devbox
天景科技苑
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

spring boot+spring security +mybatis_springboot+springsecurity+mybatis

作者：天景科技苑 | 2024-07-24 14:55:39

赞

踩

springboot+springsecurity+mybatis

流程不写了 自己spring官网学去 我也是没人嘻嘻嘻嘻~~~

话不多说直接发代码

工程目录

application.properties

  1. spring.datasource.url=jdbc:mysql://localhost:3306/test_db?useUnicode=true&characterEncoding=utf-8
  2. spring.datasource.username=root
  3. spring.datasource.password=
  4. spring.datasource.type=com.alibaba.druid.pool.DruidDataSource
  5. logging.level.org.springframework.security=INFO
  6. spring.thymeleaf.cache=false
  7. #打印sql，方便调试
  8. mybatis.configuration.log-impl=org.apache.ibatis.logging.stdout.StdOutImpl

 

domain

  1. package com.securitydemo.security.domain;
  2.  
  3. public class Msg {
  4. 	private String title;
  5. 	private String content;
  6. 	private String etraInfo;
  7. 	
  8. 	public Msg(String title, String content, String etraInfo) {
  9. 		super();
  10. 		this.title = title;
  11. 		this.content = content;
  12. 		this.etraInfo = etraInfo;
  13. 	}
  14. 	public String getTitle() {
  15. 		return title;
  16. 	}
  17. 	public void setTitle(String title) {
  18. 		this.title = title;
  19. 	}
  20. 	public String getContent() {
  21. 		return content;
  22. 	}
  23. 	public void setContent(String content) {
  24. 		this.content = content;
  25. 	}
  26. 	public String getEtraInfo() {
  27. 		return etraInfo;
  28. 	}
  29. 	public void setEtraInfo(String etraInfo) {
  30. 		this.etraInfo = etraInfo;
  31. 	}
  32. 	
  33. }

 

  1. package com.securitydemo.security.domain;
  2.  
  3. import javax.persistence.Entity;
  4. import javax.persistence.GeneratedValue;
  5. import javax.persistence.Id;
  6.  
  7. public class SysRole {
  8.  
  9.     private Long id;
  10.     private Long userId;
  11.     private String name;
  12.  
  13.     public Long getId() {
  14.         return id;
  15.     }
  16.  
  17.     public void setId(Long id) {
  18.         this.id = id;
  19.     }
  20.  
  21.     public String getName() {
  22.         return name;
  23.     }
  24.  
  25.     public void setName(String name) {
  26.         this.name = name;
  27.     }
  28.  
  29.     public void setUserId(Long userId) {
  30.         this.userId = userId;
  31.     }
  32.  
  33.     public Long getUserId() {
  34.  
  35.         return userId;
  36.     }
  37. }

 

 

  1. package com.securitydemo.security.domain;
  2.  
  3. import java.util.ArrayList;
  4. import java.util.Collection;
  5. import java.util.List;
  6.  
  7. import javax.persistence.CascadeType;
  8. import javax.persistence.Entity;
  9. import javax.persistence.FetchType;
  10. import javax.persistence.GeneratedValue;
  11. import javax.persistence.Id;
  12. import javax.persistence.ManyToMany;
  13.  
  14. import org.springframework.security.core.GrantedAuthority;
  15. import org.springframework.security.core.authority.SimpleGrantedAuthority;
  16. import org.springframework.security.core.userdetails.UserDetails;
  17.  
  18.  
  19. public class SysUser implements UserDetails { //1
  20.  
  21.     private static final long serialVersionUID = 1L;
  22.  
  23.     private Long id;
  24.     private String username;
  25.     private String password;
  26.    
  27.     private List<SysRole> roles;
  28.  
  29.     /**
  30.      * 重写getAuthorities()方法
  31.      * 将用户角色作为权限
  32.      *
  33.      * @return
  34.      */
  35.  
  36.     @Override
  37.     public Collection<? extends GrantedAuthority> getAuthorities() {
  38.         List<GrantedAuthority> auths = new ArrayList<GrantedAuthority>();
  39.         List<SysRole> roles = this.getRoles();
  40.         for (SysRole role : roles) {
  41.             auths.add(new SimpleGrantedAuthority(role.getName()));
  42.         }
  43.         return auths;
  44.     }
  45.  
  46.     @Override
  47.     public boolean isAccountNonExpired() {
  48.         return true;
  49.     }
  50.  
  51.     @Override
  52.     public boolean isAccountNonLocked() {
  53.         return true;
  54.     }
  55.  
  56.     @Override
  57.     public boolean isCredentialsNonExpired() {
  58.         return true;
  59.     }
  60.  
  61.     @Override
  62.     public boolean isEnabled() {
  63.         return true;
  64.     }
  65.  
  66.     public Long getId() {
  67.         return id;
  68.     }
  69.  
  70.     public void setId(Long id) {
  71.         this.id = id;
  72.     }
  73.  
  74.     public String getUsername() {
  75.         return username;
  76.     }
  77.  
  78.     public void setUsername(String username) {
  79.         this.username = username;
  80.     }
  81.  
  82.     public String getPassword() {
  83.         return password;
  84.     }
  85.  
  86.     public void setPassword(String password) {
  87.         this.password = password;
  88.     }
  89.  
  90.     public List<SysRole> getRoles() {
  91.         return roles;
  92.     }
  93.  
  94.     public void setRoles(List<SysRole> roles) {
  95.         this.roles = roles;
  96.     }
  97.  
  98.  
  99. }

