devbox
Monodyee
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

记录下如何将oauth2的参数转存到/login请求上_oauth/authorize 跳到登录页过程

作者：Monodyee | 2024-02-15 11:32:48

赞

踩

oauth/authorize 跳到登录页过程

需求：/oauth/authorize请求除标准参数外，有自定义参数，这些参数要用在spring security认证流程中，UserDetailsService的实现有多个，要根据自定义参数来区分

框架：spring-cloud-starter-oauth2，jwt

要解决的问题：1.LoginUrlAuthenticationEntryPoint.buildRedirectUrlToLoginPage方法返回的重定向url没有加queryString，2.生成默认登录页面的过滤器的url匹配是全路径匹配，会包含queryString，3.UsernamePasswordAuthenticationFilter中使用的WebAuthenticationDetailsSource只处理了remoteAddress和sessionId两个参数，没有处理自定义参数

实现：1.自定义CustomLoginUrlAuthenticationEntryPoint，代码如下

  1. package org.liu.auth.entrypoint;
  2.  
  3. import lombok.extern.slf4j.Slf4j;
  4. import org.springframework.security.core.AuthenticationException;
  5. import org.springframework.security.web.authentication.LoginUrlAuthenticationEntryPoint;
  6. import org.springframework.security.web.util.RedirectUrlBuilder;
  7. import org.springframework.security.web.util.UrlUtils;
  8.  
  9. import javax.servlet.http.HttpServletRequest;
  10. import javax.servlet.http.HttpServletResponse;
  11.  
  12. /**
  13.  * 自定义拒绝访问时redirect到登录url的entryPoint
  14.  *
  15.  * @Author lzs
  16.  * @Date 2022/8/18 10:19
  17.  **/
  18. @Slf4j
  19. public class CustomLoginUrlAuthenticationEntryPoint extends LoginUrlAuthenticationEntryPoint {
  20.  
  21.     public CustomLoginUrlAuthenticationEntryPoint() {
  22.         this("/login");
  23.     }
  24.  
  25.     public CustomLoginUrlAuthenticationEntryPoint(String loginFormUrl) {
  26.         super(loginFormUrl);
  27.     }
  28.  
  29.     @Override
  30.     protected String buildRedirectUrlToLoginPage(HttpServletRequest request, HttpServletResponse response, AuthenticationException authException) {
  31.         String loginForm = determineUrlToUseForThisRequest(request, response,
  32.                 authException);
  33.  
  34.         if (UrlUtils.isAbsoluteUrl(loginForm)) {
  35.             return loginForm;
  36.         }
  37.  
  38.         int serverPort = super.getPortResolver().getServerPort(request);
  39.         String scheme = request.getScheme();
  40.  
  41.         RedirectUrlBuilder urlBuilder = new RedirectUrlBuilder();
  42.  
  43.         urlBuilder.setScheme(scheme);
  44.         urlBuilder.setServerName(request.getServerName());
  45.         urlBuilder.setPort(serverPort);
  46.         urlBuilder.setContextPath(request.getContextPath());
  47.         urlBuilder.setPathInfo(loginForm);
  48.         urlBuilder.setQuery(request.getQueryString());
  49.  
  50.         if (super.isForceHttps() && "http".equals(scheme)) {
  51.             Integer httpsPort = super.getPortMapper().lookupHttpsPort(serverPort);
  52.  
  53.             if (httpsPort != null) {
  54.                 // Overwrite scheme and port in the redirect URL
  55.                 urlBuilder.setScheme("https");
  56.                 urlBuilder.setPort(httpsPort);
  57.             } else {
  58.                 log.warn("Unable to redirect to HTTPS as no port mapping found for HTTP port "
  59.                         + serverPort);
  60.             }
  61.         }
  62.  
  63.         return urlBuilder.getUrl();
  64.     }
  65. }

