关于Spring Security框架

男娘i 2024-03-24 13:46 52阅读 0赞

#### Spring Security框架 ####

*  添加Spring Security框架依赖
 *  Spring Security的配置类
 *  关于登录表单
 *  关于URL的授权访问
 *  使用临时的自定义账号实现登录
 *  使用数据库中的账号实现登录
 *  关于防止伪造的跨域攻击
 *  前后端分离的登录
 *  关于通过认证的标准
 *  关于authenticate()的返回结果
 *  识别当事人
 *  处理授权
 *   *  配置 jwt 地址： https://editor.csdn.net/md/?articleId=129984203

## 添加Spring Security框架依赖 ##

![在这里插入图片描述][80c1dff73a63406cb901015911a2994a.png]

<dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-security</artifactId>
            </dependency>

![在这里插入图片描述][c3166afc4d04483cbc0d97861ae68d3b.png]  
![在这里插入图片描述][8a3c54490d774bcb91c4d4a5273f07e5.png]  
![在这里插入图片描述][8d23fdd3d3f944a392e0458eacdc84e6.png]  
![在这里插入图片描述][025da69b670b4922bab2a80dcdc8bab0.png]  
![在这里插入图片描述][0c119dc1188747ec97cf7e28adfa9273.png]  
![在这里插入图片描述][1a502e2dc5eb40bcbf43a94943cb3c90.png]  
![在这里插入图片描述][ce199c377c924b88ae9acaa31efb497d.png]  
![在这里插入图片描述][6f53fc566ac649409bf2b5735049b3f7.png]  
![在这里插入图片描述][9616821843f14cfcaa17c478e98055c9.png]

## Spring Security的配置类 ##

![在这里插入图片描述][b68891aefa25493a859e4a5fc8be0339.png]

package cn.tedu.csmallpassport.config;
    
    import lombok.extern.slf4j.Slf4j;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    
    @Slf4j
    @Configuration
    public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
        
        
    }

![在这里插入图片描述][23472ee8d9e24678ac963c34216ea798.png]

![在这里插入图片描述][2df3f36d8b8748d5819c9c739f296707.png]  
![在这里插入图片描述][e2b4d0680fe3404d97964dba7ff6b80d.png]  
![在这里插入图片描述][bd5d991374e74373bc6dccd91371fc1b.png]  
![在这里插入图片描述][36e6ab5194f54047bb3cf88619cf6e39.png]

## 关于登录表单 ##

![在这里插入图片描述][f31b162cd5d449e581a798e45fdc154c.png]

## 关于URL的授权访问 ##

![在这里插入图片描述][b48189d7b38c42e7bd93b4c34c33a2a9.png]

package cn.tedu.csmallpassport.config;
    
    import lombok.extern.slf4j.Slf4j;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    
    @Slf4j
    @Configuration
    public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
        
        // 白名单
        String[] urls = {
        
                "/login"
        };
    
        @Override
        protected void configure(HttpSecurity http) throws Exception {
        
            // 配置URL的授权访问
            // 注意： 配置时，各请求的授权访问遵循“第一匹配原则”，即根据代码从上至下，以第1次匹配到的规则为准
            // 所以在配置时，必须将更加精准的配置写在前面，覆盖范围更大的匹配的配置写在后面
            http.authorizeRequests() // 配置URL的授权访问
                    .mvcMatchers(urls)  // 匹配某些请求
                    .permitAll()  // 直接许可, 即 不需要认证就可以直接访问
                    .anyRequest()   // 任何请求
                    .authenticated();  // 以上匹配到的请求必须是”已经通过认证的（通过登录的）“
    
    
            // super.configure(http);  // 不要调用父类的同款方法
            // 调用formLogin() 表示启用登录和登出页，如果未调用此方法，则没有登录和登出页
            http.formLogin();
        }
    }

## 使用临时的自定义账号实现登录 ##

![在这里插入图片描述][ebcbc2b4c169497bb0e6c438c4f6d8f0.png]  
![在这里插入图片描述][903cd6db0ad04dd8bf03d4ef29b0aa4f.png]

package cn.tedu.csmallpassport.security;
    
    import org.springframework.security.core.userdetails.UserDetails;
    import org.springframework.security.core.userdetails.UserDetailsService;
    import org.springframework.security.core.userdetails.UsernameNotFoundException;
    import org.springframework.stereotype.Service;
    
    @Service
    public class UserDetailsServiceImpl implements UserDetailsService {
        
        @Override
        public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
        
            return null;
        }
    }

![在这里插入图片描述][fe2368d30b7d4af4b3f2b6fba8dde1c1.png]  
![在这里插入图片描述][4e97673581fe4d7896a593656fc58cfb.png]  
![在这里插入图片描述][27d3d08043824a789e9c0d4bb848e9c5.png]

package cn.tedu.csmallpassport.security;
    
    import lombok.extern.slf4j.Slf4j;
    import org.springframework.security.core.userdetails.User;
    import org.springframework.security.core.userdetails.UserDetails;
    import org.springframework.security.core.userdetails.UserDetailsService;
    import org.springframework.security.core.userdetails.UsernameNotFoundException;
    import org.springframework.stereotype.Service;
    
