基于springboot+bootstrap+mysql+redis搭建一套完整的权限架构【二】【整合springSecurity】

野性酷女 2022-06-04 07:15 112阅读 0赞

若需要整合我们的springSecurity，一种是直接使用springSecurity自带的权限架构，另外一种是使用我们自己设计的数据架构，本文所阐述的就是使用自己设计的RBAC权限架构,因此我们要事先设计好用户权限架构的PDM如下图所示，并创建我们的数据库：数据库名：hyll\_springboot，以及我们的三张表：user、user\_role、user\_associate\_role：

![Center][]

接着打开我们的工程新建如下工程的目录：

![Center 1][]

接着在我们的sys包底下新建entity和dao这两个包：

![Center 2][]

同时打开我们的pom.xml引入该工程所需要的所有依赖，接着我们的IDEA会弹出一个框，我们点击import就自动会去maven给我们下载依赖，若你有自己的私有maven则将其指向自己的私有maven，若这边有缺少不懂的直接去我的第一章的github上的源代码中自己去copy下来：

<properties>
    		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
    		<java.version>1.8</java.version>
    		<mysql.version>5.1.41</mysql.version>
    		<guava.version>18.0</guava.version>
    		<org.mapstruct.version>1.1.0.Final</org.mapstruct.version>
    	</properties>
    
    	<dependencies>
    
    		
    		<dependency>
    			<groupId>com.alibaba</groupId>
    			<artifactId>druid-spring-boot-starter</artifactId>
    			<version>1.1.3</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.mybatis.spring.boot</groupId>
    			<artifactId>mybatis-spring-boot-starter</artifactId>
    			<version>1.3.1</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.mapstruct</groupId>
    			<artifactId>mapstruct-jdk8</artifactId>
    			<version>${org.mapstruct.version}</version>
    		</dependency>
    
    		<dependency>
    			<groupId>org.mapstruct</groupId>
    			<artifactId>mapstruct-processor</artifactId>
    			<version>${org.mapstruct.version}</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>javax.inject</groupId>
    			<artifactId>javax.inject</artifactId>
    			<version>1</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>net.sf.json-lib</groupId>
    			<artifactId>json-lib</artifactId>
    			<version>2.4</version>
    			<classifier>jdk15</classifier>
    		</dependency>
    
    
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-websocket</artifactId>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-security</artifactId>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.thymeleaf.extras</groupId>
    			<artifactId>thymeleaf-extras-springsecurity4</artifactId>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>net.sourceforge.nekohtml</groupId>
    			<artifactId>nekohtml</artifactId>
    			<version>1.9.22</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-redis</artifactId>
    			<version>1.3.8.RELEASE</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-cache</artifactId>
    		</dependency>
    
    		<dependency>
    			<groupId>net.sf.ehcache</groupId>
    			<artifactId>ehcache</artifactId>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-data-rest</artifactId>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-data-jpa</artifactId>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>mysql</groupId>
    			<artifactId>mysql-connector-java</artifactId>
    			<version>${mysql.version}</version>
    		</dependency>
    
    		<dependency>
    			<groupId>com.google.guava</groupId>
    			<artifactId>guava</artifactId>
    			<version>${guava.version}</version>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-thymeleaf</artifactId>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-websocket</artifactId>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-test</artifactId>
    			<scope>test</scope>
    		</dependency>
    
    		<dependency>
    			<groupId>javax.servlet</groupId>
    			<artifactId>javax.servlet-api</artifactId>
    			<version>3.1.0</version>
    			<scope>provided</scope>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-tomcat</artifactId>
    			<version>1.3.5.RELEASE</version>
    			<scope>provided</scope>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-devtools</artifactId>
    			<optional>true</optional>
    		</dependency>
    
    		<dependency>
    			<groupId>com.xiaoleilu</groupId>
    			<artifactId>hutool-all</artifactId>
    			<version>3.0.9</version>
    		</dependency>
    
    		<dependency>
    			<groupId>io.springfox</groupId>
    			<artifactId>springfox-swagger2</artifactId>
    			<version>2.6.1</version>
    		</dependency>
    