2.自定义CustomDefaultLoginPageGeneratingFilter，CustomDefaultLoginPageConfigurer

  1. package org.liu.auth.filter;
  2.  
  3. import org.springframework.security.core.AuthenticationException;
  4. import org.springframework.security.web.WebAttributes;
  5. import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;
  6. import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
  7. import org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices;
  8. import org.springframework.util.Assert;
  9. import org.springframework.web.filter.GenericFilterBean;
  10. import org.springframework.web.util.HtmlUtils;
  11.  
  12. import javax.servlet.FilterChain;
  13. import javax.servlet.ServletException;
  14. import javax.servlet.ServletRequest;
  15. import javax.servlet.ServletResponse;
  16. import javax.servlet.http.HttpServletRequest;
  17. import javax.servlet.http.HttpServletResponse;
  18. import javax.servlet.http.HttpSession;
  19. import java.io.IOException;
  20. import java.nio.charset.StandardCharsets;
  21. import java.util.Collections;
  22. import java.util.Map;
  23. import java.util.function.Function;
  24.  
  25. /**
  26.  * 重写了DefaultLoginPageGeneratingFilter，只是修改了isLoginUrlRequest方法的判断逻辑
  27.  *
  28.  * @Author lzs
  29.  * @Date 2022/8/19 8:43
  30.  **/
  31. public class CustomDefaultLoginPageGeneratingFilter extends GenericFilterBean {
  32.     public static final String DEFAULT_LOGIN_PAGE_URL = "/login";
  33.     public static final String ERROR_PARAMETER_NAME = "error";
  34.     private String loginPageUrl;
  35.     private String logoutSuccessUrl;
  36.     private String failureUrl;
  37.     private boolean formLoginEnabled;
  38.     private boolean openIdEnabled;
  39.     private boolean oauth2LoginEnabled;
  40.     private boolean saml2LoginEnabled;
  41.     private String authenticationUrl;
  42.     private String usernameParameter;
  43.     private String passwordParameter;
  44.     private String rememberMeParameter;
  45.     private String openIDauthenticationUrl;
  46.     private String openIDusernameParameter;
  47.     private String openIDrememberMeParameter;
  48.     private Map<String, String> oauth2AuthenticationUrlToClientName;
  49.     private Map<String, String> saml2AuthenticationUrlToProviderName;
  50.     private Function<HttpServletRequest, Map<String, String>> resolveHiddenInputs = request -> Collections
  51.             .emptyMap();
  52.  
  53.  
  54.     public CustomDefaultLoginPageGeneratingFilter() {
  55.     }
  56.  
  57.     public CustomDefaultLoginPageGeneratingFilter(AbstractAuthenticationProcessingFilter filter) {
  58.         if (filter instanceof UsernamePasswordAuthenticationFilter) {
  59.             init((UsernamePasswordAuthenticationFilter) filter, null);
  60.         } else {
  61.             init(null, filter);
  62.         }
  63.     }
  64.  
  65.     public CustomDefaultLoginPageGeneratingFilter(
  66.             UsernamePasswordAuthenticationFilter authFilter,
  67.             AbstractAuthenticationProcessingFilter openIDFilter) {
  68.         init(authFilter, openIDFilter);
  69.     }
  70.  
  71.     private void init(UsernamePasswordAuthenticationFilter authFilter,
  72.                       AbstractAuthenticationProcessingFilter openIDFilter) {
  73.         this.loginPageUrl = DEFAULT_LOGIN_PAGE_URL;
  74.         this.logoutSuccessUrl = DEFAULT_LOGIN_PAGE_URL + "?logout";
  75.         this.failureUrl = DEFAULT_LOGIN_PAGE_URL + "?" + ERROR_PARAMETER_NAME;
  76.         if (authFilter != null) {
  77.             formLoginEnabled = true;
  78.             usernameParameter = authFilter.getUsernameParameter();
  79.             passwordParameter = authFilter.getPasswordParameter();
  80.  
  81.             if (authFilter.getRememberMeServices() instanceof AbstractRememberMeServices) {
