SpringSecurity自定义设置登录界面

旧城等待， 2022-10-07 13:47 243阅读 0赞

### SpringSecurity自定义设置登录界面 ###

*  1、先创建自定义登录页
 *  2、在配置类中实现相关的配置
 *  3、 TestController
 *  4、测试

# 1、先创建自定义登录页 #

![在这里插入图片描述][20210618114932361.png]  
login.html

<!DOCTYPE html>
    <html lang="en">
    <head>
        <meta charset="UTF-8">
        <title>Title</title>
    </head>
    <body>
        <form action="/user/login" method="post">
            用户名：<input type="text" name="username"/><br>
            密码：<input type="text" name="password"/><br>
            <input type="submit" value="login"/>
        </form>
    
    
    </body>
    </html>

# 2、在配置类中实现相关的配置 #

主要看`configure(HttpSecurity http)` 方法和  
`http.formLogin().loginPage("/login.html")` //登录页面设置

package com.atguigu.springsecuritydemo1.config;
    
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    import org.springframework.security.core.userdetails.UserDetailsService;
    import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
    import org.springframework.security.crypto.password.PasswordEncoder;
    
    @Configuration
    public class SecurityConfigTest extends WebSecurityConfigurerAdapter { 
    
        @Autowired
        private UserDetailsService userDetailsService;
    
        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception { 
            auth.userDetailsService(userDetailsService).passwordEncoder(password());
        }
    
        @Bean
        PasswordEncoder password(){ 
           return new BCryptPasswordEncoder();
        }
    
        @Override
        protected void configure(HttpSecurity http) throws Exception { 
         
    
            http.formLogin()             //自定义自己编写的登陆页面
                .loginPage("/login.html")    //登录页面设置
                .loginProcessingUrl("/user/login") //登录访问路径
                .defaultSuccessUrl("/success.html").permitAll()    //登录成功之后，跳转路径
                .and().authorizeRequests()
                   //设置哪些路径可以直接访问，不需要认证
                    .antMatchers("/","/test/hello","/user/login").permitAll()
                    //当前登录的用户，只有具有admins权限才可以访问这个路径
                   //1、hasAuthority方法
                   //.antMatchers("/test/index").hasAuthority("admins")
                   //2、hasAnyAuthority方法
                  // .antMatchers("/test/index").hasAnyAuthority("admins,manager")
                  //3、hasRole方法 ROLE_sale
                   .antMatchers("/test/index").hasRole("sale")
                    //4、hasAnyRole方法
    
                .anyRequest().authenticated()
                .and().csrf().disable();    //关闭csrf防护
        }
    }

# 3、 TestController #

package com.atguigu.springsecuritydemo1.controller;
    
    import com.atguigu.springsecuritydemo1.entity.Users;
    import org.springframework.security.access.annotation.Secured;
    import org.springframework.security.access.prepost.PostAuthorize;
    import org.springframework.security.access.prepost.PostFilter;
    import org.springframework.security.access.prepost.PreAuthorize;
    import org.springframework.web.bind.annotation.GetMapping;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.RestController;
    
    import java.util.ArrayList;
    import java.util.List;
    
    @RestController
    @RequestMapping("/test")
    public class TestController { 
    
        @GetMapping("hello")
        public String add(){ 
            return "hello security";
        }
    
        @GetMapping("index")
        public String index(){ 
            return "hello index";
        }
    }

# 4、测试 #

访问：`http://localhost:8111/test/index`  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70]  
可以看到，确实是跳转到我们自定义的登录页面

[20210618114932361.png]: /images/20221005/5b5a8176ed414bd58cfc0ed1dbcb4859.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70]: /images/20221005/e521e44645a6486f93a0e97349864e18.png