    		<dependency>
    			<groupId>io.springfox</groupId>
    			<artifactId>springfox-swagger-ui</artifactId>
    			<version>2.6.1</version>
    		</dependency>
    		<dependency>
    			<groupId>com.vaadin.external.google</groupId>
    			<artifactId>android-json</artifactId>
    			<version>0.0.20131108.vaadin1</version>
    		</dependency>
    
    	</dependencies>

同时在我们的entity包底下新建我们刚刚的三个实体：

/**
     *@author linzf
     **/
    public class User implements UserDetails {
    
    	public User(){
    		super();
    	}
    
    	public User(int id){
    		this.id = id;
    	}
    
    	private int id;
    	private String login;
    	private String password;
    	private String userName;
    	private String address;
    	private String job;
    	private long groupId;
    	private Date birthDate;
    	private String city;
    	private String district;
    	private String province;
    	private String streetAddress;
    	private String state;
    	private String type;
    	private Date lastLoginDate;
    	// 用户角色信息
    	private List<UserRole> roles;
    	// 权限集合数据
    	private String roleArray;
    
    	public String getRoleArray() {
    		return roleArray;
    	}
    
    	public void setRoleArray(String roleArray) {
    		this.roleArray = roleArray;
    	}
    
    	public int getId() {
    		return id;
    	}
    
    	public void setId(int id) {
    		this.id = id;
    	}
    
    	public String getLogin() {
    		return login;
    	}
    
    	public void setLogin(String login) {
    		this.login = login;
    	}
    
    	@Override
    	public Collection<? extends GrantedAuthority> getAuthorities() {
    		List<GrantedAuthority> auths = new ArrayList<GrantedAuthority>();
    		if(this.getRoles()!=null){
    			List<UserRole> roles=this.getRoles();
    			for(UserRole role:roles){
    				if(role.getName()!=null){
    					auths.add(new SimpleGrantedAuthority(role.getName()));
    				}
    			}
    		}
    		return auths;
    	}
    
    	public String getPassword() {
    		return password;
    	}
    
    	@Override
    	public String getUsername() {
    		return this.getUserName();
    	}
    
    	@Override
    	public boolean isAccountNonExpired() {
    		return true;
    	}
    
    	@Override
    	public boolean isAccountNonLocked() {
    		return true;
    	}
    
    	@Override
    	public boolean isCredentialsNonExpired() {
    		return true;
    	}
    
    	@Override
    	public boolean isEnabled() {
    		return true;
    	}
    
    	public List<UserRole> getRoles() {
    		return roles;
    	}
    
    	public void setRoles(List<UserRole> roles) {
    		this.roles = roles;
    	}
    
    	public void setPassword(String password) {
    		this.password = password;
    	}
    
    	public String getUserName() {
    		return userName;
    	}
    
    	public void setUserName(String userName) {
    		this.userName = userName;
    	}
    
    	public String getAddress() {
    		return address;
    	}
    
    	public void setAddress(String address) {
    		this.address = address;
    	}
    
    	public String getJob() {
    		return job;
    	}
    
    	public void setJob(String job) {
    		this.job = job;
    	}
    
    	public long getGroupId() {
    		return groupId;
    	}
    
    	public void setGroupId(long groupId) {
    		this.groupId = groupId;
    	}
    
    	public Date getBirthDate() {
    		return birthDate;
    	}
    
    	public void setBirthDate(Date birthDate) {
    		this.birthDate = birthDate;
    	}
    
    	public String getCity() {
    		return city;
    	}
    
    	public void setCity(String city) {
    		this.city = city;
    	}
    
    	public String getDistrict() {
    		return district;
    	}
    
    	public void setDistrict(String district) {
    		this.district = district;
    	}
    
    	public String getProvince() {
    		return province;
    	}
    
    	public void setProvince(String province) {
    		this.province = province;
    	}
    
    	public String getStreetAddress() {
    		return streetAddress;
    	}
    
    	public void setStreetAddress(String streetAddress) {
    		this.streetAddress = streetAddress;
    	}
    
    	public String getState() {
    		return state;
    	}
    
    	public void setState(String state) {
    		this.state = state;
    	}
    
    	public String getType() {
    		return type;
    	}
    
    	public void setType(String type) {
    		this.type = type;
    	}
    
    	public Date getLastLoginDate() {
    		return lastLoginDate;
    	}
    
    	public void setLastLoginDate(Date lastLoginDate) {
    		this.lastLoginDate = lastLoginDate;
    	}
    