  82.                 rememberMeParameter = ((AbstractRememberMeServices) authFilter
  83.                         .getRememberMeServices()).getParameter();
  84.             }
  85.         }
  86.  
  87.         if (openIDFilter != null) {
  88.             openIdEnabled = true;
  89.             openIDusernameParameter = "openid_identifier";
  90.  
  91.             if (openIDFilter.getRememberMeServices() instanceof AbstractRememberMeServices) {
  92.                 openIDrememberMeParameter = ((AbstractRememberMeServices) openIDFilter
  93.                         .getRememberMeServices()).getParameter();
  94.             }
  95.         }
  96.     }
  97.  
  98.     /**
  99.      * Sets a Function used to resolve a Map of the hidden inputs where the key is the
  100.      * name of the input and the value is the value of the input. Typically this is used
  101.      * to resolve the CSRF token.
  102.      *
  103.      * @param resolveHiddenInputs the function to resolve the inputs
  104.      */
  105.     public void setResolveHiddenInputs(
  106.             Function<HttpServletRequest, Map<String, String>> resolveHiddenInputs) {
  107.         Assert.notNull(resolveHiddenInputs, "resolveHiddenInputs cannot be null");
  108.         this.resolveHiddenInputs = resolveHiddenInputs;
  109.     }
  110.  
  111.     public boolean isEnabled() {
  112.         return formLoginEnabled || openIdEnabled || oauth2LoginEnabled || this.saml2LoginEnabled;
  113.     }
  114.  
  115.     public void setLogoutSuccessUrl(String logoutSuccessUrl) {
  116.         this.logoutSuccessUrl = logoutSuccessUrl;
  117.     }
  118.  
  119.     public String getLoginPageUrl() {
  120.         return loginPageUrl;
  121.     }
  122.  
  123.     public void setLoginPageUrl(String loginPageUrl) {
  124.         this.loginPageUrl = loginPageUrl;
  125.     }
  126.  
  127.     public void setFailureUrl(String failureUrl) {
  128.         this.failureUrl = failureUrl;
  129.     }
  130.  
  131.     public void setFormLoginEnabled(boolean formLoginEnabled) {
  132.         this.formLoginEnabled = formLoginEnabled;
  133.     }
  134.  
  135.     public void setOpenIdEnabled(boolean openIdEnabled) {
  136.         this.openIdEnabled = openIdEnabled;
  137.     }
  138.  
  139.     public void setOauth2LoginEnabled(boolean oauth2LoginEnabled) {
  140.         this.oauth2LoginEnabled = oauth2LoginEnabled;
  141.     }
  142.  
  143.     public void setSaml2LoginEnabled(boolean saml2LoginEnabled) {
  144.         this.saml2LoginEnabled = saml2LoginEnabled;
  145.     }
  146.  
  147.     public void setAuthenticationUrl(String authenticationUrl) {
  148.         this.authenticationUrl = authenticationUrl;
  149.     }
  150.  
  151.     public void setUsernameParameter(String usernameParameter) {
  152.         this.usernameParameter = usernameParameter;
  153.     }
  154.  
  155.     public void setPasswordParameter(String passwordParameter) {
  156.         this.passwordParameter = passwordParameter;
  157.     }
  158.  
  159.     public void setRememberMeParameter(String rememberMeParameter) {
  160.         this.rememberMeParameter = rememberMeParameter;
  161.         this.openIDrememberMeParameter = rememberMeParameter;
  162.     }
  163.  
  164.     public void setOpenIDauthenticationUrl(String openIDauthenticationUrl) {
  165.         this.openIDauthenticationUrl = openIDauthenticationUrl;
  166.     }
  167.  
  168.     public void setOpenIDusernameParameter(String openIDusernameParameter) {
  169.         this.openIDusernameParameter = openIDusernameParameter;
  170.     }
  171.  
  172.     public void setOauth2AuthenticationUrlToClientName(Map<String, String> oauth2AuthenticationUrlToClientName) {
  173.         this.oauth2AuthenticationUrlToClientName = oauth2AuthenticationUrlToClientName;
  174.     }
  175.  
