Springboot集成Spring Security（结合数据库根据角色给定权限）

傷城~ 2022-12-21 03:20 174阅读 0赞

### Springboot集成Spring Security ###

*   *  1、Spring Security简介
     *  2、引入依赖
     *  3、创建数据库并实现根据id查找
     *  4、实现UserDetailsService接口
     *  5、在WebSecurityConfig类注册CustomUserService
     *  6、编写MyPasswordEncoder类实现PasswordEncoder
     *  7、测试

## 1、Spring Security简介 ##

Spring Security是一个能够为基于Spring的企业应用系统提供声明式的安全访问控制解决方案的安全框架。它提供了一组可以在Spring应用上下文中配置的Bean，充分利用了Spring IoC，DI（控制反转Inversion of Control ,DI:Dependency Injection 依赖注入）和AOP（面向切面编程）功能，为应用系统提供声明式的安全访问控制功能，减少了为企业系统安全控制编写大量重复代码的工作。  
*（百度百科）*

## 2、引入依赖 ##

在pom文件加入如下代码：

<dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-security</artifactId>
            </dependency>

## 3、创建数据库并实现根据id查找 ##

角色表  
![在这里插入图片描述][20201119212133387.png_pic_center]  
用户表  
![在这里插入图片描述][20201114122923413.png_pic_center]  
关联表  
![在这里插入图片描述][20201114122939706.png_pic_center]

业务实现的方法（这里省略了Dao和业务接口）

//根据id找角色实体
        @Override
        public AyRole find(String id) { 
            return ayRoleRepository.findById(id).get();
        }

//根据用户id找角色关联的实体列表
          @Override
        public List<AyUserRoleRel> findByUserId(String userId) { 
            return ayUserRoleRelRepository.findByUserId(userId);
        }

//根据名字找用户
        @Override
        public AyUser findByName(String name) { 
            return ayUserDao.findByName(name);
        }

## 4、实现UserDetailsService接口 ##

用CustomUserService类实现UserDetailsService接口

**注意：给定角色名称要加上ROLE\_前缀，不然会识别不出**

代码如下：

import com.example.demojpa.error.BusinessException;
    import com.example.demojpa.model.AyUser;
    import com.example.demojpa.model.AyUserRoleRel;
    import com.example.demojpa.service.AyRoleService;
    import com.example.demojpa.service.AyUserRoleRelService;
    import com.example.demojpa.service.AyUserService;
    import org.apache.logging.log4j.LogManager;
    import org.apache.logging.log4j.Logger;
    import org.springframework.security.core.GrantedAuthority;
    import org.springframework.security.core.authority.SimpleGrantedAuthority;
    import org.springframework.security.core.userdetails.User;
    import org.springframework.security.core.userdetails.UserDetails;
    import org.springframework.security.core.userdetails.UserDetailsService;
    import org.springframework.security.core.userdetails.UsernameNotFoundException;
    import org.springframework.stereotype.Service;
    
    import javax.annotation.Resource;
    import java.util.ArrayList;
    import java.util.List;
    
    /* * 自定义用户服务类 * ye * 2020.11.10 * */
    @Service
    public class CustomUserService implements UserDetailsService { 
        //log4j
        Logger logger = LogManager.getLogger(this.getClass());
        @Resource
        private AyUserService ayUserService;
    
        @Resource
        private AyUserRoleRelService ayUserRoleRelService;
    
        @Resource
        private AyRoleService ayRoleService;
    
        @Override
        public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException { 
            AyUser ayUser = ayUserService.findByName(s);
            if (ayUser == null){ 
                throw new BusinessException("用户不存在");
            }
    
            //获取用户所有的关联角色
            List<AyUserRoleRel> ayUserRoleRels = ayUserRoleRelService.findByUserId(ayUser.getId());
            List<GrantedAuthority> authorities = new ArrayList<GrantedAuthority>();
            if(ayUserRoleRels != null && ayUserRoleRels.size()>0){ 
                for (AyUserRoleRel ayUserRoleRel:ayUserRoleRels){ 
                    //获取用户关联角色名称
                    String roleName = ayRoleService.find(ayUserRoleRel.getRoleId()).getName();
                    //加上ROLE_前缀
                    roleName = "ROLE_" +roleName;
                    authorities.add(new SimpleGrantedAuthority(roleName));
                }
            }
            logger.info(ayUser.getName()+" "+ayUser.getPassword()+" "+authorities);
            return new User(ayUser.getName(),ayUser.getPassword(),authorities);
        }
    }