service 层 获取用户信息和角色信息

  1. package com.securitydemo.security.service;
  2.  
  3. import com.securitydemo.security.domain.SysRole;
  4. import org.apache.ibatis.annotations.Mapper;
  5. import org.apache.ibatis.annotations.Select;
  6.  
  7. import java.util.List;
  8.  
  9. /**
  10.  * @author Micky
  11.  * @Title: UserRoleMapper
  12.  * @ProjectName security
  13.  * @Description:
  14.  * @date 2018/7/20下午6:16
  15.  */
  16. @Mapper
  17. public interface UserRoleMapper {
  18.     @Select("select * from  sys_role where userId=#{id}")
  19.     List<SysRole> getRoleByUser(Long id);
  20. }
  1. package com.securitydemo.security.service;
  2.  
  3. import com.securitydemo.security.domain.SysUser;
  4. import org.apache.ibatis.annotations.Mapper;
  5. import org.apache.ibatis.annotations.Select;
  6. import org.springframework.stereotype.Component;
  7.  
  8. /**
  9.  * @author Micky
  10.  * @Title: SysUserMapper
  11.  * @ProjectName security
  12.  * @Description:
  13.  * @date 2018/7/20下午4:36
  14.  */
  15. @Mapper
  16. @Component
  17. public interface SysUserMapper {
  18.     @Select("select * from sys_user where username=#{username}")
  19.     SysUser findByUsername(String username);
  20. }

自定义实现UserDetailsService 接口

  1. package com.securitydemo.security.security;
  2.  
  3. import com.securitydemo.security.domain.SysRole;
  4. import com.securitydemo.security.domain.SysUser;
  5. import com.securitydemo.security.service.SysUserMapper;
  6. import com.securitydemo.security.service.UserRoleMapper;
  7. import org.springframework.beans.factory.annotation.Autowired;
  8. import org.springframework.security.core.authority.SimpleGrantedAuthority;
  9. import org.springframework.security.core.userdetails.UserDetails;
  10. import org.springframework.security.core.userdetails.UserDetailsService;
  11. import org.springframework.security.core.userdetails.UsernameNotFoundException;
  12.  
  13. import java.util.ArrayList;
  14. import java.util.List;
  15.  
  16. /**
  17.  * @author Micky
  18.  * @Title: CustomUserService
  19.  * @ProjectName security
  20.  * @Description: 实现自定义UserDetailsService接口
  21.  * @date 2018/7/20下午3:26
  22.  */
  23. public class CustomUserService implements UserDetailsService {
  24.     @Autowired
  25.     private SysUserMapper sysUserRepository;
  26.     @Autowired
  27.     private UserRoleMapper userRoleService;
  28.  
  29.     @Override
  30.     public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
  31.         SysUser user = sysUserRepository.findByUsername(username);
  32.         if(user == null){
  33.             throw new UsernameNotFoundException("用户名不存在");
  34.         }
  35.         List<SimpleGrantedAuthority> authorities = new ArrayList<>();
  36.         //用于添加用户的权限。只要把用户权限添加到authorities 就万事大吉。
  37.         List<SysRole> roles = userRoleService.getRoleByUser(user.getId());
  38.         for(SysRole role:roles)
  39.         {
  40.             authorities.add(new SimpleGrantedAuthority(role.getName()));
  41.             System.out.println(role.getName());
  42.         }
  43.         return new org.springframework.security.core.userdetails.User(user.getUsername(),
  44.                 user.getPassword(), authorities);
  45.     }