  176.     public void setSaml2AuthenticationUrlToProviderName(Map<String, String> saml2AuthenticationUrlToProviderName) {
  177.         this.saml2AuthenticationUrlToProviderName = saml2AuthenticationUrlToProviderName;
  178.     }
  179.  
  180.     public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain)
  181.             throws IOException, ServletException {
  182.         HttpServletRequest request = (HttpServletRequest) req;
  183.         HttpServletResponse response = (HttpServletResponse) res;
  184.  
  185.         boolean loginError = isErrorPage(request);
  186.         boolean logoutSuccess = isLogoutSuccess(request);
  187.         if (isLoginUrlRequest(request) || loginError || logoutSuccess) {
  188.             String loginPageHtml = generateLoginPageHtml(request, loginError,
  189.                     logoutSuccess);
  190.             response.setContentType("text/html;charset=UTF-8");
  191.             response.setContentLength(loginPageHtml.getBytes(StandardCharsets.UTF_8).length);
  192.             response.getWriter().write(loginPageHtml);
  193.  
  194.             return;
  195.         }
  196.  
  197.         chain.doFilter(request, response);
  198.     }
  199.  
  200.     private String generateLoginPageHtml(HttpServletRequest request, boolean loginError,
  201.                                          boolean logoutSuccess) {
  202.         String errorMsg = "Invalid credentials";
  203.  
  204.         if (loginError) {
  205.             HttpSession session = request.getSession(false);
  206.  
  207.             if (session != null) {
  208.                 AuthenticationException ex = (AuthenticationException) session
  209.                         .getAttribute(WebAttributes.AUTHENTICATION_EXCEPTION);
  210.                 errorMsg = ex != null ? ex.getMessage() : "Invalid credentials";
  211.             }
  212.         }
  213.  
  214.         StringBuilder sb = new StringBuilder();
  215.  
  216.         sb.append("<!DOCTYPE html>\n"
  217.                 + "<html lang=\"en\">\n"
  218.                 + "  <head>\n"
  219.                 + "    <meta charset=\"utf-8\">\n"
  220.                 + "    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, shrink-to-fit=no\">\n"
  221.                 + "    <meta name=\"description\" content=\"\">\n"
  222.                 + "    <meta name=\"author\" content=\"\">\n"
  223.                 + "    <title>Please sign in</title>\n"
  224.                 + "    <link href=\"https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-/Y6pD6FV/Vv2HJnA6t+vslU6fwYXjCFtcEpHbNJ0lyAFsXTsjBbfaDjzALeQsN6M\" crossorigin=\"anonymous\">\n"
  225.                 + "    <link href=\"https://getbootstrap.com/docs/4.0/examples/signin/signin.css\" rel=\"stylesheet\" crossorigin=\"anonymous\"/>\n"
  226.                 + "  </head>\n"
  227.                 + "  <body>\n"
  228.                 + "     <div class=\"container\">\n");
  229.  
  230.         String contextPath = request.getContextPath();
  231.         if (this.formLoginEnabled) {
  232.             sb.append("      <form class=\"form-signin\" method=\"post\" action=\"" + contextPath + this.authenticationUrl + "\">\n"
  233.                     + "        <h2 class=\"form-signin-heading\">Please sign in</h2>\n"
  234.                     + createError(loginError, errorMsg)
  235.                     + createLogoutSuccess(logoutSuccess)
  236.                     + "        <p>\n"
  237.                     + "          <label for=\"username\" class=\"sr-only\">Username</label>\n"
  238.                     + "          <input type=\"text\" id=\"username\" name=\"" + this.usernameParameter + "\" class=\"form-control\" placeholder=\"Username\" required autofocus>\n"
  239.                     + "        </p>\n"
  240.                     + "        <p>\n"
