Spring Security的簡(jiǎn)單使用
前期準(zhǔn)備
新建一個(gè)springboot項(xiàng)目，導(dǎo)入web模板和thymeleaf模板 導(dǎo)入靜態(tài)資源
package com.example.controller;import org.springframework.stereotype.Controller;import org.springframework.web.bind.annotation.PathVariable;import org.springframework.web.bind.annotation.RequestMapping;import org.springframework.web.bind.annotation.RestController;@Controllerpublic class TestController { @RequestMapping('/') public String index(){return 'index'; } @RequestMapping('/toLogin') public String toLogin(){return 'views/login'; } @RequestMapping('/level1/{id}') public String level1(@PathVariable('id') int id){return 'views/level1/'+id; } @RequestMapping('/level2/{id}') public String level2(@PathVariable('id') int id){return 'views/level2/'+id; } @RequestMapping('/level3/{id}') public String level3(@PathVariable('id') int id){return 'views/level3/'+id; }}SpringSecurity的使用
引入spring-boot-starter-security模塊
<dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-security</artifactId></dependency>
認(rèn)識(shí)SpringSecurity的幾個(gè)重要的類
WebSecurityConfigurerAdapter：自定義Security策略 AuthenticationManagerBuilder：自定義認(rèn)證策略 @EnableWebSecurity：開(kāi)啟WebSecurity模式SpringSecurity---授權(quán)（認(rèn)真看代碼和注釋）
//授權(quán) @Override protected void configure(HttpSecurity http) throws Exception {http.authorizeRequests().antMatchers('/').permitAll() //首頁(yè)所有人可以訪問(wèn).antMatchers('/level1/**').hasRole('vip1') //level1下的頁(yè)面，VIP1可以訪問(wèn).antMatchers('/level2/**').hasRole('vip2').antMatchers('/level3/**').hasRole('vip3');//開(kāi)啟自動(dòng)配置的登錄功能，//即，沒(méi)有登錄的時(shí)候，除了首頁(yè)，其他頁(yè)面都訪問(wèn)不了，這時(shí)候，你訪問(wèn)其他頁(yè)面的時(shí)候，//它直接跳轉(zhuǎn)到它內(nèi)置的登陸頁(yè)面，讓你登錄 http.formLogin();http.formLogin().loginPage('/toLogin');//自定義登錄頁(yè)，將自定義的登錄頁(yè)替換掉內(nèi)置的登錄頁(yè)//用來(lái)處理用戶登錄提交的表單http.formLogin().usernameParameter('username').passwordParameter('password').loginPage('/toLogin').loginProcessingUrl('/login');//開(kāi)啟自動(dòng)配置的注銷的功能// /logout 注銷請(qǐng)求 http.logout();http.csrf().disable();//關(guān)閉csrf功能:跨站請(qǐng)求偽造,默認(rèn)只能通過(guò)post方式提交logout請(qǐng)求http.logout().logoutSuccessUrl('/');//注銷成功就返回首頁(yè)//開(kāi)啟記住我功能 http.rememberMe();http.rememberMe().rememberMeParameter('remember');//在自定義登錄頁(yè)添加 記住我 }
SpringSecurity---認(rèn)證（認(rèn)真看代碼和注釋）
//認(rèn)證 @Override protected void configure(AuthenticationManagerBuilder auth) throws Exception {/* auth.inMemoryAuthentication().withUser('xiaomi').password('123').roles('vip1') 這樣寫(xiě)是不行的，會(huì)出現(xiàn)500錯(cuò)誤。原因：密碼沒(méi)有加密 Spring security 5.0中新增了多種加密方式，也改變了密碼的格式。 要想我們的項(xiàng)目還能夠正常登陸，需要修改一下configure中的代碼。我們要將前端傳過(guò)來(lái)的密碼進(jìn)行某種方式加密 spring security 官方推薦的是使用bcrypt加密方式。 這里通過(guò) passwordEncoder(new BCryptPasswordEncoder()) 的方式進(jìn)行加密 */// 在內(nèi)存中定義認(rèn)證的規(guī)則auth.inMemoryAuthentication().passwordEncoder(new BCryptPasswordEncoder()).withUser('xiaolong').password(new BCryptPasswordEncoder().encode('123456')).roles('vip1').and().withUser('xiaomi').password(new BCryptPasswordEncoder().encode('123456')).roles('vip1','vip2').and().withUser('xiaohu').password(new BCryptPasswordEncoder().encode('123456')).roles('vip1','vip2','vip3');//在jdbc中定義認(rèn)證的規(guī)則//auth.jdbcAuthentication() }