    	/**
    	 * 功能描述：组装角色数据集合
    	 * @param roleArray
    	 */
    	public void packagingRoles(String roleArray){
    		List<UserRole> roles = new ArrayList<UserRole>();
    		if(roleArray!=null){
    			UserRole userRole = null;
    			for(String roleId:roleArray.split(",")){
    				if(!roleId.isEmpty()){
    					userRole = new UserRole();
    					userRole.setId(Long.parseLong(roleId));
    					roles.add(userRole);
    				}
    			}
    		}
    		this.setRoles(roles);
    	}
    
    }

/**
     *@author linzf
     **/
    public class UserRole {
    	private long id;
    	private String name;
    	private String roleName;
    
    	public long getId() {
    		return id;
    	}
    
    	public void setId(long id) {
    		this.id = id;
    	}
    
    	public String getName() {
    		return name;
    	}
    
    	public void setName(String name) {
    		this.name = name;
    	}
    
    	public String getRoleName() {
    		return roleName;
    	}
    
    	public void setRoleName(String roleName) {
    		this.roleName = roleName;
    	}
    
    
    }

/**
     *@author linzf
     **/
    public class UserAssociateRole {
    	private int userId;
    	private long roleId;
    
    	public UserAssociateRole(){
    		super();
    	}
    
    	public UserAssociateRole(int userId,long roleId){
    		this.userId = userId;
    		this.roleId = roleId;
    	}
    
    	public int getUserId() {
    		return userId;
    	}
    
    	public void setUserId(int userId) {
    		this.userId = userId;
    	}
    
    	public long getRoleId() {
    		return roleId;
    	}
    
    	public void setRoleId(long roleId) {
    		this.roleId = roleId;
    	}
    
    }

接着我们在dao包里面创建以下的接口：

/**
     *@author linzf
     **/
    public interface UserDao {
    
        /**
         * 功能描述：根据账号来获取用户信息
         * @param login
         * @return
         */
        User findByLogin(String login);
    
    	
    }

接着我们引入我们的mybatis配置以及我们的security和快速切换环境配置，首先在我们的application.properties底下增加以下配置：

spring.profiles.active=dev
    
    #配置放行的目录和方法
    security.ignored=/api/*,/css/*,/js/*,/images/*,/fonts/*,/font-awesome/*
    #表示对thymeleaf模板不再是用默认的HTML5标准来做严格限制
    spring.thymeleaf.mode = LEGACYHTML5
    
    #配置mybatis的扫描的包的文件的入口
    mybatis.config-locations=classpath:mybatis/mybatis-config.xml
    mybatis.mapper-locations=classpath:mybatis/mapper/*.xml

同时在我们的resource目录底下创建一个目录mybatis并在该目录底下创建一个文件mybatis-config.xml和mapper目录如下所示：

![Center 3][]

mybatis-config.xml代码如下所示：

<?xml version="1.0" encoding="UTF-8" ?>
    <!DOCTYPE configuration PUBLIC "-//mybatis.org//DTD Config 3.0//EN" "http://mybatis.org/dtd/mybatis-3-config.dtd">
    <configuration>
        <typeAliases>
            <typeAlias alias="Integer" type="java.lang.Integer" />
            <typeAlias alias="Long" type="java.lang.Long" />
            <typeAlias alias="HashMap" type="java.util.HashMap" />
            <typeAlias alias="LinkedHashMap" type="java.util.LinkedHashMap" />
            <typeAlias alias="ArrayList" type="java.util.ArrayList" />
            <typeAlias alias="LinkedList" type="java.util.LinkedList" />
        </typeAliases>
    </configuration>

