devbox
羊村懒王
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

SpringCloud oauth2授权（密码模式，验证码模式）_getoauth2authentication

作者：羊村懒王 | 2024-05-04 10:44:45

赞

踩

getoauth2authentication

前言

项目基于springcloud,授权决定使用提供的spring-oauth2,了解了oauth2原理之后，基于业务有很多需要重写的点；

1.获取token同时需要获取客户端信息（手机型号，app版本号等）

2.除了提供的password方式登录，还需要提供验证码登录功能

源码理解

对spring-cloud-starter-oauth2包的源码进行了简单的了解：

endpoint: 端点，/oauth/token的接口地址 TokenEndPoint是接口的逻辑

TokenGranter:token授权,默认提供了4种granter(RefreshTokenGranter,ImplicitTokenGranter,ResourceOwnerPasswordTokenGranter,ClientCredentialsTokenGranter)

自定义TokenGranter可以实现获取除了默认参数的其他参数，同时可以增加验证

AuthenticationProvider：身份验证提供者，用于验证身份，密码的匹配等都是再这通过service获取用户信息进行校验

DaoAuthenticationProvider是默认的实现类，通过重写provider来自定义校验逻辑

UserDetailsService：用户信息查询

 

实现

第一步：指定自定义provider

自定义granter

  1. package com.mlines.cloud.granter;
  2.  
  3. import com.mlines.cloud.token.AppAuthenticationToken;
  4. import org.apache.commons.lang3.StringUtils;
  5. import org.springframework.security.authentication.AbstractAuthenticationToken;
  6. import org.springframework.security.authentication.AccountStatusException;
  7. import org.springframework.security.authentication.AuthenticationManager;
  8. import org.springframework.security.authentication.BadCredentialsException;
  9. import org.springframework.security.core.Authentication;
  10. import org.springframework.security.oauth2.common.exceptions.InvalidGrantException;
  11. import org.springframework.security.oauth2.provider.*;
  12. import org.springframework.security.oauth2.provider.token.AbstractTokenGranter;
  13. import org.springframework.security.oauth2.provider.token.AuthorizationServerTokenServices;
  14.  
  15. import java.util.LinkedHashMap;
  16. import java.util.Map;
  17.  
  18. /**
  19.  * 短信验证码方式
  20.  * zhangmx
  21.  */
  23. public class SMSCodeTokenGranter extends AbstractTokenGranter {
  24.     private static final String GRANT_TYPE = "smscode";
  25.  
  26.     private final AuthenticationManager authenticationManager;
  27.  
  28.     public SMSCodeTokenGranter(AuthenticationManager authenticationManager,
  29.                                AuthorizationServerTokenServices tokenServices, ClientDetailsService clientDetailsService, OAuth2RequestFactory requestFactory) {
  30.         this(authenticationManager, tokenServices, clientDetailsService, requestFactory, GRANT_TYPE);
  31.     }
  32.  
  33.     protected SMSCodeTokenGranter(AuthenticationManager authenticationManager, AuthorizationServerTokenServices tokenServices,
  34.                                   ClientDetailsService clientDetailsService, OAuth2RequestFactory requestFactory, String grantType) {
  35.         super(tokenServices, clientDetailsService, requestFactory, grantType);
  36.         this.authenticationManager = authenticationManager;
  37.     }
  38.  
  39.  
  40.     /**
  41.      * 在这个方法可以进行验证码等其他操作
  42.      * @param client
  43.      * @param tokenRequest
  44.      * @return
  45.      */
  46.     @Override
  47.     protected OAuth2Authentication getOAuth2Authentication(ClientDetails client, TokenRequest tokenRequest) {
  48.  
  49.         Map<String, String> parameters = new LinkedHashMap<String, String>(tokenRequest.getRequestParameters());
  50.         String username = parameters.get("username");
  51.         String smscode = parameters.get("smscode");
  52.         String deviceId=parameters.get("deviceId");
  53.         String type=parameters.get("type");
  54.         String sysVersion=parameters.get("sysVersion");
  55.         String deviceVersion=parameters.get("deviceVersion");
  56.         String appVersion=parameters.get("appVersion");
  57.         parameters.put("loginType","sms");
  58.         // Protect from downstream leaks of password
  59.         parameters.remove("password");
  60.  
  61.         //校验验证码
  62.         if(!StringUtils.equals(smscode,"1001")){
  63.             throw new InvalidGrantException("验证码不正确");
  64.         }
  65.  
  66.         Authentication userAuth = new AppAuthenticationToken(username, smscode,type,deviceId,sysVersion,deviceVersion,appVersion);
  67.         ((AbstractAuthenticationToken) userAuth).setDetails(parameters);
  68.         try {
  69.             userAuth = authenticationManager.authenticate(userAuth);
  70.         }
  71.         catch (AccountStatusException ase) {
  72.             //covers expired, locked, disabled cases (mentioned in section 5.2, draft 31)
  73.             throw new InvalidGrantException(ase.getMessage());
  74.         }
  75.         catch (BadCredentialsException e) {
  76.             // If the username/password are wrong the spec says we should send 400/invalid grant
  77.             throw new InvalidGrantException(e.getMessage());
  78.         }
  79.         if (userAuth == null || !userAuth.isAuthenticated()) {
  80.             throw new InvalidGrantException("Could not authenticate user: " + username);
  81.         }
  82.  
  83.         OAuth2Request storedOAuth2Request = getRequestFactory().createOAuth2Request(client, tokenRequest);
  84.         return new OAuth2Authentication(storedOAuth2Request, userAuth);
  85.     }
  86. }

