【腾讯云 Cloud Studio 实战训练营】使用Cloud Studio构建SpringSecurity权限框架

@ConfigurationProperties(prefix = "authentication")

@Component

public class Authentication {



    private String loginPage;

    private String loginProcessingUrl;

    private String username;

    private String password;

    private String[] staticPaths ;

public class Result {



    private Integer code;



    private String message;



    private Object data;

@Component("userService")

public class UserService implements UserDetailsService {

    Logger logger = LoggerFactory.getLogger(getClass());


    @Autowired

    PasswordEncoder passwordEncoder;



    @Override

    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {

        logger.info("输入的账号: " + username);

        if(!"CloudStudio".equalsIgnoreCase(username)) {

            throw new UsernameNotFoundException("用户名或密码错误");

        }

        String password = passwordEncoder.encode("1234");

        //模拟返回权限

        return new User(username, password, AuthorityUtils.commaSeparatedStringToAuthorityList("admin"));

    }

}

@Configuration

@EnableWebSecurity

public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {



    @Autowired

    UserDetailsService userDetailsService;



    @Autowired

    private AuthenticationSuccessHandler customAuthenticationSuccessHandler;



    @Autowired

    private AuthenticationFailureHandler customAuthenticationFailureHandler;



    @Autowired

    private Authentication authentication;



    @Bean

    public PasswordEncoder passwordEncoder() {

        return new BCryptPasswordEncoder();

    }

    @Override

    protected void configure(AuthenticationManagerBuilder auth) throws Exception {

        auth.userDetailsService(userDetailsService);

    }

    @Override

    protected void configure(HttpSecurity http) throws Exception {

        // 表单登录方式

        http.formLogin()

            .loginPage(authentication.getLoginPage())

            // 登录表单提交处理url, 默认是/login

            .loginProcessingUrl(authentication.getLoginProcessingUrl())

            //验证账号

            .usernameParameter(authentication.getUsername())

            //验证密码

            .passwordParameter(authentication.getPassword())

            //指定访问成功/失败的处理类

            .successHandler(customAuthenticationSuccessHandler)

            .failureHandler(customAuthenticationFailureHandler)

            .and()

            .authorizeRequests()

            ///login/page所有人都能访问，要不没法登录

            .antMatchers(authentication.getLoginPage()).permitAll()

            //其余接口必须验证用户才能访问

            .anyRequest().authenticated()

        ;

    }


    @Override

    public void configure(WebSecurity web){

        web.ignoring().antMatchers("/dist/\*\*", "/modules/\*\*", "/plugins/\*\*");

    }

}

@Component("customAuthenticationSuccessHandler")

public class CustomAuthenticationSuccessHandler implements AuthenticationSuccessHandler {



    @Override

    public void onAuthenticationSuccess(HttpServletRequest request,

        HttpServletResponse response, Authentication authentication) throws IOException, ServletException {

        // 认证成功后，响应JSON字符串

        Result result = Result.ok("认证成功");

        //此处指定返回对象为json，也可以改为返回值

        response.setContentType("application/json;charset=UTF-8");

        response.getWriter().write(result.toJsonString());

    }

}



@Component("customAuthenticationFailureHandler")

public class CustomAuthenticationFailureHandler implements AuthenticationFailureHandler {



    @Override

    public void onAuthenticationFailure(HttpServletRequest request,

            HttpServletResponse response, AuthenticationException exception) throws IOException, ServletException {

        // 认证失败响应JSON字符串，

        Result result = Result.build(HttpStatus.UNAUTHORIZED.value(), exception.getMessage());

        //此处指定返回对象为json，也可以改为返回值

        response.setContentType("application/json;charset=UTF-8");

        response.getWriter().write(result.toJsonString());

    }

}

server:

  port: 80

spring:

  thymeleaf:

    cache: false #关闭thymeleaf缓存

authentication:

  loginPage: /login/page

  loginProcessingUrl: /login/form # 登录表单提交处理的url

  username: name # 登录表单提交的用户名的属性名

  password: pwd  # 登录表单提交的密码的属性名

  staticPaths: # 静态页面放弃拦截

  - /dist/\*\*

  - /modules/\*\*

  - /plugins/\*\*

@Controller

public class CustomLoginController {


    @RequestMapping("/login/page")

    public String toLogin() {

        return "login";

    }

}



@Controller

public class MainController {



    @RequestMapping({"/index", "/", ""})

    public String index() {

        return "index";

    }

}