趣找句子

您现在的位置是:首页 > 关于春天 > 知识百科

知识百科

springboot登录注册功可以(SpringBoot整合SpringSecurity实现用户登录认证)

趣找知识 2024-08-05知识百科
下面一起来看看关于springboot登录注册功可以(SpringBoot整合SpringSecurity实现用户登录认证)的相关信息吧。关注我们,了解更多资讯。

Spring Security简介

Spring Secur
下面一起来看看关于springboot登录注册功可以(SpringBoot整合SpringSecurity实现用户登录认证)的相关信息吧。关注我们,了解更多资讯。 Spring Security简介

Spring Security是一个能够为基于Spring的企业应用系统提供声明式的安全访问控制解决方案的安全框架。它提供了一组可以在Spring应用上下文中配置的Bean,充分利用了Spring IoC,DI(控制反转Inversion of Control ,DI:Dependency Injection 依赖注入)和AOP(面向切面编程)功能,为应用系统提供声明式的安全访问控制功能,减少了为企业系统安全控制编写大量重复代码的工作。

整合流程
  • 创建数据库

SET NAMES utf8mb4; SET FOREIGN_KEY_CHECKS = 0; -- ---------------------------- -- Table structure for user -- ---------------------------- DROP TABLE IF EXISTS `user`; CREATE TABLE `user` ( `id` int(11) NOT NULL AUTO_INCREMENT, `username` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci NOT NULL, `password` varchar(255) CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci NOT NULL, PRIMARY KEY (`id`) USING BTREE ) ENGINE = InnoDB CHARACTER SET = utf8mb4 COLLATE = utf8mb4_0900_ai_ci ROW_FORMAT = Dynamic; -- ---------------------------- -- Records of user -- ---------------------------- INSERT INTO `user` VALUES (1, 'Lucy', '123456'); SET FOREIGN_KEY_CHECKS = 1;

  • 导入依赖

<dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-security</artifactId> </dependency> <dependency> <groupId>org.springframework.security</groupId> <artifactId>spring-security-test</artifactId> <scope>test</scope> </dependency> <dependency> <groupId>com.baomidou</groupId> <artifactId>mybatis-plus-boot-starter</artifactId> <version>3.5.2</version> </dependency> <!-- https://mvnrepository.com/artifact/mysql/mysql-connector-java --> <dependency> <groupId>mysql</groupId> <artifactId>mysql-connector-java</artifactId> <version>8.0.17</version> </dependency> <!-- https://mvnrepository.com/artifact/com.alibaba/druid --> <dependency> <groupId>com.alibaba</groupId> <artifactId>druid</artifactId> <version>1.2.8</version> </dependency>

  • 配置数据库

server: port: 8080 spring: datasource: username: root password: xxxxxx driver-class-name: com.mysql.cj.jdbc.Driver url: jdbc:mysql://localhost:3306/world?useUnicode=true&characterEncoding=utf-8&useSSL=false&serverTimezone=CTT type: com.alibaba.druid.pool.DruidDataSource

  • 创建Users实体类

package com.study.entity; import com.baomidou.mybatisplus.annotation.TableName; import lombok.Data; @Data @TableName(value = "user") public class Users { private Long id; private String username; private String password; }

  • 创建UserMapper接口

package com.study.mapper; import com.baomidou.mybatisplus.core.mapper.BaseMapper; import com.study.entity.Users; import org.springframework.stereotype.Repository; @Repository public interface UserMapper extends BaseMapper<Users> { }

  • 编写MyUserDetailsService

package com.study.service; import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper; import com.study.entity.Users; import com.study.mapper.UserMapper; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.security.core.GrantedAuthority; import org.springframework.security.core.authority.AuthorityUtils; import org.springframework.security.core.userdetails.User; import org.springframework.security.core.userdetails.UserDetails; import org.springframework.security.core.userdetails.UserDetailsService; import org.springframework.security.core.userdetails.UsernameNotFoundException; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; import org.springframework.stereotype.Service; import java.util.List; @Service("userDetailsService") public class MyUserDetailsService implements UserDetailsService { @Autowired private UserMapper userMapper; @Override public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { QueryWrapper<Users> wrapper = new QueryWrapper<>(); wrapper.eq("username",username); Users users = userMapper.selectOne(wrapper); if (users==null){ throw new UsernameNotFoundException("用户名不存在!"); } List<GrantedAuthority> auths = AuthorityUtils.commaSeparatedStringToAuthorityList("role"); return new User("admin",new BCryptPasswordEncoder().encode(users.getPassword()),auths); } }

  • 编写Spring Security配置类

package com.study.config; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; import org.springframework.security.core.userdetails.UserDetailsService; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; import org.springframework.security.crypto.password.PasswordEncoder; @Configuration public class SecurityConfig extends WebSecurityConfigurerAdapter { @Autowired private UserDetailsService userDetailsService; @Override protected void configure(AuthenticationManagerBuilder auth) throws Exception { auth.userDetailsService(userDetailsService).passwordEncoder(password()); } @Bean PasswordEncoder password(){ return new BCryptPasswordEncoder(); } }

  • 编写Controller层

package com.study.controller; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RestController; @RestController @RequestMapping("/user") public class UserController { @GetMapping("/main") public String mainPage(){ return "首页"; } }

测试

在浏览器中访问http://localhost:8080/user/main,浏览器自动跳转至Spring Security的登录认证页面

springboot登录注册功可以(SpringBoot整合SpringSecurity实现用户登录认证)(1)

输出错误账号,页面会有相应提示:

springboot登录注册功可以(SpringBoot整合SpringSecurity实现用户登录认证)(2)

输入正确账号密码后,跳转至首页:

springboot登录注册功可以(SpringBoot整合SpringSecurity实现用户登录认证)(3)

总结

有了Spring Security安全框架的支持,对用户权限的控制、系统的安全维护更加方便。

,

文章评论

[!--temp.pl--]