配置confing

  1. package com.securitydemo.security.cofing;
  2.  
  3. import org.springframework.context.annotation.Configuration;
  4. import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
  5. import org.springframework.web.servlet.config.annotation.ViewControllerRegistry;
  6. import org.springframework.web.servlet.config.annotation.WebMvcConfigurerAdapter;
  7.  
  8. /**
  9.  * @author Micky
  10.  * @Title: WebMvcConfig
  11.  * @ProjectName security
  12.  * @Description:
  13.  * @date 2018/7/20下午4:02
  14.  */
  15. @EnableWebSecurity
  16. @Configuration
  17. public class WebMvcConfig extends WebMvcConfigurerAdapter {
  18.     /**
  19.      * 访问login 跳转到login.html页面
  20.      *
  21.      * @param registry
  22.      */
  23.     @Override
  24.     public void addViewControllers(ViewControllerRegistry registry) {
  25.         registry.addViewController("/login").setViewName("login");
  26.     }
  27. }
  1. package com.securitydemo.security.cofing;
  2.  
  3. import com.securitydemo.security.security.CustomUserService;
  4. import org.springframework.context.annotation.Bean;
  5. import org.springframework.context.annotation.Configuration;
  6. import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
  7. import org.springframework.security.config.annotation.web.builders.HttpSecurity;
  8. import org.springframework.security.config.annotation.web.builders.WebSecurity;
  9. import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
  10. import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
  11. import org.springframework.security.core.userdetails.UserDetailsService;
  12.  
  13. /**
  14.  * @author Micky
  15.  * @Title: WebSecurityConfig
  16.  * @ProjectName security
  17.  * @Description:
  18.  * @date 2018/7/20下午4:07
  19.  */
  20. @Configuration
  21. @EnableWebSecurity
  22. public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
  23.     /**
  24.      * 注册CustomUserService的bean
  25.      *
  26.      * @return
  27.      */
  28.     @Bean
  29.     UserDetailsService customUserService() { //2
  30.         return new CustomUserService();
  31.     }
  32.  
  33.     /**
  34.      * 添加我们自定义的user UserDetails
  35.      *
  36.      * @param auth
  37.      * @throws Exception
  38.      */
  39.     @Override
  40.     protected void configure(AuthenticationManagerBuilder auth) throws Exception {
  41.         auth.userDetailsService(customUserService()); //3
  42.  
  43.     }
  44.  
  45.     /**
  46.      * @param http
  47.      * @throws Exception
  48.      */
  50.     @Override
  51.     protected void configure(HttpSecurity http) throws Exception {
  52.         http.authorizeRequests()
  53.                 .anyRequest().authenticated() //4  所有请求必须要登录后才能认证
  54.                 .and()
  55.                 .formLogin()
  56.                 .loginPage("/login")
  57.                 .failureUrl("/login?error")//登录失败访问的页面
  58.                 .permitAll() //5 定制登录页面行为登录页面可以任意访问
  59.                 .and()
  60.                 .logout().permitAll() //6 注销可以任意访问
  61.                 .and().formLogin();
  62.         http.csrf().disable();
  63.  
  64.  
  65.     }
  66.  
  67.     @Override
  68.     public void configure(WebSecurity web) throws Exception {
  69.         super.configure(web);
  70.         web.ignoring().antMatchers("/css/**", "/css/**", "/images/**");//静态资源访问
  71.     }
  72. }

 

controller层

  1. package com.securitydemo.security.controller;
  2.  
  3. import com.securitydemo.security.domain.Msg;
  4. import org.springframework.stereotype.Controller;
  5. import org.springframework.ui.Model;
  6. import org.springframework.web.bind.annotation.RequestMapping;
  7.  
  8. /**
  9.  * @author Micky
  10.  * @Title: HomeController
  11.  * @ProjectName security
  12.  * @Description:
  13.  * @date 2018/7/20下午4:22
  14.  */
  15. @Controller
  16. public class HomeController {
  17.     @RequestMapping("/")
  18.     public String index(Model model) {
  19.         Msg msg = new Msg("测试标题", "测试内容", "额外信息，只对管理员显示");
  20.         model.addAttribute("msg", msg);
  21.         return "home";
  22.     }
  23. }

 

