SpringSecurity--记住我功能原理

布满荆棘的人生 2024-02-19 17:28 54阅读 0赞

记住我功能原理：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70][]

项目中记住我配置：

//记住我配置，如果想在'记住我'登录时记录日志，可以注册一个InteractiveAuthenticationSuccessEvent事件的监听器
    http.rememberMe()
    .tokenRepository(persistentTokenRepository())//保存方式
    //国企时间				.tokenValiditySeconds(securityProperties.getBrowser().getRememberMeSeconds())
    .userDetailsService(userDetailsService)//认证服务
    
       /**
    	 * 记住我功能的token存取器配置
    	 * @return
    	 */
    	@Bean
    	public PersistentTokenRepository persistentTokenRepository() {
    		JdbcTokenRepositoryImpl tokenRepository = new JdbcTokenRepositoryImpl();
    		tokenRepository.setDataSource(dataSource);
    		//自动创建表
    //		tokenRepository.setCreateTableOnStartup(true);
    		return tokenRepository;
    	}

JdbcTokenRepositoryImpl：用于rememberme功能数据存储

public class JdbcTokenRepositoryImpl extends JdbcDaoSupport implements
    		PersistentTokenRepository {
    	// ~ Static fields/initializers
    	// =====================================================================================
    
    	/** Default SQL for creating the database table to store the tokens */
    	public static final String CREATE_TABLE_SQL = "create table persistent_logins (username varchar(64) not null, series varchar(64) primary key, "
    			+ "token varchar(64) not null, last_used timestamp not null)";
    	/** The default SQL used by the <tt>getTokenBySeries</tt> query */
    	public static final String DEF_TOKEN_BY_SERIES_SQL = "select username,series,token,last_used from persistent_logins where series = ?";
    	/** The default SQL used by <tt>createNewToken</tt> */
    	public static final String DEF_INSERT_TOKEN_SQL = "insert into persistent_logins (username, series, token, last_used) values(?,?,?,?)";
    	/** The default SQL used by <tt>updateToken</tt> */
    	public static final String DEF_UPDATE_TOKEN_SQL = "update persistent_logins set token = ?, last_used = ? where series = ?";
    	/** The default SQL used by <tt>removeUserTokens</tt> */
    	public static final String DEF_REMOVE_USER_TOKENS_SQL = "delete from persistent_logins where username = ?";
    。。。。。。。。。。。。。。。。。。。。。。。。。

sql:

CREATE TABLE `persistent_logins` (
      `username` varchar(64) NOT NULL,
      `series` varchar(64) NOT NULL,
      `token` varchar(64) NOT NULL,
      `last_used` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
      PRIMARY KEY (`series`)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8;

步骤说明：

表单登陆页面存在：

在登陆成功调用登陆成功处理的时候会先调用rememberMeServices的loginSuccess方法。

AbstractAuthenticationProcessingFilter：

protected void successfulAuthentication(HttpServletRequest request,
    			HttpServletResponse response, FilterChain chain, Authentication authResult)
    			throws IOException, ServletException {
    
    		if (logger.isDebugEnabled()) {
    			logger.debug("Authentication success. Updating SecurityContextHolder to contain: "
    					+ authResult);
    		}
    
    		SecurityContextHolder.getContext().setAuthentication(authResult);
            //记住我操作
    		rememberMeServices.loginSuccess(request, response, authResult);
    
    		// Fire event
    		if (this.eventPublisher != null) {
    			eventPublisher.publishEvent(new InteractiveAuthenticationSuccessEvent(
    					authResult, this.getClass()));
    		}
    
    		successHandler.onAuthenticationSuccess(request, response, authResult);
    	}

PersistentTokenBasedRememberMeServices：

protected void onLoginSuccess(HttpServletRequest request,
    			HttpServletResponse response, Authentication successfulAuthentication) {
    	String username = successfulAuthentication.getName();
           
    	logger.debug("Creating new persistent login for user " + username);
       
    	PersistentRememberMeToken persistentToken = new PersistentRememberMeToken(
    			username, generateSeriesData(), generateTokenData(), new Date());
    	try {
    	    //创建表结构 并且将数据存储在数据库中
    		tokenRepository.createNewToken(persistentToken);
    		//添加cookie
    		addCookie(persistentToken, request, response);
    	}
    	catch (Exception e) {
    		logger.error("Failed to save persistent token ", e);
    	}
    }

![20190221000759768.png][]

登陆成功。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 1][]

下一次请求过来。先进入RememberMeAuthenticationFilter拦截器中，从请求里面拿去cookie中的数据，然后去数据中进行查找相应用户的数据，

RememberMeAuthenticationFilter：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 2][]

PersistentTokenBasedRememberMeServices：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 3][]

之后又进入了 RememberMeAuthenticationFilter。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 4][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/c4bb8730f500435696e7a4cf2fe0b60d.png
[20190221000759768.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/a70e08c567484c6ca488ac4a26ee8cb6.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 1]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/17bb91bb1f0d4f79bbc2e59eb4f17207.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 2]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/e8f093d188454422bbcce63d5f5c86c5.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 3]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/8773ebf40f504126941c07b283120f47.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MzU0OTU3OA_size_16_color_FFFFFF_t_70 4]: https://image.dandelioncloud.cn/pgy_files/images/2024/01/29/730c7b9e954648e4a67f79565a3332b9.png