同时在我们的resource目录底下创建我们的application-dev.properties文件信息如下：

server.port = 8080
    #数据库连接配置
    spring.datasource.driverClassName=com.mysql.jdbc.Driver
    spring.datasource.url=jdbc:mysql://10.6.71.236:3306/hyll_springboot?characterEncoding=utf-8
    spring.datasource.username=root
    spring.datasource.password=haoyunll123

接着我们在resource/mapper目录底下创建一个mybatis\_user.xml内容如下：

<?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
    <mapper namespace="com.csdn.demo.sys.dao.UserDao">
    
    	
    	<resultMap type="com.csdn.demo.sys.entity.User" id="UserLoginMap">
    		<id property="id" column="id"/>
    		<result property="login" column="login"/>
    		<result property="password" column="password"/>
    		<result property="userName" column="user_name"/>
    		<result property="address" column="address"/>
    		<result property="job" column="job"/>
    		<result property="groupId" column="group_id"/>
    		<result property="birthDate" column="birth_date"/>
    		<result property="city" column="city"/>
    		<result property="district" column="district"/>
    		<result property="province" column="province"/>
    		<result property="streetAddress" column="street_address"/>
    		<result property="state" column="state"/>
    		<result property="type" column="type"/>
    		<result property="lastLoginDate" column="last_login_date"/>
    		<collection property="roles"  ofType="com.csdn.demo.sys.entity.UserRole" javaType="java.util.ArrayList">
    			<result column="user_role_id" property="id" jdbcType="VARCHAR" />
    			<result column="name" property="name" jdbcType="VARCHAR" />
    			<result column="role_name" property="roleName" jdbcType="VARCHAR" />
    		</collection>
    	</resultMap>
    	
    	
    	<select id="findByLogin" parameterType="java.lang.String" resultMap="UserLoginMap">
    		select u.*,ur.id as user_role_id,ur.name,ur.role_name from user u inner join user_associate_role uar on u.id = uar.user_id inner join user_role ur on uar.role_id = ur.id where u.login = #{login}
    	</select>
    
    </mapper>

接着开始我们的springsecurity的配置，找到我们的config包在该包底下我们创建一个security和mybatis包如下所示：

![Center 4][]  
  
接着在我们的security增加以下三个类分别是（CustomPasswordEncoder：密码加密类；CustomUserService：登陆逻辑重写类；WebSecurityConfig：security实现配置类）：

/**
     * spring-security登陆的密码进行MD5加密传到数据库
     */
    public class CustomPasswordEncoder implements PasswordEncoder {
        @Override
        public String encode(CharSequence rawPassword) {
            Md5PasswordEncoder encoder = new Md5PasswordEncoder();
            return encoder.encodePassword(rawPassword.toString(), "hyll");
        }
        @Override
        public boolean matches(CharSequence rawPassword, String encodedPassword) {
            Md5PasswordEncoder encoder = new Md5PasswordEncoder();
            return encoder.isPasswordValid(encodedPassword, rawPassword.toString(), "hyll");
        }
    
    }

/**
     * Created by Administrator on 2017/8/4 0004.
     */
    public class CustomUserService implements UserDetailsService {
    
        @Inject
        private UserDao userDao;
    
        @Override
        public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
            User user = userDao.findByLogin(s);
            if(user == null){
                throw new UsernameNotFoundException("用户名不存在");
            }
            // 自定义错误的文章说明的地址：http://blog.csdn.net/z69183787/article/details/21190639?locationNum=1&fps=1
            if(user.getState().equalsIgnoreCase("0")){
                throw new LockedException("用户账号被冻结，无法登陆请联系管理员！");
            }
            return user;
        }
    }

/**
     * 实现Security的配置
     */
    @Configuration
    @EnableGlobalMethodSecurity(prePostEnabled=true)
    public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
    
        @Bean
        UserDetailsService customUserService(){
            return new CustomUserService();
        }
    
        @Bean
        PasswordEncoder passwordEncoder(){
            return new CustomPasswordEncoder();
        }
    
        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
            auth.userDetailsService(customUserService()).passwordEncoder(passwordEncoder());
    
        }
    
        @Override
        protected AuthenticationManager authenticationManager() throws Exception {
            return super.authenticationManager();
        }
    