第二步：指定自定义provider

自定义provider:

  1. package com.mlines.cloud.provider;
  2.  
  3.  
  4. import com.mlines.cloud.feign.client.SysUserClient;
  5. import com.mlines.cloud.token.AppAuthenticationToken;
  6. import org.apache.commons.lang3.StringUtils;
  7. import org.springframework.beans.factory.annotation.Autowired;
  8. import org.springframework.security.authentication.BadCredentialsException;
  9. import org.springframework.security.authentication.InternalAuthenticationServiceException;
  10. import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
  11. import org.springframework.security.authentication.dao.AbstractUserDetailsAuthenticationProvider;
  12. import org.springframework.security.core.AuthenticationException;
  13. import org.springframework.security.core.userdetails.UserDetails;
  14. import org.springframework.security.core.userdetails.UserDetailsService;
  15. import org.springframework.security.core.userdetails.UsernameNotFoundException;
  16. import org.springframework.security.crypto.password.PasswordEncoder;
  17. import org.springframework.util.Assert;
  18.  
  19. import java.util.Map;
  20.  
  21. /**
  22.  * Created by fp295 on 2018/11/25.4
  23.  * 用户名密码登录
  24.  */
  25. public class AppAuthenticationProvider extends AbstractUserDetailsAuthenticationProvider {
  26.  
  27.     @Autowired
  28.     private UserDetailsService userDetailsService;
  29.     @Autowired
  30.     private SysUserClient sysUserClient;
  31.  
  32.     private PasswordEncoder passwordEncoder;
  33. //    /**
  34. //     * 根据用户名取回用户信息后，进入此方法判断密码是否匹配，如果是验证码登录 判断验证码是否正确
  35. //     * @param var1
  36. //     * @param authentication
  37. //     * @throws AuthenticationException
  38. //     */
  39. //    @Override
  40. //    protected void additionalAuthenticationChecks(UserDetails var1, Authentication authentication) throws AuthenticationException {
  41. //
  42. //        if(authentication.getCredentials() == null) {
  43. //            this.logger.debug("Authentication failed: no credentials provided");
  44. //            throw new BadCredentialsException(this.messages.getMessage("AppAuthenticationProvider.badCredentials", "Bad credentials"));
  45. //        } else {
  46. //            String presentedPassword = authentication.getCredentials().toString();
  47. //            Map<String,Object> otherParams=(Map<String,Object>)authentication.getDetails();//其他参数
  48. //            String loginType=(String)otherParams.get("loginType");
  49. //            if(StringUtils.equals(loginType,"password")){//密码方式登录
  50. //                if (!passwordEncoder.matches(presentedPassword, var1.getPassword())) {
  51. //                    logger.debug("密码错误");
  52. //
  53. //                    throw new BadCredentialsException(messages.getMessage(
  54. //                            "400",
  55. //                            "密码错误"));
  56. //                }
  57. //            }
  58. //
  59.  
  60.             // 验证码验证，调用公共服务查询 key 为authentication.getPrincipal()的value， 并判断其与验证码是否匹配
  61.             if(!"1000".equals(presentedPassword)){
  62.                 this.logger.debug("Authentication failed: verifyCode does not match stored value");
  63.                 throw new BadCredentialsException(this.messages.getMessage("AppAuthenticationProvider.badCredentials", "Bad verifyCode"));
  64.             }
  65. //        }
  66. //    }
  67. //
  68. //
  69. //
  70. //    @Override
  71. //    protected Authentication createSuccessAuthentication(Object principal, Authentication authentication, UserDetails user,String deviceId) {
  72. //        AppAuthenticationToken result = new AppAuthenticationToken(principal, authentication.getCredentials(), user.getAuthorities(),deviceId);
  73. //        result.setDetails(authentication.getDetails());
  74. //        return result;
  75. //    }
  76. //
  77. //    @Override
  78. //    protected UserDetails retrieveUser(String phone, Authentication authentication) throws AuthenticationException {
  79. //        UserDetails loadedUser;
