(九)、SpringBoot + Security RememberMe(记住我)功能

男娘i 2022-05-29 06:20 273阅读 0赞

可以前往第一篇博客查看目录结构 --> [这里][Link 1]

一、修改application.properties文件，添加数据库配置

spring.datasource.driver-class-name=com.mysql.jdbc.Driver
    spring.datasource.url=jdbc:mysql://127.0.0.1:3306/zeke-demo
    spring.datasource.username=root
    spring.datasource.password=

二、修改zeke-login.html，添加记住我勾选框

三、在BrowserProperties类中添加 rememberMeSeconds属性和对应的getter、setter方法

private int rememberMeSeconds = 3600;

四、修改BrowserSecurityConfig，注入一个Bean

@Autowired
        private DataSource dataSource;
    
        /**
         * 记住我功能
         * @return
         */
        @Bean
        public PersistentTokenRepository persistentTokenRepository(){
            JdbcTokenRepositoryImpl jdbcTokenRepository = new JdbcTokenRepositoryImpl();
            jdbcTokenRepository.setDataSource(dataSource);
            //自动创建数据库表，使用一次后注释掉，不然会报错
    //        jdbcTokenRepository.setCreateTableOnStartup(true);
            return jdbcTokenRepository;
        }

五、修改configure(HttpSecurity http)方法

@Override
        protected void configure(HttpSecurity http) throws Exception {
            ValidateCodeFilter validateCodeFilter = new ValidateCodeFilter();
            validateCodeFilter.setAuthenticationFailureHandler(zekeAuthenticationFailureHandler);
            validateCodeFilter.setSecurityProperties(securityProperties);
            validateCodeFilter.afterPropertiesSet();
    
            http.csrf().disable();
            http.addFilterBefore(validateCodeFilter, UsernamePasswordAuthenticationFilter.class);
            http.formLogin() //表单登录
                    .loginPage("/authentication/require") //用户未登录时的处理地址
                    .loginProcessingUrl("/authentication/form") //用户登录
                    .successHandler(zekeAuthenticationSuccessHandler) //登录成功处理
                    .failureHandler(zekeAuthenticationFailureHandler) //登录失败处理
                    .and()
                    .rememberMe()
                    .tokenRepository(persistentTokenRepository())
                    .tokenValiditySeconds(securityProperties.getBrowser().getRememberMeSeconds())
                    .userDetailsService(userDetailsService)
                    .and()
                    .authorizeRequests()
                    .antMatchers("/authentication/require",
                            securityProperties.getBrowser().getLoginPage(),
                            "/code/image") //不拦截的URL
                    .permitAll()
                    .anyRequest()
                    .authenticated();
        }

六、启动服务，访问localhost/zeke-login.html，勾选记住我测试

[Link 1]: http://blog.csdn.net/zeketao/article/details/79522968