    @Slf4j
    @Service
    public class UserDetailsServiceImpl implements UserDetailsService {
        
        @Override
        public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
        
            // 假设正确的用户名是root，匹配的密码是1234
            if (!"root".equals(s)) {
        
                log.warn("用户名【{}】错误，将不会返回有效的UserDetails（用户详情）");
                return null;
            }
            UserDetails userDetails = User.builder()  // 构建者
                    .username("root")   // 存入用户名
                    .password("1234")   // 存入密码
                    .disabled(false)  // 存入启用或禁用的状态
                    .accountLocked(false)   // 存入账户是否锁定的状态
                    .credentialsExpired(false)   // 存入凭证是否过期的状态
                    .accountExpired(false)  // 存入账户是否过期的状态
                    .authorities("这是一个临时的山寨权限，暂时没什么用")  // 存入权限列表
                    .build();   // 执行构建，得到UserDetails类型的对象
            log.debug("即将向Spring Security返回UserDetails类型的对象，返回结果：{}", userDetails);
            return userDetails;
        }
    }

![在这里插入图片描述][84d19f8027894742bb8019737ab93468.png]  
![在这里插入图片描述][16df28d3389a48128a98df98cc6368b5.png]

package cn.tedu.csmallpassport.config;
    
    import lombok.extern.slf4j.Slf4j;
    import org.springframework.cglib.proxy.NoOp;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    import org.springframework.security.crypto.password.NoOpPasswordEncoder;
    import org.springframework.security.crypto.password.PasswordEncoder;
    
    @Slf4j
    @Configuration
    public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
        
        // 白名单
        String[] urls = {
        
                "/login"
        };
    
        @Bean
        public PasswordEncoder passwordEncoder() {
        
            return NoOpPasswordEncoder.getInstance();
        }
    
        @Override
        protected void configure(HttpSecurity http) throws Exception {
        
            // 配置URL的授权访问
            // 注意： 配置时，各请求的授权访问遵循“第一匹配原则”，即根据代码从上至下，以第1次匹配到的规则为准
            // 所以在配置时，必须将更加精准的配置写在前面，覆盖范围更大的匹配的配置写在后面
            http.authorizeRequests() // 配置URL的授权访问
                    .mvcMatchers(urls)  // 匹配某些请求
                    .permitAll()  // 直接许可, 即 不需要认证就可以直接访问
                    .anyRequest()   // 任何请求
                    .authenticated();  // 以上匹配到的请求必须是”已经通过认证的（通过登录的）“
    
            // super.configure(http);  // 不要调用父类的同款方法
            // 调用formLogin() 表示启用登录和登出页，如果未调用此方法，则没有登录和登出页
            http.formLogin();
        }
    }

![在这里插入图片描述][f7cc48c8668140ba956ad504c368e563.png]

## 使用数据库中的账号实现登录 ##

![在这里插入图片描述][da379b0aba994391bb12d0f90ccc0f0e.png]  
![在这里插入图片描述][1c15ca4ef07f492488de787b9227c2b2.png]  
![在这里插入图片描述][e7ec07a7fc5c47149b5273ea6d719b16.png]

package cn.tedu.csmallpassport.pojo.vo;
    
    import lombok.Data;
    
    import java.io.Serializable;
    
    @Data
    public class AdminLoginInfoVO implements Serializable {
        
        private Long id;
        private String username;
        private String password;
        private Integer enable;
    }

![在这里插入图片描述][37806bf55d0f450ca0887d1f27304dec.png]

AdminLoginInfoVO getLoginInfoByUsername(String username);

![在这里插入图片描述][f900142c959a4667b5f414da9eb2f52c.png]

<select id="getLoginInfoByUsername" resultMap="LoginInfoResultMap">
            SELECT id, username, password, enable FROM ams_admin WHERE username = #{username}
        </select>
    	<resultMap id="LoginInfoResultMap" type="cn.tedu.csmallpassport.pojo.vo.AdminLoginInfoVO">
            <id column="id" property="id"/>
            <result column="username" property="username"/>
            <result column="password" property="password"/>
            <result column="enable" property="enable"/>
        </resultMap>

![在这里插入图片描述][5e1a77c5c2e24b9aa531b7b13576db88.png]

@Test
        void getLoginInfoByUsername() {
        
            String username = "root";
            AdminLoginInfoVO loginInfoByUsername = mapper.getLoginInfoByUsername(username);
            System.out.println(loginInfoByUsername);
        }

![在这里插入图片描述][8b80f829ca4a40cf9750d6feefa456a2.png]

![在这里插入图片描述][be986ab1c91e41bcbff22f1fdb3173a5.png]

@Bean
        public PasswordEncoder passwordEncoder() {
        
            return new BCryptPasswordEncoder();
        }

![在这里插入图片描述][f756bfed996a46099848d2fcd4cd860a.png]  
![在这里插入图片描述][bb2caebddfa84600b0b98ed982f9d8d0.png]

http.csrf().disable();

![在这里插入图片描述][46982cbfa68c4468a5c222b4e312c3d2.png]