  80. //        try {
  81. //            loadedUser = userDetailsService.loadUserByUsername(phone);
  82. //        } catch (UsernameNotFoundException var6) {
  83. //            throw var6;
  84. //        } catch (Exception var7) {
  85. //            throw new InternalAuthenticationServiceException(var7.getMessage(), var7);
  86. //        }
  87. //
  88. //        if(loadedUser == null) {
  89. //            throw new InternalAuthenticationServiceException("UserDetailsService returned null, which is an interface contract violation");
  90. //        } else {
  91. //            return loadedUser;
  92. //        }
  93. //    }
  94.  
  95.     @Override
  96.     protected void additionalAuthenticationChecks(UserDetails userDetails, UsernamePasswordAuthenticationToken authentication) throws AuthenticationException {
  97.         if(authentication.getCredentials() == null) {
  98.             this.logger.debug("Authentication failed: no credentials provided");
  99.             throw new BadCredentialsException(this.messages.getMessage("AppAuthenticationProvider.badCredentials", "Bad credentials"));
  100.         } else {
  101.             String presentedPassword = authentication.getCredentials().toString();
  102.             Map<String,Object> otherParams=(Map<String,Object>)authentication.getDetails();//其他参数
  103.             String loginType=(String)otherParams.get("loginType");
  104.             if(StringUtils.equals(loginType,"password")){//密码方式登录
  105.                 if (!passwordEncoder.matches(presentedPassword, userDetails.getPassword())) {
  106.                     logger.debug("密码错误");
  107.  
  108.                     throw new BadCredentialsException(messages.getMessage(
  109.                             "400",
  110.                             "密码错误"));
  111.                 }
  112.             }
  113.  
  114. //
  115. //            // 验证码验证，调用公共服务查询 key 为authentication.getPrincipal()的value， 并判断其与验证码是否匹配
  116. //            if(!"1000".equals(presentedPassword)){
  117. //                this.logger.debug("Authentication failed: verifyCode does not match stored value");
  118. //                throw new BadCredentialsException(this.messages.getMessage("AppAuthenticationProvider.badCredentials", "Bad verifyCode"));
  119. //            }
  120.         }
  121.     }
  122.  
  123.     @Override
  124.     protected UserDetails retrieveUser(String username, UsernamePasswordAuthenticationToken authentication) throws AuthenticationException {
  125.         UserDetails loadedUser;
  126.         try {
  127.             loadedUser = userDetailsService.loadUserByUsername(username);
  128.         } catch (UsernameNotFoundException var6) {
  129.             throw var6;
  130.         } catch (Exception var7) {
  131.             throw new InternalAuthenticationServiceException(var7.getMessage(), var7);
  132.         }
  133.  
  134.         if(loadedUser == null) {
  135.             throw new InternalAuthenticationServiceException("UserDetailsService returned null, which is an interface contract violation");
  136.         } else {
  137.             return loadedUser;
  138.         }
  139.     }
  140.  
  141.     @Override
  142.     public boolean supports(Class<?> authentication) {
  143.         return AppAuthenticationToken.class.isAssignableFrom(authentication);
  144.     }
  145.  
  146.     public void setPasswordEncoder(PasswordEncoder passwordEncoder) {
  147.         Assert.notNull(passwordEncoder, "passwordEncoder cannot be null");
  148.         this.passwordEncoder = passwordEncoder;
  149.     }
  150.  
  151.     protected PasswordEncoder getPasswordEncoder() {
  152.         return passwordEncoder;
  153.     }
  154.  
  155. //
  156. //
  157.     public UserDetailsService getUserDetailsService() {
  158.         return userDetailsService;
  159.     }
  160.  
  161.     public void setUserDetailsService(UserDetailsService userDetailsService) {
  162.         this.userDetailsService = userDetailsService;
  163.     }
  164. }