前端页面  thymeleaf为我们提供了spring security 的标签支持

通过  sec:authentication="name" 获取当前用户名

sec:authorize="hasRole('ROLE_USER')" 意味着只能是ROLE_USER才可以显示标签内容

sec:authorize="hasRole('ROLE_ADMIN')意味着只能是ROLE_ADMIN才可以显示标签内容

注销路径默认是/logout 必须要post 提交

  1. <!DOCTYPE html>
  2. <html xmlns:th="http://www.thymeleaf.org">
  3. <head>
  4. <meta content="text/html;charset=UTF-8"/>
  5. <title>登录页面</title>
  6. <link rel="stylesheet" th:href="@{css/bootstrap.min.css}"/>
  7. <style type="text/css">
  8. 	body {
  9.   padding-top: 50px;
  10. }
  11. .starter-template {
  12.   padding: 40px 15px;
  13.   text-align: center;
  14. }
  15. </style>
  16. </head>
  17. <body>
  18. 	
  19. 	 <nav class="navbar navbar-inverse navbar-fixed-top">
  20.       <div class="container">
  21.         <div class="navbar-header">
  22.           <a class="navbar-brand" href="#">Spring Security演示</a>
  23.         </div>
  24.         <div id="navbar" class="collapse navbar-collapse">
  25.           <ul class="nav navbar-nav">
  26.            <li><a th:href="@{/}"> 首页 </a></li>
  27.            
  28.           </ul>
  29.         </div><!--/.nav-collapse -->
  30.       </div>
  31.     </nav>
  32.      <div class="container">
  33.  
  34.       <div class="starter-template">
  35.        <p th:if="${param.logout}" class="bg-warning">已成功注销</p><!-- 1 -->
  36. 			<p th:if="${param.error}" class="bg-danger">有错误，请重试</p> <!-- 2 -->
  37. 			<h2>使用账号密码登录</h2>
  38. 			<form name="form" th:action="@{/login}" action="/login" method="POST"> <!-- 3 -->
  39. 				<div class="form-group">
  40. 					<label for="username">账号</label>
  41. 					<input type="text" class="form-control" name="username" value="" placeholder="账号" />
  42. 				</div>
  43. 				<div class="form-group">
  44. 					<label for="password">密码</label>
  45. 					<input type="password" class="form-control" name="password" placeholder="密码" />
  46. 				</div>
  47. 				<input type="submit" id="login" value="Login" class="btn btn-primary" />
  48. 			</form>
  49.       </div>
  50.  
  51.     </div>
  52. 		
  53. </body>
  54. </html>
  1. <!DOCTYPE html>
  2. <html xmlns:th="http://www.thymeleaf.org" 
  3. 	  xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-springsecurity4"><!-- 1 -->
  4. <head>
  5. <meta content="text/html;charset=UTF-8"/>
  6. <title sec:authentication="name"></title> <!-- 2 -->
  7. <link rel="stylesheet" th:href="@{css/bootstrap.min.css}" />
  8. <style type="text/css">
  9. body {
  10.   padding-top: 50px;
  11. }
  12. .starter-template {
  13.   padding: 40px 15px;
  14.   text-align: center;
  15. }
  16. </style>
  17. </head>
  18. <body>
  19. 	 <nav class="navbar navbar-inverse navbar-fixed-top">
  20.       <div class="container">
  21.         <div class="navbar-header">
  22.           <a class="navbar-brand" href="#">Spring Security演示</a>
  23.         </div>
  24.         <div id="navbar" class="collapse navbar-collapse">
  25.           <ul class="nav navbar-nav">
  26.            <li><a th:href="@{/}"> 首页 </a></li>
  27.            
  28.           </ul>
  29.         </div><!--/.nav-collapse -->
  30.       </div>
  31.     </nav>
  32.     
  33.     
  34.      <div class="container">
  35.  
  36.       <div class="starter-template">
  37.       	<h1 th:text="${msg.title}"></h1>
  38. 		
  39. 		<p class="bg-primary" th:text="${msg.content}"></p>
  40. 		
  41. 		<div sec:authorize="hasRole('ROLE_ADMIN')"> <!-- 3 -->
  42. 		 	<p class="bg-info" th:text="${msg.etraInfo}"></p>
  43. 		</div>	
  44. 		
  45. 		<div sec:authorize="hasRole('ROLE_USER')"> <!-- 4-->
  46. 		 	<p class="bg-info">无更多信息显示</p>
  47. 		</div>	
  48. 		
  49.         <form th:action="@{/logout}" method="post">
  50.             <input type="submit" class="btn btn-primary" value="注销"/><!-- 5 -->
  51.         </form>
  52.       </div>
  53.  
  54.     </div>
  55.     
  56. 	
  57. </body>
  58. </html>

运行

 

 

 

 

 

 

 

 

 

 

 

 

本文内容由网友自发贡献，转载请注明出处：https://www.wpsshop.cn/w/天景科技苑/article/detail/875393
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号