## 关于防止伪造的跨域攻击 ##

伪造的跨域攻击：此类攻击是基于“服务器对客户端的浏览器的信任”，例如，用户在浏览器的第1个选项卡中登录了，那么，在第2个、第3个等等同一个浏览器的其它选项卡中访问同样的服务器，也会被视为“已登录”的状态。所以，假设某个用户在浏览器的第1个选项卡中登录了网上银行，此用户在第2个选项卡中打开了另一个网站，此网站可能是恶意的网站（不是此前第1个选项卡的网上银行的网站），在恶意网站中隐藏了一个向网上银行的网站发起请求的链接，并自动发出了请求（比较典型的做法是将链接设置为标签的src属性值，并隐藏此标签使之不显示），则会导致在第2个选项卡中的恶意网站被打开时，就自动的向网上银行发起了请求，而网上银行收到了请求后，会视为“已登录”的状态！

![在这里插入图片描述][bc9f771360754aa389f9d58832cb9aa9.png]  
![在这里插入图片描述][32bb8eedd21440fba5878d58cb819ffe.png]  
![在这里插入图片描述][0c0b79c464bc4d4990e299d053900933.png]

以Spring Security默认的登录表单为例：  
  
![在这里插入图片描述][a1aaa5d49e5643fc97639448bf32f6e3.png]  
![在这里插入图片描述][7ee30086426644369b78d8eb329df5a0.png]  
![在这里插入图片描述][7efc7f54440c4a909df095cf1127b47c.png]  
![在这里插入图片描述][d3a925a76ad2417aa2e66a5bf1af40ff.png]

## 前后端分离的登录 ##

![在这里插入图片描述][501a9306a4954ea986cf5ca96fd207e5.png]

// 白名单
        // 所有路径必须使用 / 作为第1个字符
        // 使用1个星号作为通配符时，表示通配此层级的任意资源，例如：/admins/*，可以匹配 /admins/delete、/admins/add-new
        // 但是，不可以匹配多层级，例如：/admins/* 不可匹配 /admins/9527/delete
        // 使用2个连续的星号，表示通配若干层级的任意资源，例如：/admins/** 可以匹配 /admins/delete、/admins/9527/delete
        String[] urls = {
        
                "/doc.html",
                "/favicon.ico",
                "/**/*.css",
                "/**/*.js",
                "/swagger-resources",
                "/v2/api-docs",
        };

![在这里插入图片描述][5c129c050d6a49e8aa598e9a22cf918c.png]  
![在这里插入图片描述][566dabbd4b174cd484aa0e2a9250913c.png]  
![在这里插入图片描述][e427b409ed6145258b264aa1728a60cb.png]  
![在这里插入图片描述][8dcb22d720ef4f71bff830f30f44b7d5.png]  
![在这里插入图片描述][6bfb5a44747d4f4096053d4336f73d5a.png]

@PostMapping("/login")
        public JsonResult login(@RequestBody AdminLoginDTO adminLoginDTO) {
        
            log.debug("开始处理【管理员登录】的请求，参数：{}", adminLoginDTO);
            // TODO 具体功能待定
            return JsonResult.ok();
        }

![在这里插入图片描述][9ae223f03d0f4f53bc1c0ef28495b562.png]

![在这里插入图片描述][584956745e6649379fa63d236889af27.png]

@Bean
        @Override
        public AuthenticationManager authenticationManagerBean() throws Exception {
        
            return super.authenticationManagerBean();
        }

![在这里插入图片描述][68958e8c86ca48b09a6b5f89645d84f1.png]

@Autowired
        private AuthenticationManager authenticationManager;
    
        @Override
        public void login(AdminLoginDTO adminLoginDTO) {
        
            log.debug("开始处理【管理员登录】的业务，参数：{}", adminLoginDTO);
            // 创建认证信息
            Authentication authentication = new UsernamePasswordAuthenticationToken(  // 第一个参数当事人， 第二个参数凭证
                    adminLoginDTO.getUsername(), adminLoginDTO.getPassword()
            );
            // 执行认证
            authenticationManager.authenticate(authentication);
            // 如果没有出现异常，则表示验证登录成功
            log.debug("验证登录成功");
        }

![在这里插入图片描述][f8bea8a3e49542269856f172a6bb1854.png]  
![在这里插入图片描述][045153a6475f491c9cda1a0f66ff76ff.png]  
![在这里插入图片描述][c0ed51a185e0441c9b386b21a0859d10.png]  
![在这里插入图片描述][e50802d7a7a74b988805eabe45e6d660.png]  
![在这里插入图片描述][564ec9e171514bcb9fe38b370ff7ada3.png]  
![在这里插入图片描述][0ebe61547d5949cea483511382a09d53.png]  
![在这里插入图片描述][30e9392bff254ea8aa4453b6c31c7e8d.png]  
![在这里插入图片描述][04e0443e29844ea9af30eda0afca4ec8.png]

ERR_UNAUTHORIZED(401, "登录失败"),
        ERR_UNAUTHORIZED_DISABLED(402, "账号被禁用"),

![在这里插入图片描述][fdfc447fc2cc44b9abe6973a2c84773a.png]