自定义service

 

其他代码片段

  1. package com.mlines.cloud.config;
  2.  
  3. import com.mlines.cloud.granter.AppResourceOwnerPasswordTokenGranter;
  4. import com.mlines.cloud.granter.SMSCodeTokenGranter;
  5. import com.mlines.cloud.handler.CustomWebResponseExceptionTranslator;
  6. import com.mlines.cloud.provider.AppAuthenticationProvider;
  7. import org.springframework.beans.factory.annotation.Autowired;
  8. import org.springframework.context.annotation.Bean;
  9. import org.springframework.context.annotation.Configuration;
  10. import org.springframework.security.authentication.AuthenticationManager;
  11. import org.springframework.security.authentication.AuthenticationProvider;
  12. import org.springframework.security.authentication.ProviderManager;
  13. import org.springframework.security.core.userdetails.UserDetailsService;
  14. import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
  15. import org.springframework.security.oauth2.config.annotation.configurers.ClientDetailsServiceConfigurer;
  16. import org.springframework.security.oauth2.config.annotation.web.configuration.AuthorizationServerConfigurerAdapter;
  17. import org.springframework.security.oauth2.config.annotation.web.configuration.EnableAuthorizationServer;
  18. import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerEndpointsConfigurer;
  19. import org.springframework.security.oauth2.config.annotation.web.configurers.AuthorizationServerSecurityConfigurer;
  20. import org.springframework.security.oauth2.provider.ClientDetailsService;
  21. import org.springframework.security.oauth2.provider.CompositeTokenGranter;
  22. import org.springframework.security.oauth2.provider.OAuth2RequestFactory;
  23. import org.springframework.security.oauth2.provider.TokenGranter;
  24. import org.springframework.security.oauth2.provider.client.ClientCredentialsTokenGranter;
  25. import org.springframework.security.oauth2.provider.code.AuthorizationCodeServices;
  26. import org.springframework.security.oauth2.provider.code.AuthorizationCodeTokenGranter;
  27. import org.springframework.security.oauth2.provider.implicit.ImplicitTokenGranter;
  28. import org.springframework.security.oauth2.provider.refresh.RefreshTokenGranter;
  29. import org.springframework.security.oauth2.provider.token.AuthorizationServerTokenServices;
  30. import org.springframework.security.oauth2.provider.token.TokenEnhancer;
  31. import org.springframework.security.oauth2.provider.token.TokenEnhancerChain;
  32. import org.springframework.security.oauth2.provider.token.TokenStore;
  33. import org.springframework.security.oauth2.provider.token.store.JwtAccessTokenConverter;
  34. import org.springframework.security.oauth2.provider.token.store.JwtTokenStore;
  35.  
  36. import java.util.ArrayList;
  37. import java.util.Arrays;
  38. import java.util.List;
  39.  
  40. @Configuration
  41. @EnableAuthorizationServer
  42. public class OAuthConfiguration extends AuthorizationServerConfigurerAdapter {
  43.     @Autowired
  44.     private AuthenticationManager authenticationManager;
  45.     @Autowired
  46.     private CustomAccessDeniedHandler customAccessDeniedHandler;
  47.     @Autowired
  48.     private CustomWebResponseExceptionTranslator customWebResponseExceptionTranslator;
  49. //    @Autowired
  50. //    private UsernameUserDetailService userDetailsService;