## 5、在WebSecurityConfig类注册CustomUserService ##

新建一个security文件夹，在里面定义一个WebSecurityConfig类  
代码如下：

import com.example.demojpa.service.impl.CustomUserService;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    
    import javax.annotation.Resource;
    
    /* * security配置类 * ye * 2020.11.10 * */
    @Configuration
    @EnableWebSecurity
    public class WebSecurityConfig extends WebSecurityConfigurerAdapter { 
    
        @Bean
        public CustomUserService customUserService() { 
            return new CustomUserService();
        }
    
        @Override
        protected void configure(HttpSecurity httpSecurity) throws Exception { 
    
            //路由策略和访问权限的简单配置
            httpSecurity
                    .authorizeRequests()
                    //要求有管理员的权限
                    .antMatchers("/Ajax").access("hasRole('ADMIN')")
                    .antMatchers("/**")
                    .permitAll()
                    .and()
                    .formLogin()                  //启用默认登录页面
                    .failureForwardUrl("/error")  //登录失败返回URL: /error
                    .defaultSuccessUrl("/index")  //登录成功跳转URL，这里跳转到首页
                    .permitAll();                 //登录页面全部权限可访问
            super.configure(httpSecurity);
        }
    
    
        @Resource
        public void configureGlobal(AuthenticationManagerBuilder authenticationManagerBuilder) throws Exception { 
            authenticationManagerBuilder
                    .userDetailsService(customUserService())
                    .passwordEncoder(new MyPasswordEncoder());
    //                .inMemoryAuthentication()
    //                .withUser("ye").password("123456").roles("ADMIN")
    //                .and()
    //                .withUser("lu").password("123456").roles("USER");
    
        }
    
    }

在WebSecurityConfig配置中，通过注解@Bean将CustomUserService装进容器，并在configureGlobal方法中注册CustomUserService类

## 6、编写MyPasswordEncoder类实现PasswordEncoder ##

代码如下：

import org.springframework.security.crypto.password.PasswordEncoder;
    
    /* * security的password * ye * 2020.11.10 * */
    public class MyPasswordEncoder implements PasswordEncoder { 
        @Override
        public String encode(CharSequence charSequence) { 
            return charSequence.toString();
        }
    
        @Override
        public boolean matches(CharSequence charSequence, String s) { 
            return s.equals(charSequence.toString());
        }
    }

## 7、测试 ##

在运行时报错  
![在这里插入图片描述][20201114133003617.png_pic_center]  
说bean已经被注册，我猜是因为@service注释

还好我们根据它的提示在配置里加入

spring.main.allow-bean-definition-overriding=true

问题解决

**再次启动,输入正确的账号密码：USER 权限（无法访问/Ajax）,访问/index成功，访问/Ajax出错**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 1]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 2]

**输入正确的账号密码：ADMIN 权限（可以访问/Ajax）,访问/index成功，访问/Ajax成功**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 3]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 4]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 5]

成功根据数据库的权限访问相应网页！

[20201119212133387.png_pic_center]: /images/20221120/25cca9a4b79e460b854d99db84e2d9ae.png
[20201114122923413.png_pic_center]: /images/20221120/5cfcfb6676804f10bb253626056be10c.png
[20201114122939706.png_pic_center]: /images/20221120/d3785fd2e5984229a19c7424b0218871.png
[20201114133003617.png_pic_center]: /images/20221120/58292a7b421f4c4db02d57dd4c8e2cf4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center]: /images/20221120/402b7ccc34344bb3a90359da54caf889.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 1]: /images/20221120/e7fa9001aa864b93b70cb05a27cf5786.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 2]: /images/20221120/135494f821cf42a491223db189415540.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 3]: /images/20221120/119666d51075445bb1d460405751afc2.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 4]: /images/20221120/d2d7713e681a406ea833fa3bfef8366c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA_size_16_color_FFFFFF_t_70_pic_center 5]: https://img-blog.csdnimg.cn/20201119212358125.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzUyMDY3MA==,size_16,color_FFFFFF,t_70#pic_center