@ExceptionHandler({
        
                InternalAuthenticationServiceException.class, BadCredentialsException.class
        })
        public JsonResult handleAuthenticationException(AuthenticationException e) {
        
            log.debug("登录失败，用户名或密码错误！");
            return JsonResult.fail(ServiceCode.ERR_UNAUTHORIZED, "登录失败，用户名或密码错误！");
        }
    
        @ExceptionHandler
        public JsonResult handleDisabledException(DisabledException e) {
        
            log.debug("登录失败，此账号已经被禁用！");
            return JsonResult.fail(ServiceCode.ERR_UNAUTHORIZED_DISABLED, "登录失败，此账号已经被禁用！");
        }

![在这里插入图片描述][cf64ffcfcbb64c3b95603d6e7698b139.png]  
![在这里插入图片描述][58e4bb702d5d4c849d5646fba6e8bb6e.png]

## 关于通过认证的标准 ##

![在这里插入图片描述][7c05c33838f04f1593f6246e91d6dc5c.png]  
![在这里插入图片描述][cad2f9704beb4ce19f022b824647b977.png]  
![在这里插入图片描述][9825a375f2f34503b429fccffbd656dd.png]  
![在这里插入图片描述][a55eb5a165da46ad8cb4cbca74093046.png]

@Autowired
        private AuthenticationManager authenticationManager;
    
        @Override
        public void login(AdminLoginDTO adminLoginDTO) {
        
            log.debug("开始处理【管理员登录】的业务，参数：{}", adminLoginDTO);
            // 创建认证信息
            Authentication authentication = new UsernamePasswordAuthenticationToken(  // 第一个参数当事人， 第二个参数凭证
                    adminLoginDTO.getUsername(), adminLoginDTO.getPassword()
            );
             
            Authentication authenticationResult = authenticationManager.authenticate(authentication);
    
            // 如果没有出现异常，则表示验证登录成功，需要将认证信息存入到Security上下文中
            log.debug("验证登录成功，即将向SecurityContext中存入Authentication");
            SecurityContext securityContext = SecurityContextHolder.getContext();
            securityContext.setAuthentication(authenticationResult);
        }

## 关于authenticate()的返回结果 ##

![在这里插入图片描述][29494333fd854ffc81245dc87b3c6945.png]

2023-04-04 14:45:03.800 DEBUG 6076 --- [nio-9081-exec-1] c.t.c.p.service.impl.AdminServiceImpl    : 验证登录成功，返回的Authentication为：
    
    UsernamePasswordAuthenticationToken [
    	Principal=org.springframework.security.core.userdetails.User [
    		Username=root, 
    		Password=[PROTECTED], 
    		Enabled=true, 
    		AccountNonExpired=true, 
    		credentialsNonExpired=true, 
    		AccountNonLocked=true, 
    		Granted Authorities=[这是一个临时的山寨权限，暂时没什么用]
    	], 
    	Credentials=[PROTECTED], 
    	Authenticated=true, 
    	Details=null, 
    	Granted Authorities=[这是一个临时的山寨权限，暂时没什么用]
    ]

![在这里插入图片描述][9eedaa4580474753a4f4ee4a5615baad.png]

## 识别当事人 ##

![在这里插入图片描述][fc5ebd8a1fb84f6baa871bf48221f59a.png]  
![在这里插入图片描述][e52a0786574b45b5844a9714430df8c0.png]  
![在这里插入图片描述][d941dbc29d794724aeede871fb1ea939.png]  
![在这里插入图片描述][108ddc94875149bd855ef306eeedfc6e.png]  
![在这里插入图片描述][45899fef45b14a5687389a934a99146e.png]

package cn.tedu.csmallpassport.security;
    
    import lombok.Getter;
    import lombok.ToString;
    import org.springframework.security.core.GrantedAuthority;
    import org.springframework.security.core.userdetails.User;
    
    import java.util.Collection;
    
    @ToString(callSuper = true)
    public class AdminDetails extends User {
        
        @Getter
        private Long id;
    
        public AdminDetails(Long id, String username, String password, boolean enabled, Collection<? extends GrantedAuthority> authorities) {
        
            super(username, password, enabled, true, true, true, authorities);
            this.id = id;
        }
    }

![在这里插入图片描述][7daacd788ba144faaba2621edcedf360.png]

@Override
    public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
        
        log.debug("Spring Security自动调用了loadUserByUsername()方法，参数：{}", s);
    
        AdminLoginInfoVO loginInfo = adminMapper.getLoginInfoByUsername(s);
        log.debug("根据用户名【{}】查询登录信息，结果：{}", s, loginInfo);
        if (loginInfo == null) {
        
            String message = "用户名不存在，将无法返回有效的UserDetails对象，则返回null";
            log.warn(message);
            return null;
        }
    
        log.debug("开始创建返回给Spring Security的UserDetails对象……");
        
    	// ========== 以下是新的代码，替换了原有的代码 ==========
        Collection<GrantedAuthority> authorities = new ArrayList<>();
        authorities.add(new SimpleGrantedAuthority("这是一个临时的山寨权限，暂时没什么用"));
    