  241.                     + "          <label for=\"password\" class=\"sr-only\">Password</label>\n"
  242.                     + "          <input type=\"password\" id=\"password\" name=\"" + this.passwordParameter + "\" class=\"form-control\" placeholder=\"Password\" required>\n"
  243.                     + "        </p>\n"
  244.                     + createRememberMe(this.rememberMeParameter)
  245.                     + renderHiddenInputs(request)
  246.                     + "        <button class=\"btn btn-lg btn-primary btn-block\" type=\"submit\">Sign in</button>\n"
  247.                     + "      </form>\n");
  248.         }
  249.  
  250.         if (openIdEnabled) {
  251.             sb.append("      <form name=\"oidf\" class=\"form-signin\" method=\"post\" action=\"" + contextPath + this.openIDauthenticationUrl + "\">\n"
  252.                     + "        <h2 class=\"form-signin-heading\">Login with OpenID Identity</h2>\n"
  253.                     + createError(loginError, errorMsg)
  254.                     + createLogoutSuccess(logoutSuccess)
  255.                     + "        <p>\n"
  256.                     + "          <label for=\"username\" class=\"sr-only\">Identity</label>\n"
  257.                     + "          <input type=\"text\" id=\"username\" name=\"" + this.openIDusernameParameter + "\" class=\"form-control\" placeholder=\"Username\" required autofocus>\n"
  258.                     + "        </p>\n"
  259.                     + createRememberMe(this.openIDrememberMeParameter)
  260.                     + renderHiddenInputs(request)
  261.                     + "        <button class=\"btn btn-lg btn-primary btn-block\" type=\"submit\">Sign in</button>\n"
  262.                     + "      </form>\n");
  263.         }
  264.  
  265.         if (oauth2LoginEnabled) {
  266.             sb.append("<h2 class=\"form-signin-heading\">Login with OAuth 2.0</h2>");
  267.             sb.append(createError(loginError, errorMsg));
  268.             sb.append(createLogoutSuccess(logoutSuccess));
  269.             sb.append("<table class=\"table table-striped\">\n");
  270.             for (Map.Entry<String, String> clientAuthenticationUrlToClientName : oauth2AuthenticationUrlToClientName.entrySet()) {
  271.                 sb.append(" <tr><td>");
  272.                 String url = clientAuthenticationUrlToClientName.getKey();
  273.                 sb.append("<a href=\"").append(contextPath).append(url).append("\">");
  274.                 String clientName = HtmlUtils.htmlEscape(clientAuthenticationUrlToClientName.getValue());
  275.                 sb.append(clientName);
  276.                 sb.append("</a>");
  277.                 sb.append("</td></tr>\n");
  278.             }
  279.             sb.append("</table>\n");
  280.         }
  281.  
  282.         if (this.saml2LoginEnabled) {
  283.             sb.append("<h2 class=\"form-signin-heading\">Login with SAML 2.0</h2>");
  284.             sb.append(createError(loginError, errorMsg));
  285.             sb.append(createLogoutSuccess(logoutSuccess));
  286.             sb.append("<table class=\"table table-striped\">\n");
  287.             for (Map.Entry<String, String> relyingPartyUrlToName : saml2AuthenticationUrlToProviderName.entrySet()) {
  288.                 sb.append(" <tr><td>");
  289.                 String url = relyingPartyUrlToName.getKey();
  290.                 sb.append("<a href=\"").append(contextPath).append(url).append("\">");
  291.                 String partyName = HtmlUtils.htmlEscape(relyingPartyUrlToName.getValue());
  292.                 sb.append(partyName);
  293.                 sb.append("</a>");
  294.                 sb.append("</td></tr>\n");
  295.             }
  296.             sb.append("</table>\n");
  297.         }
  298.         sb.append("</div>\n");
  299.         sb.append("</body></html>");