  51.     @Autowired
  52.     private UserDetailsService userDetailsService;//读取客户端的service  app可以是一个客户端    web可以是一个客户端
  53.     @Override
  54.     public void configure(ClientDetailsServiceConfigurer clients) throws Exception {
  55.         clients.inMemory()
  56.                 .withClient("web-app")
  57.                 .secret( new BCryptPasswordEncoder().encode("rq9nuNkIwT"))
  58.                 .scopes("web-app")
  59.                 .authorizedGrantTypes("password","smscode", "refresh_token")
  60.                 .accessTokenValiditySeconds(86400)//超时
  61.                 .refreshTokenValiditySeconds(604800)
  62.                 .and()
  63.                 .withClient("android-app")
  64.                 .secret(new BCryptPasswordEncoder().encode("ijnuybdsvv"))
  65.                 .scopes("android-app")
  66.                 .authorizedGrantTypes("password","smscode", "refresh_token")
  67.                 .accessTokenValiditySeconds(86400*7)
  68.                 .refreshTokenValiditySeconds(604800*4);
  69.     }
  70.  
  71.     @Bean
  72.     public UserDetailsService userDetailsService(){
  73.         return userDetailsService;
  74.     }
  75.  
  76.     @Bean
  77.     public JwtAccessTokenConverter jwtAccessTokenConverter() {
  78.         JwtAccessTokenConverter jwtAccessTokenConverter = new JwtAccessTokenConverter();
  79.         jwtAccessTokenConverter.setSigningKey("cloudserver");
  80.         return jwtAccessTokenConverter;
  81.     }
  82.  
  83.     public static void main(String[] args){
  84. //        Jwt jwt=JwtHelper.decode("eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJtc2ciOiLnmbvlvZXmiJDlip8iLCJjb2RlIjoyMDAsImRhdGEiOnsibGFiZWwiOiLlvKDlrablj4siLCJpZCI6Mn0sInVzZXJfbmFtZSI6IjE2NjY2NjY2NjIxIiwic2NvcGUiOlsid2ViLWFwcCJdLCJleHAiOjE1NTA3NDc1NTQsImF1dGhvcml0aWVzIjpbIlJPTEVfVVNFUiJdLCJqdGkiOiJhZDk1OGZhMC1mYWNiLTQyOGQtYWZlMi0xNGQ0OGJhMTBjMjAiLCJjbGllbnRfaWQiOiJ3ZWItYXBwIn0.yQbgx8rXCkwqdYWhGOBIRJZyIe9VOKrV3yNIcqVE294");
  85. //        System.out.println(new String(jwt.getClaims().getBytes()));
  86.         System.out.println(new BCryptPasswordEncoder().encode("123456"));
  87.         System.out.println(new BCryptPasswordEncoder().matches("123456","$2a$10$xT8XiML30Yer0d3cYBmXfewMgZtQyiGc25zZs9ipkvKJuyOQDwcF2"));
  88.     }
  89.  
  90.     @Bean
  91.     public TokenStore jwtTokenStore() {
  92.         return new JwtTokenStore(jwtAccessTokenConverter());
  93.     }
  94.  
  95.     @Override
  96.     public void configure(AuthorizationServerEndpointsConfigurer endpoints) throws Exception {
  97.         TokenEnhancerChain enhancerChain = new TokenEnhancerChain();
  98.         enhancerChain.setTokenEnhancers(Arrays.asList(customTokenEnhancer(), jwtAccessTokenConverter()));
  99.         endpoints.tokenStore(jwtTokenStore())
  100.                 .accessTokenConverter(jwtAccessTokenConverter())
  101.                 .reuseRefreshTokens(false)//该字段设置设置refresh token是否重复使用,true:reuse;false:no reuse.
  102.                 .authenticationManager(authenticationManager)
  103.                 .userDetailsService(userDetailsService)
  104.                 .tokenEnhancer(enhancerChain);
  105.         endpoints.exceptionTranslator(customWebResponseExceptionTranslator);
  106.         endpoints.tokenGranter(new CompositeTokenGranter(getTokenGranters(endpoints)));