        AdminDetails adminDetails = new AdminDetails(
                loginInfo.getId(),
                loginInfo.getUsername(),
                loginInfo.getPassword(),
                loginInfo.getEnable() == 1,
                authorities
        );
    
        log.debug("即将向Spring Security返回UserDetails类型的对象，返回结果：{}", adminDetails);
        return adminDetails;
    }

![在这里插入图片描述][041596ffb6714fe38cd9668f77005c89.png]  
![在这里插入图片描述][fd9b938c1ed34337b21591b4e4dc80ce.png]

## 处理授权 ##

![在这里插入图片描述][0a901be37af541ab92456cbea17e9f1d.png]  
![在这里插入图片描述][205d75cb7d634c7cbd372d847bb10d46.png]  
![在这里插入图片描述][a0c268fae5974471b3691015f2e7d795.png]  
![在这里插入图片描述][4e1cb097488846f38a51957860703435.png]  
![在这里插入图片描述][954a28d5efcf4f59905e61a8ee895f66.png]  
![在这里插入图片描述][70c76cc3bb0d4941ad9e691a6e7a22c5.png]  
![在这里插入图片描述][8701e22931564429a93b9abde0c35c6a.png]

select ams_admin.id, ams_admin.username, ams_admin.password, ams_admin.enable, ams_permission.value
    from ams_admin
    left join ams_admin_role on ams_admin_role.admin_id = ams_admin.id
    left join ams_role_permission  on ams_role_permission.role_id = ams_admin_role.role_id
    left join ams_permission on ams_permission.id = ams_role_permission.permission_id
    where ams_admin.username = 'root'

![在这里插入图片描述][0807177b28194afe8d931ddd9653ccc6.png]  
![在这里插入图片描述][8b6838e236dd40149e5c2adaf90544ff.png]  
![在这里插入图片描述][8ec162f59a4d4e6bbb5de6fb4adc4c70.png]

<select id="getLoginInfoByUsername" resultMap="LoginInfoResultMap">
            SELECT
                <include refid="LoginInfoQueryFields"/>
            FROM ams_admin
            LEFT JOIN ams_admin_role ON ams_admin_role.admin_id = ams_admin.id
            LEFT JOIN ams_role_permission ON ams_role_permission.role_id = ams_admin_role.role_id
            LEFT JOIN ams_permission ON ams_permission.id = ams_role_permission.permission_id
            WHERE username = #{username}
        </select>
    
        <sql id="LoginInfoQueryFields">
            <if test="true">
                ams_admin.id, 
                ams_admin.username, 
                ams_admin.password, 
                ams_admin.enable,
                ams_permission.value
            </if>
        </sql>
    
        
        
        
        
        
        
        <resultMap id="LoginInfoResultMap" type="cn.tedu.csmallpassport.pojo.vo.AdminLoginInfoVO">
            <id column="id" property="id"/>
            <result column="username" property="username"/>
            <result column="password" property="password"/>
            <result column="enable" property="enable"/>
            <collection property="permissions" ofType="java.lang.String">
                <constructor>
                    <arg column="value"/>
                </constructor>
            </collection>
        </resultMap>

![在这里插入图片描述][ac74d62b27ba485dbf53f8bc82581796.png]

2023-04-04 17:20:12.529 DEBUG 12956 --- [           main] c.t.c.passport.mapper.AdminMapperTests   : 
    
    根据用户名【root】查询登录信息完成，查询结果：
    
    AdminLoginInfoVO(
    	id=1, 
    	username=root, 
    	password=$2a$10$N.ZOn9G6/YLFixAOPMg/h.z7pCu6v2XyFDtC4q.jeeGm/TEZyj15C, 
    	enable=1, 
    	permissions=[
    		/ams/admin/read, /ams/admin/add-new, 
    		/ams/admin/delete, /ams/admin/update, 
    		/pms/product/read, /pms/product/add-new, 
    		/pms/product/delete, /pms/product/update, 
    		/pms/brand/read, /pms/brand/add-new, 
    		/pms/brand/delete, /pms/brand/update, 
    		/pms/category/read, /pms/category/add-new, 
    		/pms/category/delete, /pms/category/update, 
    		/pms/picture/read, /pms/picture/add-new, 
    		/pms/picture/delete, /pms/picture/update, 
    		/pms/album/read, /pms/album/add-new, 
    		/pms/album/delete, /pms/album/update
    	]
    )

![在这里插入图片描述][7e72da5f6c624da6ac2fd91300f2565f.png]  
![在这里插入图片描述][439ce547adcf4b55b6d36b0eb09c84d4.png]

package cn.tedu.csmallpassport.security;
    
    import cn.tedu.csmallpassport.mapper.AdminMapper;
    import cn.tedu.csmallpassport.pojo.vo.AdminLoginInfoVO;
    import lombok.extern.slf4j.Slf4j;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.security.core.GrantedAuthority;
    import org.springframework.security.core.authority.SimpleGrantedAuthority;
    import org.springframework.security.core.userdetails.User;
    import org.springframework.security.core.userdetails.UserDetails;
    import org.springframework.security.core.userdetails.UserDetailsService;
    import org.springframework.security.core.userdetails.UsernameNotFoundException;
    import org.springframework.stereotype.Service;
    
    import java.util.ArrayList;
    import java.util.Collection;
    import java.util.Collections;
    import java.util.List;
    