啟動(dòng)測(cè)試
靜態(tài)資源login.html
<!DOCTYPE html><html lang='en' xmlns:th='http://www.thymeleaf.org'><head> <meta charset='UTF-8'> <meta name='viewport' content='width=device-width, initial-scale=1, maximum-scale=1'> <title>登錄</title> <!--semantic-ui--> <link rel='external nofollow' rel='external nofollow' rel='stylesheet'></head><body><!--主容器--><div class='ui container'> <div class='ui segment'><div style='text-align: center'> <h1 class='header'>登錄</h1></div><div class='ui placeholder segment'> <div class='ui column very relaxed stackable grid'><div class='column'> <div class='ui form'><form th:action='@{/login}' method='post'> <div class='field'><label>Username</label><div class='ui left icon input'> <input type='text' placeholder='Username' name='username'> <i class='user icon'></i></div> </div> <div class='field'><label>Password</label><div class='ui left icon input'> <input type='password' name='password'> <i class='lock icon'></i></div> </div> <div class='field'><input type='checkbox' name='remember'>記住我 </div> <input type='submit' /></form> </div></div> </div></div><div style='text-align: center'> <div class='ui label'></i>注冊(cè) </div> <br><br></div><div style='text-align: center'> <h3>Spring Security</h3></div> </div></div><script th:src='http://www.leifengta.com.cn/bcjs/@{/js/jquery-3.1.1.min.js}'></script><script th:src='http://www.leifengta.com.cn/bcjs/@{/js/semantic.min.js}'></script></body></html>
index.html
<!DOCTYPE html><html lang='en' xmlns:th='http://www.thymeleaf.org' xmlns:sec='http://www.thymeleaf.org/extras/spring-security'><head> <meta charset='UTF-8'> <meta name='viewport' content='width=device-width, initial-scale=1, maximum-scale=1'> <title>首頁(yè)</title> <!--semantic-ui--> <link rel='external nofollow' rel='external nofollow' rel='stylesheet'> <link th:href='http://www.leifengta.com.cn/bcjs/@{/css/mystyle.css}' rel='external nofollow' rel='stylesheet'></head><body><!--主容器--><div class='ui container'> <div th:fragment='nav-menu'><div class='ui secondary menu'> <a th:href='http://www.leifengta.com.cn/bcjs/@{/index}' rel='external nofollow' >首頁(yè)</a> <!--登錄注銷--> <div class='right menu'><!--未登錄--><!--sec:authorize='!isAuthenticated() 未認(rèn)證即未登錄--><div sec:authorize='!isAuthenticated()'> <a th:href='http://www.leifengta.com.cn/bcjs/@{/toLogin}' rel='external nofollow' ><i class='address card icon'></i> 登錄 </a></div><!--已登錄--><!--sec:authorize='!isAuthenticated() 已認(rèn)證即已經(jīng)有用戶登錄--><div sec:authorize='isAuthenticated()'> <a class='item'><i class='address card icon'></i>用戶名：<span sec:authentication='principal.username'></span>角色：<span sec:authentication='principal.authorities'></span> </a></div><!--注銷--><div sec:authorize='isAuthenticated()'> <a th:href='http://www.leifengta.com.cn/bcjs/@{/logout}' rel='external nofollow' ><i class='sign-out icon'></i> 注銷 </a></div> </div></div> </div> <div style='text-align: center'><h3>Spring Security</h3> </div> <div><br><div class='ui three column stackable grid'> <!