StackFlow 之升级 Spring Boot V2.1.0(GA)

系统管理员 2022-04-16 02:10 232阅读 0赞

## 前言 ##

先来补一下SpringBoot V2.1.0(GA)的新特点：[Spring Boot 2.0正式发布][Spring Boot 2.0]  
升级项目使用的SpringBoot版本遇到的坑：

*  [WebMvcConfigurerAdapter][]
 *  [SpringBoot V2+ Security Authentication][SpringBoot V2_ Security Authentication]
    
     *  异常问题描述：  
        在使用SpringBoot V2.1.0(GA)版本时使用Spring Security 对Eureka Server 做Authentication(身份认证)，Eureka server 启动后，通过填写表达之后时会出现如下问题：  
        ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTI0Mzc3ODE_size_16_color_FFFFFF_t_70]
        
            java.lang.NullPointerException: null
            	at org.springframework.security.provisioning.InMemoryUserDetailsManager.updatePassword(InMemoryUserDetailsManager.java:147) ~[spring-security-core-5.1.1.RELEASE.jar:5.1.1.RELEASE]
            	at org.springframework.security.authentication.dao.DaoAuthenticationProvider.createSuccessAuthentication(DaoAuthenticationProvider.java:135) ~[spring-security-core-5.1.1.RELEASE.jar:5.1.1.RELEASE]
            	at org.springframework.security.authentication.dao.AbstractUserDetailsAuthenticationProvider.authenticate(AbstractUserDetailsAuthenticationProvider.java:197) ~[spring-security-core-5.1.1.RELEASE.jar:5.1.1.RELEASE]
            	at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:174) ~[spring-security-core-5.1.1.RELEASE.jar:5.1.1.RELEASE]
            	at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:199) ~[spring-security-core-5.1.1.RELEASE.jar:5.1.1.RELEASE]
            	at org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilterInternal(BasicAuthenticationFilter.java:180) ~[spring-security-web-5.1.1.RELEASE.jar:5.1.1.RELEASE]
            	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) ~[spring-web-5.1.2.RELEASE.jar:5.1.2.RELEASE]
            	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) ~[spring-security-web-5.1.1.RELEASE.jar:5.1.1.RELEASE]
            	at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116) ~[spring-security-web-5.1.1.RELEASE.jar:5.1.1.RELEASE]
     *  异常原因：  
        SpringBoot V2.1.0(GA)版本要求我们在需要Spring Security 做身份认证的服务节点上提供一个PasswordEncoder(密码解码器)。在V2.1.0之前(之前我用过V2.0.6未出现过该问题所以归结为V2.1.0(GA)的新特性)Spring Security 会通过spring.security.basic. \* 和spring.security.user. \*来自动获取配置中的相关配置，生成一个PasswordEncoder。在V2.1.0之后，Spring Security 不在为我们生成PasswordEncoder，从而要求我们自己实现一个PasswordEncoder来做authentication的golden data。
     *  解决方法：
        
         *  自定义PasswordEncoder实现Authentication初始化
            
                import org.springframework.security.crypto.password.PasswordEncoder;
                
                /**
                 * 自定义 PasswordEncoder
                 * @author Dustyone
                 *
                 */
                public class SecurityPasswordEncoder implements PasswordEncoder {
                
                	@Override
                	public String encode(CharSequence params) {
                		return params.toString();
                	}
                
                	@Override
                	public boolean matches(CharSequence sequence, String param) {
                		return param.equals(sequence.toString());
                	}
                
                }
            
                import org.springframework.context.annotation.Configuration;
                import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
                import org.springframework.security.config.annotation.web.builders.HttpSecurity;
                import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
                import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
                import org.springframework.security.config.http.SessionCreationPolicy;
                
                @Configuration
                @EnableWebSecurity
                public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                
                	/**
                	 * 高版本的丢弃了
                	 * security: basic: enabled: true
                	 * 配置，应该使用以下方式开启
                	 * @param http
                	 * @throws Exception
                	 */
                	@Override
                	protected void configure(HttpSecurity http) throws Exception {
                		// Configure HttpSecurity as needed (e.g. enable http basic).
                		http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.NEVER);
                		http.csrf().disable();
                		// 注意：为了可以使用 http://${user}:${password}@${host}:${port}/eureka/
                		// 这种方式登录,所以必须是httpBasic,
                		// 如果是form方式,不能使用url格式登录
                		http.authorizeRequests().anyRequest().authenticated().and().httpBasic();
                	}
                	
                	/**
                	 * 使用自顶的PasswordEncoder完成Authentication初始化校验
                	 * userName:Dustyone-->Mandatory 
                	 * password:bai5331359 -->Mandatory
                	 * role:USER -->Optional
                	 */
                	@Override
                	protected void configure(AuthenticationManagerBuilder auth) throws Exception {
                
                		auth.inMemoryAuthentication().passwordEncoder(new SecurityPasswordEncoder())// 在此处应用自定义PasswordEncoder
                				.withUser("Dustyone").password("bai5331359").roles("USER");
                	}
                
                }

[Spring Boot 2.0]: https://blog.csdn.net/j3T9Z7H/article/details/79417470
[WebMvcConfigurerAdapter]: https://blog.csdn.net/qq_35299712/article/details/80061532
[SpringBoot V2_ Security Authentication]: https://www.programcreek.com/java-api-examples/index.php?api=org.springframework.security.provisioning.InMemoryUserDetailsManager
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTI0Mzc3ODE_size_16_color_FFFFFF_t_70]: /images/20220416/83a1b43036324e2c9ea3aaa0d06752af.png