    @Slf4j
    @Service
    public class UserDetailsServiceImpl implements UserDetailsService {
        
        @Autowired
        AdminMapper adminMapper;
    
        @Override
        public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException {
        
            log.debug("Spring Security自动调用了loadUserByUsername()方法，参数：{}", s);
    
            AdminLoginInfoVO loginInfo = adminMapper.getLoginInfoByUsername(s);
            log.debug("根据用户名【{}】查询登录信息，结果：{}", s, loginInfo);
            if (loginInfo == null) {
        
                String message = "用户名不存在，将无法返回有效的UserDetails对象，则返回null";
                log.warn(message);
                return null;
            }
    
            log.debug("开始创建返回给Spring Security的UserDetails对象……");
    
    //        UserDetails userDetails = User.builder()  // 构建者
    //                .username(loginInfo.getUsername())   // 存入用户名
    //                .password(loginInfo.getPassword())   // 存入密码
    //                .disabled(loginInfo.getEnable() == 0)  // 存入启用或禁用的状态
    //                .accountLocked(false)   // 存入账户是否锁定的状态
    //                .credentialsExpired(false)   // 存入凭证是否过期的状态
    //                .accountExpired(false)  // 存入账户是否过期的状态
    //                .authorities("这是一个临时的山寨权限，暂时没什么用")  // 存入权限列表
    //                .build();   // 执行构建，得到UserDetails类型的对象
    //        log.debug("即将向Spring Security返回UserDetails类型的对象，返回结果：{}", userDetails);
    
            // ========= 以下是本次调整代码 ===========
            Collection<GrantedAuthority> authorities = new ArrayList<>();
            for (String permission : loginInfo.getPermissions()) {
        
                authorities.add(new SimpleGrantedAuthority(permission));
            }
            // =========== 以上是本次调整代码 ============
            
            AdminDetails adminDetails = new AdminDetails(
                    loginInfo.getId(),
                    loginInfo.getUsername(),
                    loginInfo.getPassword(),
                    loginInfo.getEnable() == 1,
                    authorities
            );
            return adminDetails;
        }
    }

![在这里插入图片描述][0e9ec05077d44fc78f91bfc8adc1ef12.png]  
![在这里插入图片描述][0f21c90bda12470d9c98c2653db96bff.png]

@Slf4j
    @Configuration
    @EnableGlobalMethodSecurity(prePostEnabled = true) // 新增
    public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
        
        // 暂不关心方法内部的代码
    }

![在这里插入图片描述][ff2fda93081848a2a106a3ea77baec14.png]  
![在这里插入图片描述][c148bc587549434fa97edbf74c3d3354.png]  
![在这里插入图片描述][5685546953514c45bd6c2e4ff82737ff.png]  
![在这里插入图片描述][86574b0c0917499687d6f8d98408534a.png]  
![在这里插入图片描述][963ed51055424d92b0fc7b5d7a9ceaac.png]  
![在这里插入图片描述][35b3e0af556843aab2c2225caf50c379.png]

@ExceptionHandler
        public JsonResult handleAccessDeniedException(AccessDeniedException e) {
        
            log.debug("禁止访问，当前登录账号无权限访问！");
            return JsonResult.fail(ServiceCode.ERR_FORBIDDEN, "禁止访问，当前登录账号无权限访问！");
        }

