login"
                    .loginPage("/login")
                    //登录成功后默认跳转到
                    .defaultSuccessUrl("/identify")
                    .failureUrl("/failure")
                    .permitAll()
                    .usernameParameter("username")
                    .passwordParameter("password")
                    .and()
                    .logout()
                    .logoutUrl("/logout")
                    //退出登录后的默认url是"/"
                    .logoutSuccessUrl("/")
                    .invalidateHttpSession(true)
                    .permitAll();
            //解决非thymeleaf的form表单提交被拦截问题
            http.csrf().disable();
    
            //解决中文乱码问题
            CharacterEncodingFilter filter = new CharacterEncodingFilter();
            filter.setEncoding("UTF-8");
            filter.setForceEncoding(true);
            http.addFilterBefore(filter,CsrfFilter.class);
        }
    
        /*
        * 通过静态资源
        * */
        @Override
        public void configure(WebSecurity web) throws Exception {
            web.ignoring().antMatchers("/static/css/**","/static/js/**");
        }
    
        @Bean
        public UserDetailsService systemUserService(){
            return new UserService();
        }
        
        /*
        * 密码加密
        * */
        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
            auth.userDetailsService(systemUserService()).passwordEncoder(new PasswordEncoder() {
                @Override
                public String encode(CharSequence rawPassword) {
                    return MD5Util.encode((String)rawPassword);
                }
    
                @Override
                public boolean matches(CharSequence rawPassword, String encodedPassword) {
                    return encodedPassword.equals(MD5Util.encode((String)rawPassword));
                }
            });
        }
    }

二、MD5加密工具类  MD5Util

public class MD5Util {
        private static final String SALT = "firetechsalt";
    
        public static String encode(String password) {
            password = password + SALT;
            MessageDigest md5;
            BASE64Encoder base64Encoder = new BASE64Encoder();
            String resultPassWord;
            try {
                md5 = MessageDigest.getInstance("MD5");
                resultPassWord = base64Encoder.encode(md5.digest(password.getBytes("utf-8")));
            } catch (Exception e) {
                throw new RuntimeException(e);
            }
            return resultPassWord;
        }
    }

三、UserService实现UserDetailsService接口

@Component
    @Service
    public class UserService implements UserDetailsService {
    
        @Autowired
        private UserMapper userMapper;
    
        @Override
        public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
            SystemUser user = userMapper.select(s);
            if(user == null)
                throw new UsernameNotFoundException("用户名不存在");
            return user;
        }
    
        public List<SystemUser> findAllUser(int pageNum, int pageSize){
            PageHelper.startPage(pageNum,pageSize);
            return  userMapper.selectAll();
        }
    
        public void addUser(String username,String rowPassword,int group_id,String info){
            String password = MD5Util.encode(rowPassword);
            userMapper.addUser(username, password, group_id,info);
        }
    
        public void deleteUser(String username){
            userMapper.deleteUser(username);
        }
    }

四、mybatis中用注解实现多对多关系（多对多就是双方都是一对多关系）

public class SystemUser implements UserDetails{
        private int userId;
        private String userName；
        private String groupId;
        private List<Route> routeList;
    }

@Select("select * from `user_` where user_name = #{userName}")
    @Results({
                /*这里要指明属性groupId与表字段的映射group_id*/
                @Result(id = true, property = "userId", column = "user_id"),
                @Result(property = "userName", column = "user_name"),
                @Result(property = "groupId", column = "group_id"),
                @Result(property = "routeList", column = "group_id",javaType = List.class,
                        many = @Many(select = "com.firetech.project.mapper.RouteMapper.findRouteByGroupId")
                )
        })
        SystemUser select(String userName);

public class Route {
        private String routeName;
        private int groupId;
        private List<SystemUser> userList;
    }

@Select("select * from route_ where group_id = #{group_id}")
    @Results({
                @Result(property = "routeName",column = "route_name"),
                @Result(property = "groupId",column = "group_id")
    })
    Route findRouteByGroupId(int group_id);

五、application.properties

# sqllite
    spring.datasource.driver-class-name=org.sqlite.JDBC
    spring.datasource.jdbc-url=jdbc:sqlite:F:/sqlite.db
    
    # UTF-8编码
    spring.http.encoding.charset=UTF-8
    spring.http.encoding.enabled=true
    spring.http.encoding.force=true
    
    # jsp
    spring.mvc.view.prefix=/WEB-INF/view/
    spring.mvc.view.suffix=.jsp
    
    # pageHelper
    pagehelper.helper-dialect=sqlite
    pagehelper.reasonable=true
    pagehelper.support-methods-arguments=true
    pagehelper.params=count=countSql

note:

1.springsecurity会拦截静态资源，需要配置；  
  springboot默认静态资源在/resources/static下,但如果要在static下加子文件夹的话，还是需要配置  
    spring.mvc.static-path-pattern=/static/\*\*

2.spring.datasource.driver-class-name=org.sqlite.JDBC  
  spring.datasource.jdbc-url=jdbc:sqlite:F:/sqlite.db  
  
3.springsecurity可以取得UserDetail但是得不到username：  
    mybatis属性和字段映射要写完整,否则无法正确构造SystemUser对象  
  
4.jsp获取登录用户名：  
    $\{pageContext.request.remoteUser\}  
  
5.在没有用ajax发送http请求的时候,在controller中可以通过return "redirect:/user/list";的方式进行页面跳转.  
  在使用ajax对表单数据进行封装,并发送至controller进行处理后就不能用以往的方法进行处理, 而需要在ajax提交的函数里进行跳转的设置:  
window.location.href="/busasst/user/linestation";

6.ajax向后台发送请求时，dataType指的是"后台"预期的返回数据类型，若后台没有返回数据或者返回数据不一致则会执行error的回调函数  
  
7.Spring Boot 打jar包 无法响应jsp 问题  
    1)增加jsp依赖

2)编译插件版本指定1.4.2

<plugin>  
           <groupId>org.springframework.boot</groupId>  
           <artifactId>spring-boot-maven-plugin</artifactId>  
           <version>1.4.2.RELEASE</version>  
    </plugin>  
    3)

<resource>  
           <directory>src/main/webapp</directory>  
           <targetPath>META-INF/resources</targetPath>  
           <includes>  
                  <include>\*\*/\*.\*</include>  
           </includes>  
    </resource>  
       4)application 配置

spring.mvc.view.prefix=/WEB-INF/views/  
         spring.mvc.view.suffix=.jsp

[https_github.com_fwm1_springboot-firetech.git]: https://github.com/fwm1/springboot-firetech.git