        /**
         * 描述：csrf().disable()为了关闭跨域访问的限制，若不关闭则websocket无法与后台进行连接
         * @param http
         * @throws Exception
         */
        @Override
        protected void configure(HttpSecurity http) throws Exception {
            http.headers().frameOptions().disable();
            http.csrf().disable().authorizeRequests()
                    .anyRequest().authenticated()
                    .and()
                    .formLogin()
                    .loginPage("/login")
                    .defaultSuccessUrl("/main")
                    .failureUrl("/login?error=true")
                    .permitAll()
                    .and()
                    .logout()
                    .logoutSuccessUrl("/login").
                    permitAll();
        }
    
    }

接着我们在mybatis包底下新增MyBatisConfig 配置类如下所示【MapperScan扫描的是我们的dao接口的存放路径，因此此处大家一定要注意自己的dao包的路径是否正确，否则会导致调用dao方法出错】：

@Configuration
    @MapperScan("com.csdn.demo.*.dao")
    public class MyBatisConfig {
    
    }

接着在我们的config目录底下创建我们的WebMvcConfig配置文件如下所示：

/**
     * 类描述：springMVC的配置
     */
    @Configuration
    public class WebMvcConfig extends WebMvcConfigurerAdapter {
    
        /**
         * 重写方法描述：实现在url中输入相应的地址的时候直接跳转到某个地址
         * @param registry
         */
        @Override
        public void addViewControllers(ViewControllerRegistry registry) {
            registry.addViewController("/login").setViewName("login");
            registry.addViewController("/main").setViewName("main");
            registry.addViewController("/error").setViewName("error");
        }
    
    }

每次我们在maven重新import的时候我们需要重新将以下的一个配置重新设定下，否则我们的工程将无法运行起来如图所示【file->project Structure】：

![Center 5][]

到此处我们的整个基础工程已经构建完成，我们可以直接将该工程运行起来，访问http://127.0.0.1:8080/login,由于还没有引入bootstrap因此整个页面显得不叫的丑，后续将bootstrap引入那么你们就会发现我们的页面越来越漂亮,运行效果如下图所示：

![Center 6][]

到此处我们的工程已经上次成功了，我会将本章的代码直接上传到github，大家可以直接下载下来并运行该代码，请大家在运行的时候先把整篇文章过一遍再运行，下一章将讲解如何整合swagger2以及druid这两个配置，本章代码的github地址是：[https://github.com/185594-5-27/csdndemo/tree/base-demo][https_github.com_185594-5-27_csdndemo_tree_base-demo]，大家在导入项目的时候记得要将版本切换到[base-demo][https_github.com_185594-5-27_csdndemo_tree_base-demo]版本这个版本才是本章的代码。

上一篇文章地址：[基于springboot+bootstrap+mysql+redis搭建一套完整的权限架构【一】【构建工程】][springboot_bootstrap_mysql_redis]

下一篇文章地址：[基于springboot+bootstrap+mysql+redis搭建一套完整的权限架构【三】【整合swagger2和druid】][springboot_bootstrap_mysql_redis_swagger2_druid]

QQ交流群：578746866

[Center]: /images/20220604/e2f0025b0f914f2e9d505a877da51961.png
[Center 1]: /images/20220604/7510e9290b9b414db88397c5146d7459.png
[Center 2]: /images/20220604/780526c185e94c179981208abe21cbbd.png
[Center 3]: /images/20220604/245ec7677d664cd8bf406142b1543a55.png
[Center 4]: /images/20220604/490189774e404118a6f08fe5392fca54.png
[Center 5]: /images/20220604/8372a5ec61644debb867a09eb2499cc4.png
[Center 6]: /images/20220604/2ea3ea0f78b74d65b242805d19ccfdd1.png
[https_github.com_185594-5-27_csdndemo_tree_base-demo]: https://github.com/185594-5-27/csdndemo/tree/base-demo
[springboot_bootstrap_mysql_redis]: http://blog.csdn.net/linzhefeng89/article/details/77489158
[springboot_bootstrap_mysql_redis_swagger2_druid]: http://blog.csdn.net/linzhefeng89/article/details/78744295