  107.     }
  108.  
  109.     private List<TokenGranter> getTokenGranters(AuthorizationServerEndpointsConfigurer endpoints){
  110.         ClientDetailsService clientDetails = endpoints.getClientDetailsService();
  111.         AuthorizationServerTokenServices tokenServices = endpoints.getTokenServices();
  112.         AuthorizationCodeServices authorizationCodeServices = endpoints.getAuthorizationCodeServices();
  113.         OAuth2RequestFactory requestFactory = endpoints.getOAuth2RequestFactory();
  114. //        ((DefaultTokenServices)tokenServices).setAuthenticationManager(new ProviderManager(getProvider(),null));
  115.         List<TokenGranter> tokenGranters = new ArrayList<TokenGranter>();
  116.         tokenGranters.add(new AuthorizationCodeTokenGranter(tokenServices, authorizationCodeServices, clientDetails,
  117.                 requestFactory));
  118.         tokenGranters.add(new RefreshTokenGranter(tokenServices, clientDetails, requestFactory));
  119.         ImplicitTokenGranter implicit = new ImplicitTokenGranter(tokenServices, clientDetails, requestFactory);
  120.         tokenGranters.add(implicit);
  121.         tokenGranters.add(new ClientCredentialsTokenGranter(tokenServices, clientDetails, requestFactory));
  122.         if (authenticationManager != null) {
  123. //            tokenGranters.add(new ResourceOwnerPasswordTokenGranter(authenticationManager, tokenServices,
  124. //                    clientDetails, requestFactory));//有了自定义的用户名密码验证方式不需要初始化默认的了
  125.             tokenGranters.add(new AppResourceOwnerPasswordTokenGranter(new ProviderManager(getProvider(),null),tokenServices,endpoints.getClientDetailsService(),endpoints.getOAuth2RequestFactory()));
  126.             tokenGranters.add(new SMSCodeTokenGranter(new ProviderManager(getProvider(),null),tokenServices,endpoints.getClientDetailsService(),endpoints.getOAuth2RequestFactory()));
  127.  
  128.         }
  129.         //添加自定义granter
  130.         return tokenGranters;
  131.     }
  132.  
  133.     private List<AuthenticationProvider> getProvider(){
  134.         List<AuthenticationProvider> list=new ArrayList<>();
  135.         AppAuthenticationProvider provider = new AppAuthenticationProvider();
  136.         // 设置userDetailsService
  137.         provider.setUserDetailsService(userDetailsService);
  138.         provider.setPasswordEncoder(new BCryptPasswordEncoder());
  139.         // 禁止隐藏用户未找到异常
  140.         provider.setHideUserNotFoundExceptions(false);
  141.         list.add(provider);
  142.         return list;
  143.     }
  144.  
  145.     @Override
  146.     public void configure(AuthorizationServerSecurityConfigurer security) throws Exception {
  147.         security.allowFormAuthenticationForClients()
  148.                 .authenticationEntryPoint(new AuthExceptionEntryPoint())//自定义异常信息
  149.                 .accessDeniedHandler(customAccessDeniedHandler)
  150.                 .tokenKeyAccess("permitAll()")
  151.                 .checkTokenAccess("isAuthenticated()");
  152.     }
  153.  
  154.  
  155.  
  156.     @Bean
  157.     public TokenEnhancer customTokenEnhancer() {
  158.         return new CustomTokenEnhancer();// 写入自定义信息
  159.     }
  160. //
  161. //    @Override
  162. //    public void configure(AuthorizationServerSecurityConfigurer oauthServer) throws Exception {