### 配置 jwt 地址： https://editor.csdn.net/md/?articleId=129984203 ###

[80c1dff73a63406cb901015911a2994a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/4072a7e3f11a4ddf95123b8c350ae506.png
[c3166afc4d04483cbc0d97861ae68d3b.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/9af31c24fb304f40991675bd5a62a509.png
[8a3c54490d774bcb91c4d4a5273f07e5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/8b62c1f1be9e44a087c098020f855e57.png
[8d23fdd3d3f944a392e0458eacdc84e6.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/de187791a4b8402aa96ed89998239159.png
[025da69b670b4922bab2a80dcdc8bab0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/08e5d620c4b842b6a4753234d157aa14.png
[0c119dc1188747ec97cf7e28adfa9273.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/c18e970820ae483f98f63b1351b15236.png
[1a502e2dc5eb40bcbf43a94943cb3c90.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/e4f3d7ffa35d4e149ee9e7271e8d904e.png
[ce199c377c924b88ae9acaa31efb497d.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/4f52a1305c8f4882b1aec4cb99dc4254.png
[6f53fc566ac649409bf2b5735049b3f7.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/94992228815c43a48172116477f47770.png
[9616821843f14cfcaa17c478e98055c9.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/3b0da9579fad4dc5b2ff8ff287399112.png
[b68891aefa25493a859e4a5fc8be0339.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/28a137ef0a914f53bc774e695d44eb33.png
[23472ee8d9e24678ac963c34216ea798.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/a38f13274e184827bb7990de13c15ea1.png
[2df3f36d8b8748d5819c9c739f296707.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/3eaa3572527f465781f1a4ba88b59d27.png
[e2b4d0680fe3404d97964dba7ff6b80d.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/0c3f5c8e240c413cb106ccb928083bac.png
[bd5d991374e74373bc6dccd91371fc1b.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/b3b286893a924c668177a353308251d4.png
[36e6ab5194f54047bb3cf88619cf6e39.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/161826b6e0e24c2684c92b967d26558b.png
[f31b162cd5d449e581a798e45fdc154c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/7d8c48a3ca9848d789ef8d2310e06a2a.png
[b48189d7b38c42e7bd93b4c34c33a2a9.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/315daa66dfd14d439099699455bb9a5b.png
[ebcbc2b4c169497bb0e6c438c4f6d8f0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/611df2b6dd36410e81d38f6a0683c8ef.png
[903cd6db0ad04dd8bf03d4ef29b0aa4f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/237897ba46fc4d749233b76ec2c6ea99.png
[fe2368d30b7d4af4b3f2b6fba8dde1c1.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/911b87a99e1445919c788661ec724323.png
[4e97673581fe4d7896a593656fc58cfb.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/74e0796dc33d43dbb8009e9241d26264.png
[27d3d08043824a789e9c0d4bb848e9c5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/420d69fb3732473093984b45d9898b88.png
[84d19f8027894742bb8019737ab93468.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/ed572886223940b2aafd21261e53b886.png
[16df28d3389a48128a98df98cc6368b5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/9593478419cc46ac98f2a827fdd83a74.png
[f7cc48c8668140ba956ad504c368e563.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/83df404f08f44254bcbb4e44040cec9e.png
[da379b0aba994391bb12d0f90ccc0f0e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/462754228a2944029df62dfc78729ad3.png
[1c15ca4ef07f492488de787b9227c2b2.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/7f6c41f5d72a4bf0b1d3e86a74a4ef1d.png
[e7ec07a7fc5c47149b5273ea6d719b16.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/7d212522e6ee42509f5c3539c8cb898a.png
[37806bf55d0f450ca0887d1f27304dec.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/3ea1b5323dd14b0494b79d1d516cdce4.png
[f900142c959a4667b5f414da9eb2f52c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/7342c5dff0654e22bd9e3c2081982bbb.png
[5e1a77c5c2e24b9aa531b7b13576db88.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/ed3578cce3754ed6a7206c36dc9c2e3d.png
[8b80f829ca4a40cf9750d6feefa456a2.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/79c4b6630e634f15b0560705ff9b7c99.png
[be986ab1c91e41bcbff22f1fdb3173a5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/3fc83e2b3313428eb19ea1b973d81e2e.png
[f756bfed996a46099848d2fcd4cd860a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/c490af006c0b4c7687e9c9c48b01b959.png
[bb2caebddfa84600b0b98ed982f9d8d0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/4bd2fbfbe2dc4dbb869cbd3995f05aae.png
[46982cbfa68c4468a5c222b4e312c3d2.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/bb49acf1f0e541f1889725d43558433f.png
[bc9f771360754aa389f9d58832cb9aa9.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/10f1de73f34c4450a68bdbcfa32f3a81.png
[32bb8eedd21440fba5878d58cb819ffe.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/02f0fdd37019440790a9d7335c4f8b17.png
[0c0b79c464bc4d4990e299d053900933.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/812f3cc75fea4d4e8d318b8bc6693620.png
[a1aaa5d49e5643fc97639448bf32f6e3.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/c7210ca30d7449d2a74d7dc432106f56.png
[7ee30086426644369b78d8eb329df5a0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/4f3d73c45d99486bbb0203f99f6fdf71.png
[7efc7f54440c4a909df095cf1127b47c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/9ef99329a102480fa3055bb80eb1f9e1.png
[d3a925a76ad2417aa2e66a5bf1af40ff.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/f41675e8b1a94dfe98e9d6c1de8cdd8b.png
[501a9306a4954ea986cf5ca96fd207e5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/8c0605b59dbb42619e46efec320fe448.png
[5c129c050d6a49e8aa598e9a22cf918c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/fe9be271b4864ce58e29da7d86dbe99d.png
[566dabbd4b174cd484aa0e2a9250913c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/07eef50e3b894467859aeaf74539a2ea.png
[e427b409ed6145258b264aa1728a60cb.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/78583b7a932e49d7a5caac0be95fb39c.png
[8dcb22d720ef4f71bff830f30f44b7d5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/c373c97dbf934e958ae4eb8c078d8585.png