  300.  
  301.         return sb.toString();
  302.     }
  303.  
  304.     private String renderHiddenInputs(HttpServletRequest request) {
  305.         StringBuilder sb = new StringBuilder();
  306.         for (Map.Entry<String, String> input : this.resolveHiddenInputs.apply(request).entrySet()) {
  307.             sb.append("<input name=\"").append(input.getKey()).append("\" type=\"hidden\" value=\"").append(input.getValue()).append("\" />\n");
  308.         }
  309.         return sb.toString();
  310.     }
  311.  
  312.     private String createRememberMe(String paramName) {
  313.         if (paramName == null) {
  314.             return "";
  315.         }
  316.         return "<p><input type='checkbox' name='"
  317.                 + paramName
  318.                 + "'/> Remember me on this computer.</p>\n";
  319.     }
  320.  
  321.     private boolean isLogoutSuccess(HttpServletRequest request) {
  322.         return logoutSuccessUrl != null && matches(request, logoutSuccessUrl);
  323.     }
  324.  
  325.     /**
  326.      * change this method only
  327.      *
  328.      * @param request
  329.      * @return
  330.      */
  331.     private boolean isLoginUrlRequest(HttpServletRequest request) {
  332.         return matchesUri(request, loginPageUrl);
  333.     }
  334.  
  335.     private boolean isErrorPage(HttpServletRequest request) {
  336.         return matches(request, failureUrl);
  337.     }
  338.  
  339.     private static String createError(boolean isError, String message) {
  340.         return isError ? "<div class=\"alert alert-danger\" role=\"alert\">" + HtmlUtils.htmlEscape(message) + "</div>" : "";
  341.     }
  342.  
  343.     private static String createLogoutSuccess(boolean isLogoutSuccess) {
  344.         return isLogoutSuccess ? "<div class=\"alert alert-success\" role=\"alert\">You have been signed out</div>" : "";
  345.     }
  346.  
  347.     private boolean matchesUri(HttpServletRequest request, String url) {
  348.         if (!"GET".equals(request.getMethod()) || url == null) {
  349.             return false;
  350.         }
  351.         String uri = request.getRequestURI();
  352.         int pathParamIndex = uri.indexOf(';');
  353.  
  354.         if (pathParamIndex > 0) {
  355.             // strip everything after the first semi-colon
  356.             uri = uri.substring(0, pathParamIndex);
  357.         }
  358.         if ("".equals(request.getContextPath())) {
  359.             return uri.equals(url);
  360.         }
  361.  
  362.         return uri.equals(request.getContextPath() + url);
  363.     }
  364.  
  365.     private boolean matches(HttpServletRequest request, String url) {
  366.         if (!"GET".equals(request.getMethod()) || url == null) {
  367.             return false;
  368.         }
  369.         String uri = request.getRequestURI();
  370.         int pathParamIndex = uri.indexOf(';');
  371.  
  372.         if (pathParamIndex > 0) {
  373.             // strip everything after the first semi-colon
  374.             uri = uri.substring(0, pathParamIndex);
  375.         }
  376.  
  377.         if (request.getQueryString() != null) {
  378.             uri += "?" + request.getQueryString();
  379.         }
  380.  
  381.         if ("".equals(request.getContextPath())) {
  382.             return uri.equals(url);
  383.         }
  384.  
  385.         return uri.equals(request.getContextPath() + url);
  386.     }
  387. }
  1. package org.liu.auth.configurer;
  2.  
  3. import org.liu.auth.filter.CustomDefaultLoginPageGeneratingFilter;
  4. import org.springframework.security.config.annotation.web.HttpSecurityBuilder;
  5. import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
  6. import org.springframework.security.config.annotation.web.configurers.DefaultLoginPageConfigurer;