  163. //        oauthServer.authenticationEntryPoint(new AuthExceptionEntryPoint());
  164. //    }
  165.  
  166. }
  1. package com.mlines.cloud.config;
  2.  
  3. import com.mlines.cloud.filter.AppLoginAuthenticationFilter;
  4. import org.springframework.beans.factory.annotation.Autowired;
  5. import org.springframework.context.annotation.Bean;
  6. import org.springframework.context.annotation.Configuration;
  7. import org.springframework.security.authentication.AuthenticationManager;
  8. import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
  9. import org.springframework.security.config.annotation.web.builders.HttpSecurity;
  10. import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
  11. import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
  12. import org.springframework.security.core.userdetails.UserDetailsService;
  13. import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
  14.  
  15. @Configuration
  16. @EnableWebSecurity
  17. public class WebSecurityConfig extends WebSecurityConfigurerAdapter{
  18. //
  19.     @Autowired
  20.     private UserDetailsService userDetailsService;
  21.  
  22.     @Bean
  23.     public BCryptPasswordEncoder  passwordEncoder() {
  24.         return new BCryptPasswordEncoder();
  25.     }
  26.  
  27. //    @Override
  28. //    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
  29. //        auth
  30. //                .userDetailsService(userDetailsService())
  31. //                .passwordEncoder(passwordEncoder());
  32. //    }
  33.  
  34.  
  35.  
  36.  
  37.     @Override
  38.     protected void configure(AuthenticationManagerBuilder auth) throws Exception {
  39.         //TODO:use md5
  40. //        auth.authenticationProvider(appAuthenticationProvider());
  41.         auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder());
  42.  
  43.     }
  44.     //不定义没有password grant_type
  45.     @Override
  46.     @Bean
  47.     public AuthenticationManager authenticationManagerBean() throws Exception {
  48.         return super.authenticationManagerBean();
  49.     }
  50. //
  51.     @Bean
  52.     public AppLoginAuthenticationFilter getPhoneLoginAuthenticationFilter() {
  53.         AppLoginAuthenticationFilter filter = new AppLoginAuthenticationFilter();
  54.         try {
  55.             filter.setAuthenticationManager(this.authenticationManagerBean());
  56.         } catch (Exception e) {
  57.             e.printStackTrace();
  58.         }
  59. //        filter.setAuthenticationSuccessHandler(new LoginAuthSuccessHandler());
  60.         return filter;
  61.     }
  62. //    /**
  63. //     * 手机验证码登陆过滤器
  64. //     * @return
  65. //     */
  66. //    @Bean
  67. //    public UserNamePwdAuthenticationFilter getUserNamePwdFilter() {
  68. //        UserNamePwdAuthenticationFilter filter = new UserNamePwdAuthenticationFilter();
  69. //        try {
  70. //            filter.setAuthenticationManager(this.authenticationManagerBean());
  71. //        } catch (Exception e) {
  72. //            e.printStackTrace();
  73. //        }
  74. //        return filter;
  75. //    }
  76.  
  77. }
  78.

 

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/羊村懒王/article/detail/534117
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。

  

闽ICP备14008679号