Spring Security-Web项目设置权限

Web 项目设置权限

设置登录的用户名和密码

第一种方式:通过配置文件

第二种方式:通过配置类

第三种方式:自定义编写实现类UserDetailsService接口

通过配置文件

在application.yaml 中 增加 用户名为 ly 密码为 abc

?spring:
?  security:
? ?  user:
? ? ?  name: ly
? ? ?  password: abc

重启, 发现 控制台没有默认密码了, 按照配置 输入用户名密码即可 显示

通过配置类

注释调 之前在 application.yaml 中配置的 security的用户名及密码

(如果 出现 There is no PasswordEncoder mapped for the id "null" 记得 注入 PasswordEncoder )

?

package com.config;
??
?import org.springframework.context.annotation.Bean;
?import org.springframework.context.annotation.Configuration;
?import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
?import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
?import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
?import org.springframework.security.crypto.password.PasswordEncoder;
??
?@Configuration ? ?//配置类
?public class SecurityConfig extends WebSecurityConfigurerAdapter {
? ? ?
? ? ?@Override
? ? ?protected void configure(AuthenticationManagerBuilder auth) throws Exception {
? ? ? ? ?BCryptPasswordEncoder bCryptPasswordEncoder = new BCryptPasswordEncoder();
? ? ? ? ?String password = bCryptPasswordEncoder.encode("123");
? ? ? ? ?auth.inMemoryAuthentication().withUser("abc").password(password).roles("admin");
? ?  }
? ? ?//注入bean 否则报错 There is no PasswordEncoder mapped for the id "null"
? ? ?@Bean
? ? ?PasswordEncoder passwordEncoder(){
? ? ? ? ?return new BCryptPasswordEncoder(); ?
? ?  }
?}

启动 运行, 用户名 abc 密码 123 即可看到页面

自定义编写实现类 (查询数据库)

第一步 创建配置类 设置使用哪个UserDetailsService实现类

第二步 编写 UserDetailsService实现类 返回User对象 有用户名及密码 及权限

创建配置类

?package com.config;
??
?import org.springframework.beans.factory.annotation.Autowired;
?import org.springframework.context.annotation.Bean;
?import org.springframework.context.annotation.Configuration;
?import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
?import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
?import org.springframework.security.core.userdetails.UserDetailsService;
?import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
?import org.springframework.security.crypto.password.PasswordEncoder;
??
?@Configuration ? ?//配置类
?public class SecurityConfig extends WebSecurityConfigurerAdapter {
??
? ? ?@Autowired
? ? ?UserDetailsService userDetailsService;
??
??
? ? ?@Override
? ? ?protected void configure(AuthenticationManagerBuilder auth) throws Exception {
? ? ? ? auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder());
? ?  }
? ? ?@Bean
? ? ?PasswordEncoder passwordEncoder(){
? ? ? ? ?return new BCryptPasswordEncoder();
? ?  }
?}

创建接口实现类

?package com.service;
??
?import org.springframework.security.core.GrantedAuthority;
?import org.springframework.security.core.authority.AuthorityUtils;
?import org.springframework.security.core.userdetails.User;
?import org.springframework.security.core.userdetails.UserDetails;
?import org.springframework.security.core.userdetails.UserDetailsService;
?import org.springframework.security.core.userdetails.UsernameNotFoundException;
?import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
?import org.springframework.stereotype.Service;
??
?import java.util.List;
??
?@Service("userDetailsService")
?public class MyUserDetailsService implements UserDetailsService {
? ? ?@Override
? ? ?public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
??
? ? ? ? ?List<GrantedAuthority> list = AuthorityUtils.commaSeparatedStringToAuthorityList("admin");
? ? ? ? ?return new User("lisi",new BCryptPasswordEncoder().encode("lisi"),list);
? ?  }
?}

启动项目 用户名 lisi 密码 lisi 即可看到页面