  7. import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
  8. import org.springframework.security.web.authentication.ui.DefaultLogoutPageGeneratingFilter;
  9. import org.springframework.security.web.csrf.CsrfToken;
  10.  
  11. import javax.servlet.http.HttpServletRequest;
  12. import java.util.Collections;
  13. import java.util.Enumeration;
  14. import java.util.HashMap;
  15. import java.util.Map;
  16. import java.util.function.Function;
  17.  
  18. /**
  19.  * 自定义默认登陆页面的配置
  20.  *
  21.  * @Author lzs
  22.  * @Date 2022/8/18 17:24
  23.  **/
  24. public class CustomDefaultLoginPageConfigurer<H extends HttpSecurityBuilder<H>> extends
  25.         AbstractHttpConfigurer<DefaultLoginPageConfigurer<H>, H> {
  26.  
  27.     private CustomDefaultLoginPageGeneratingFilter loginPageGeneratingFilterFilter = new CustomDefaultLoginPageGeneratingFilter();
  28.     private DefaultLogoutPageGeneratingFilter logoutPageGeneratingFilter = new DefaultLogoutPageGeneratingFilter();
  29.  
  30.     @Override
  31.     public void init(H http) {
  32.         initDefaultLoginFilter(http);
  33.         initDefaultLogoutFilter(http);
  34.     }
  35.  
  36.     @Override
  37.     public void configure(H http) {
  38.         if (loginPageGeneratingFilterFilter.isEnabled()) {
  39.             loginPageGeneratingFilterFilter = postProcess(loginPageGeneratingFilterFilter);
  40.             http.addFilterAfter(loginPageGeneratingFilterFilter, UsernamePasswordAuthenticationFilter.class);
  41.             http.addFilter(this.logoutPageGeneratingFilter);
  42.         }
  43.     }
  44.  
  45.     private void initDefaultLoginFilter(H http) {
  46.         Function<HttpServletRequest, Map<String, String>> resolveHiddenInputs = request -> {
  47.             Map<String, String> map = new HashMap<>();
  48.             CsrfToken token = (CsrfToken) request.getAttribute(CsrfToken.class.getName());
  49.             if (token != null) {
  50.                 map.put(token.getParameterName(), token.getToken());
  51.             }
  52.             Enumeration<String> parameterNames = request.getParameterNames();
  53.             while (parameterNames.hasMoreElements()) {
  54.                 String paramName = parameterNames.nextElement();
  55.                 String paramValue = request.getParameter(paramName);
  56.                 map.put(paramName, paramValue);
  57.             }
  58.             return map;
  59.         };
  60.         loginPageGeneratingFilterFilter.setFormLoginEnabled(true);
  61.         loginPageGeneratingFilterFilter.setUsernameParameter("username");
  62.         loginPageGeneratingFilterFilter.setPasswordParameter("password");
  63.         loginPageGeneratingFilterFilter.setLoginPageUrl("/login");
  64.         loginPageGeneratingFilterFilter.setFailureUrl("/login?error");
  65.         loginPageGeneratingFilterFilter.setAuthenticationUrl("/login");
  66.         loginPageGeneratingFilterFilter.setResolveHiddenInputs(resolveHiddenInputs);
  67.         http.setSharedObject(CustomDefaultLoginPageGeneratingFilter.class, loginPageGeneratingFilterFilter);
  68.     }
  69.  
  70.     private void initDefaultLogoutFilter(H http) {
  71.         Function<HttpServletRequest, Map<String, String>> hiddenInputs = request -> {
  72.             CsrfToken token = (CsrfToken) request.getAttribute(CsrfToken.class.getName());
  73.             if (token == null) {
  74.                 return Collections.emptyMap();
  75.             }
  76.             return Collections.singletonMap(token.getParameterName(), token.getToken());
  77.         };
  78.         this.logoutPageGeneratingFilter.setResolveHiddenInputs(hiddenInputs);
  79.         http.setSharedObject(DefaultLogoutPageGeneratingFilter.class,
  80.                 logoutPageGeneratingFilter);
  81.     }
  82.  
  83. }