[6bfb5a44747d4f4096053d4336f73d5a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/3131c9e132d841cb8cc132db013a28d4.png
[9ae223f03d0f4f53bc1c0ef28495b562.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/d6b58799a4ac46c2b2e3c591b234711b.png
[584956745e6649379fa63d236889af27.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/110cf07280214daeadc793f88b757341.png
[68958e8c86ca48b09a6b5f89645d84f1.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/5711b51fa760466e9ca6b1875b383527.png
[f8bea8a3e49542269856f172a6bb1854.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/66fa459696974a2283f32ef44aceb1ee.png
[045153a6475f491c9cda1a0f66ff76ff.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/37f393527c884e948753a581b9f266d7.png
[c0ed51a185e0441c9b386b21a0859d10.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/9cade70718864e3d85dd7b92c8620535.png
[e50802d7a7a74b988805eabe45e6d660.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/60e34648e46b41eea6731e9c6f4affd3.png
[564ec9e171514bcb9fe38b370ff7ada3.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/2cc5a83fdb0c44efb629458156ffaf3d.png
[0ebe61547d5949cea483511382a09d53.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/d80d7370f26c41c8bc355a713340ba91.png
[30e9392bff254ea8aa4453b6c31c7e8d.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/a3378972422442209f54024bdc355b1e.png
[04e0443e29844ea9af30eda0afca4ec8.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/9f2ec65660074c1da7d2f03bc8ab2c09.png
[fdfc447fc2cc44b9abe6973a2c84773a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/82348bbea7e44f5981cd845e572f2994.png
[cf64ffcfcbb64c3b95603d6e7698b139.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/23bbadf53c2b4ce499e802f37a8d68ba.png
[58e4bb702d5d4c849d5646fba6e8bb6e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/2b22fb8ea8fe4f02a0fb12f5284210c3.png
[7c05c33838f04f1593f6246e91d6dc5c.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/90b1710c01054f658bba63e644aa5f08.png
[cad2f9704beb4ce19f022b824647b977.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/b049761de423496fa7d7f0446e3e7274.png
[9825a375f2f34503b429fccffbd656dd.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/5ef27f463ebb4143ad98710ec41db512.png
[a55eb5a165da46ad8cb4cbca74093046.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/8aace6d5008640eebacc098572abb37c.png
[29494333fd854ffc81245dc87b3c6945.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/fadbcf5d17ea4cceb439bb1a490105ee.png
[9eedaa4580474753a4f4ee4a5615baad.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/243a740def4e4a4488a15776a715048d.png
[fc5ebd8a1fb84f6baa871bf48221f59a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/42aa8246d3e048babeaa5bc06c58a311.png
[e52a0786574b45b5844a9714430df8c0.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/48920d77cf424d029b083c60b00af600.png
[d941dbc29d794724aeede871fb1ea939.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/3f2a9f7d12ec41399aa8ff3bec64580d.png
[108ddc94875149bd855ef306eeedfc6e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/240ca4670f5e411784de9b18973bc6cc.png
[45899fef45b14a5687389a934a99146e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/1518e736e6dc4fe68327c26243c8dbd8.png
[7daacd788ba144faaba2621edcedf360.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/fb1934b1f9e14666928c04c1b8225d65.png
[041596ffb6714fe38cd9668f77005c89.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/46927b9bab4448f1b78462e42d312a4d.png
[fd9b938c1ed34337b21591b4e4dc80ce.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/8a25c0ce4d1044209841cbbffe9cde9d.png
[0a901be37af541ab92456cbea17e9f1d.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/a312870939154fbabf4e0a7a20bf123c.png
[205d75cb7d634c7cbd372d847bb10d46.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/9e25daaf8d864e29a759aafc2e34fa46.png
[a0c268fae5974471b3691015f2e7d795.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/398ae1ff7a51442c8389db66c3f2e593.png
[4e1cb097488846f38a51957860703435.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/b25758dbcfd74801a67e73309177a2ff.png
[954a28d5efcf4f59905e61a8ee895f66.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/eabafbf0a71347f2b4b9b4552e3e4371.png
[70c76cc3bb0d4941ad9e691a6e7a22c5.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/2cdf57d963f048d7a25dc69615da11a2.png
[8701e22931564429a93b9abde0c35c6a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/224834009c84496a93c95e0aefb4abc2.png
[0807177b28194afe8d931ddd9653ccc6.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/4c372c082eb4455a9847f3ac9ff6ce0a.png
[8b6838e236dd40149e5c2adaf90544ff.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/29e52268c497449f89ada6fcd62afbc1.png
[8ec162f59a4d4e6bbb5de6fb4adc4c70.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/9fb652e0bc2d4425a8670bb68ba72bd8.png
[ac74d62b27ba485dbf53f8bc82581796.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/d1fadc2529734796823d89dc4f772df4.png
[7e72da5f6c624da6ac2fd91300f2565f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/64743c8b59a74316ba6e32585100c7a3.png
[439ce547adcf4b55b6d36b0eb09c84d4.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/cf2721128a7f4987924f4b08bf50b1eb.png
[0e9ec05077d44fc78f91bfc8adc1ef12.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/e7e25ad90f434390abea8437247f689e.png
[0f21c90bda12470d9c98c2653db96bff.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/aca9a5f14882433ea199e3262dade6ee.png
[ff2fda93081848a2a106a3ea77baec14.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/1c57cfc60ce941acbc1352fbee3ec169.png
[c148bc587549434fa97edbf74c3d3354.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/585d6be3b3524d09a910aea0929fd3c5.png
[5685546953514c45bd6c2e4ff82737ff.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/64361fd17f464f2595024fb304dffef4.png
[86574b0c0917499687d6f8d98408534a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/185555e2363c4568a634cb0e58b87bb1.png
[963ed51055424d92b0fc7b5d7a9ceaac.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/3dde7883e35b4ac588dd71a4824126b4.png
[35b3e0af556843aab2c2225caf50c379.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/24/f29c3f93b0a2497f9cf6f23ae33fbc9d.png