-- sec:authorize='hasRole(’vip1’) 永擁有vip1權(quán)限的人才能看到 --> <div sec:authorize='hasRole(’vip1’)'><div class='ui raised segment'> <div class='ui'><div class='content'> <h5 class='content'>Level 1</h5> <hr> <div><a th:href='http://www.leifengta.com.cn/bcjs/@{/level1/1}' rel='external nofollow' ><i class='bullhorn icon'></i> Level-1-1</a></div> <div><a th:href='http://www.leifengta.com.cn/bcjs/@{/level1/2}' rel='external nofollow' ><i class='bullhorn icon'></i> Level-1-2</a></div> <div><a th:href='http://www.leifengta.com.cn/bcjs/@{/level1/3}' rel='external nofollow' ><i class='bullhorn icon'></i> Level-1-3</a></div></div> </div></div> </div> <!-- sec:authorize='hasRole(’vip2’) 永擁有vip2權(quán)限的人才能看到 --> <div sec:authorize='hasRole(’vip2’)'><div class='ui raised segment'> <div class='ui'><div class='content'> <h5 class='content'>Level 2</h5> <hr> <div><a th:href='http://www.leifengta.com.cn/bcjs/@{/level2/1}' rel='external nofollow' ><i class='bullhorn icon'></i> Level-2-1</a></div> <div><a th:href='http://www.leifengta.com.cn/bcjs/@{/level2/2}' rel='external nofollow' ><i class='bullhorn icon'></i> Level-2-2</a></div> <div><a th:href='http://www.leifengta.com.cn/bcjs/@{/level2/3}' rel='external nofollow' ><i class='bullhorn icon'></i> Level-2-3</a></div></div> </div></div> </div> <!-- sec:authorize='hasRole(’vip3’) 永擁有vip3權(quán)限的人才能看到 --> <div sec:authorize='hasRole(’vip3’)'><div class='ui raised segment'> <div class='ui'><div class='content'> <h5 class='content'>Level 3</h5> <hr> <div><a th:href='http://www.leifengta.com.cn/bcjs/@{/level3/1}' rel='external nofollow' ><i class='bullhorn icon'></i> Level-3-1</a></div> <div><a th:href='http://www.leifengta.com.cn/bcjs/@{/level3/2}' rel='external nofollow' ><i class='bullhorn icon'></i> Level-3-2</a></div> <div><a th:href='http://www.leifengta.com.cn/bcjs/@{/level3/3}' rel='external nofollow' ><i class='bullhorn icon'></i> Level-3-3</a></div></div> </div></div> </div></div> </div> </div><script th:src='http://www.leifengta.com.cn/bcjs/@{/js/jquery-3.1.1.min.js}'></script><script th:src='http://www.leifengta.com.cn/bcjs/@{/js/semantic.min.js}'></script></body></html>一些其他的小東西 如果你在測(cè)試TestController之前已經(jīng)提前把spring-boot-starter-security這個(gè)依賴導(dǎo)入，那么你請(qǐng)求首頁(yè)的時(shí)候，程序會(huì)自動(dòng)跳轉(zhuǎn)到登錄頁(yè)面，任何請(qǐng)求都會(huì)被攔截，停留在登錄頁(yè)面 如果用戶還沒(méi)有登錄，你只能看到首頁(yè)，你點(diǎn)擊首頁(yè)的任何界面的請(qǐng)求都會(huì)跳轉(zhuǎn)到默認(rèn)的登錄頁(yè)面。然后，你通過(guò)你認(rèn)證過(guò)的用戶進(jìn)行登錄，登錄成功后會(huì)返回你之前點(diǎn)擊的那個(gè)界面的請(qǐng)求。也就是說(shuō)，本來(lái)界面有一個(gè)/level1/1.html你點(diǎn)擊它，沒(méi)登錄，會(huì)直接跳轉(zhuǎn)到默認(rèn)的登錄界面，登陸成功后，會(huì)返回/level1/1.html，而不是返回首頁(yè)，這是默認(rèn)的 分析一下自定義登錄頁(yè)的實(shí)現(xiàn)
以上就是Spring Security的簡(jiǎn)單使用的詳細(xì)內(nèi)容，更多關(guān)于Spring Security的使用的資料請(qǐng)關(guān)注好吧啦網(wǎng)其它相關(guān)文章！
相關(guān)文章：
1. 詳解Android studio 動(dòng)態(tài)fragment的用法2. Android如何加載Base64編碼格式圖片3. 解決Android studio xml界面無(wú)法預(yù)覽問(wèn)題4. 圖文詳解vue中proto文件的函數(shù)調(diào)用5. 什么是python的自省6. Spring Boot和Thymeleaf整合結(jié)合JPA實(shí)現(xiàn)分頁(yè)效果(實(shí)例代碼)7. Vuex localStorage的具體使用8. php模擬實(shí)現(xiàn)斗地主發(fā)牌9. vue 使用localstorage實(shí)現(xiàn)面包屑的操作10. Vue封裝一個(gè)TodoList的案例與瀏覽器本地緩存的應(yīng)用實(shí)現(xiàn)
網(wǎng)公網(wǎng)安備