3.自定义CustomWebAuthenticationDetailsSource，CustomWebAuthenticationDetails

  1. package org.liu.auth.authentication;
  2.  
  3. import org.springframework.security.authentication.AuthenticationDetailsSource;
  4. import org.springframework.security.web.savedrequest.HttpSessionRequestCache;
  5. import org.springframework.security.web.savedrequest.RequestCache;
  6. import org.springframework.security.web.savedrequest.SavedRequest;
  7. import org.springframework.util.CollectionUtils;
  8. import org.springframework.util.StringUtils;
  9.  
  10. import javax.servlet.http.HttpServletRequest;
  11. import java.util.List;
  12.  
  13. import static org.liu.common.core.constants.CommonConstants.HEADER_CLIENT;
  14. import static org.liu.common.core.constants.CommonConstants.HEADER_TENANT_ID;
  15.  
  16. /**
  17.  * @Author lzs
  18.  * @Date 2022/8/15 16:15
  19.  **/
  20. public class CustomWebAuthenticationDetailsSource implements AuthenticationDetailsSource<HttpServletRequest, CustomWebAuthenticationDetails> {
  21.  
  22.     private RequestCache requestCache = new HttpSessionRequestCache();
  23.  
  24.     @Override
  25.     public CustomWebAuthenticationDetails buildDetails(HttpServletRequest context) {
  26.         String client = context.getHeader(HEADER_CLIENT);
  27.         if (!StringUtils.hasText(client)) {
  28.             client = context.getParameter(HEADER_CLIENT);
  29.         }
  30.         Long tenantId = null;
  31.         String tenantIdStr = context.getHeader(HEADER_TENANT_ID);
  32.         if (StringUtils.hasText(tenantIdStr)) {
  33.             tenantId = Long.parseLong(tenantIdStr);
  34.         } else {
  35.             tenantIdStr = context.getParameter(HEADER_TENANT_ID);
  36.             if (StringUtils.hasText(tenantIdStr)) {
  37.                 tenantId = Long.parseLong(tenantIdStr);
  38.             }
  39.         }
  40.         return new CustomWebAuthenticationDetails(context, client, tenantId);
  41.     }
  42. }
  1. package org.liu.auth.authentication;
  2.  
  3. import lombok.Getter;
  4. import org.springframework.security.web.authentication.WebAuthenticationDetails;
  5.  
  6. import javax.servlet.http.HttpServletRequest;
  7.  
  8. /**
  9.  * @Author lzs
  10.  * @Date 2022/8/15 16:17
  11.  **/
  12. @Getter
  13. public class CustomWebAuthenticationDetails extends WebAuthenticationDetails {
  14.  
  15.     private final String client;
  16.     private final Long tenantId;
  17.  
  18.     public CustomWebAuthenticationDetails(HttpServletRequest request, String client, Long tenantId) {
  19.         super(request);
  20.         this.client = client;
  21.         this.tenantId = tenantId;
  22.     }
  23.  
  24.     @Override
  25.     public boolean equals(Object obj) {
  26.         if (obj instanceof CustomWebAuthenticationDetails) {
  27.             CustomWebAuthenticationDetails details = (CustomWebAuthenticationDetails) obj;
  28.             if (null != client && null == details.getClient()) {
  29.                 return false;
  30.             }
  31.             if (null == client && null != details.getClient()) {
  32.                 return false;
  33.             }
  34.             if (null != client && !client.equals(details.getClient())) {
  35.                 return false;
  36.             }
  37.  
  38.             if (null != tenantId && null == details.getTenantId()) {
  39.                 return false;
  40.             }
  41.             if (null == tenantId && null != details.getTenantId()) {
  42.                 return false;
  43.             }
  44.             if (null != tenantId && tenantId.equals(details.getTenantId())) {
  45.                 return false;
  46.             }
  47.         } else {
  48.             return false;
  49.         }
  50.         return super.equals(obj);
  51.     }
  52.  
  53.     @Override
  54.     public int hashCode() {
  55.         int code = super.hashCode();
  56.         if (null != client) {
  57.             code = code * (this.client.hashCode() % 7);
  58.         }
  59.         if (null != tenantId) {
  60.             code = code * (this.tenantId.hashCode() % 7);
  61.         }
  62.         return code;
  63.     }
  64.  
  65.     @Override
  66.     public String toString() {
  67.         StringBuilder sb = new StringBuilder();
  68.         sb.append(super.toString()).append(": ");
  69.         sb.append("client: ").append(this.getClient()).append("; ");
  70.         sb.append("tenantId: ").append(this.getTenantId());
  71.  
  72.         return sb.toString();
  73.     }
  74. }

4.把上面自定义的配置添加到httpSecurity中

  1. http.formLogin().authenticationDetailsSource(customWebAuthenticationDetailsSource);
  2. http.exceptionHandling().authenticationEntryPoint(customLoginUrlAuthenticationEntryPoint);
  3. http.removeConfigurer(DefaultLoginPageConfigurer.class);
  4. http.apply(new CustomDefaultLoginPageConfigurer<>());

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/Monodyee/article/detail/84186
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号