SpringSecurity中web权限方案认证(查询数据库认证)

不念不忘少年蓝@ 2022-10-07 11:45 241阅读 0赞

### SpringSecurity中web权限方案认证 ###

*  1、引入依赖
 *  2、创建数据库和数据库表
 *  3、创建users表对应的实体类
 *  4、整合mapper,创建接口，继承BaseMapper接口
 *  5、在MyUserDetailsService调用mapper里面的方法查询数据库进行用户认证
 *  6、在启动类添加注解MapperScan
 *  7、配置数据库信息
 *  8、测试用的controller
 *  9、以debug方式启动项目
 *  10 正常运行项目

# 1、引入依赖 #

引入lombok、mybatis-plus、springsecurity、mysql相关依赖

<dependencies>
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter</artifactId>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-web</artifactId>
    		</dependency>
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-security</artifactId>
    		</dependency>
    
    		
    		<dependency>
    			<groupId>com.baomidou</groupId>
    			<artifactId>mybatis-plus-boot-starter</artifactId>
    			<version>3.0.5</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>mysql</groupId>
    			<artifactId>mysql-connector-java</artifactId>
    			<version>8.0.18</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.projectlombok</groupId>
    			<artifactId>lombok</artifactId>
    		</dependency>
    
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-test</artifactId>
    			<scope>test</scope>
    		</dependency>
    	</dependencies>

# 2、创建数据库和数据库表 #

就一张users表  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70]  
![在这里插入图片描述][20210617214842231.png]

# 3、创建users表对应的实体类 #

package com.atguigu.springsecuritydemo1.entity;
    
    import lombok.Data;
    
    @Data
    public class Users { 
        private int id;
        private String username;
        private String password;
    }

# 4、整合mapper,创建接口，继承BaseMapper接口 #

package com.atguigu.springsecuritydemo1.mapper;
    
    import com.atguigu.springsecuritydemo1.entity.Users;
    import com.baomidou.mybatisplus.core.mapper.BaseMapper;
    import org.apache.ibatis.annotations.Mapper;
    import org.springframework.stereotype.Repository;
    
    @Repository
    public interface UsersMapper extends BaseMapper<Users> { 
    
    }

# 5、在MyUserDetailsService调用mapper里面的方法查询数据库进行用户认证 #

package com.atguigu.springsecuritydemo1.service;
    
    import com.atguigu.springsecuritydemo1.entity.Users;
    import com.atguigu.springsecuritydemo1.mapper.UsersMapper;
    import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.security.core.GrantedAuthority;
    import org.springframework.security.core.authority.AuthorityUtils;
    import org.springframework.security.core.userdetails.User;
    import org.springframework.security.core.userdetails.UserDetails;
    import org.springframework.security.core.userdetails.UserDetailsService;
    import org.springframework.security.core.userdetails.UsernameNotFoundException;
    import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
    import org.springframework.stereotype.Service;
    
    import java.util.List;
    
    @Service("userDetailsService")
    public class MyUserDetailService implements UserDetailsService { 
    
        @Autowired
        private UsersMapper usersMapper;
    
        @Override
        public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { 
    
            //调用userMapper中的方法，根据用户名查询数据库
            QueryWrapper<Users> wrapper=new QueryWrapper<>();//条件构造器
            //where username=?
            wrapper.eq("username",username);
            Users users= usersMapper.selectOne(wrapper);
            //判断
            if(users==null){     //数据库没有用户名，认证失败
                throw new UsernameNotFoundException("用户名不存在！");
            }
    
            List<GrantedAuthority> auths= AuthorityUtils.commaSeparatedStringToAuthorityList("role");
            //从查询数据库返回user对象，得到用户名和密码，返回
            return new User(users.getUsername(),new BCryptPasswordEncoder().encode(users.getPassword()),auths);
        }
    
    
    }

# 6、在启动类添加注解MapperScan #

注解后面括号的内容是mapper包的路径

package com.atguigu.springsecuritydemo1;
    
    import org.mybatis.spring.annotation.MapperScan;
    import org.springframework.boot.SpringApplication;
    import org.springframework.boot.autoconfigure.SpringBootApplication;
    
    @SpringBootApplication
    @MapperScan("com.atguigu.springsecuritydemo1.mapper")
    public class Springsecuritydemo1Application { 
    
        public static void main(String[] args) { 
            SpringApplication.run(Springsecuritydemo1Application.class, args);
        }
    
    }

# 7、配置数据库信息 #

这里每个人不一样，看着改下

server.port=8111
    #通过配置文件设置用户名和密码
    #数据库连接配置
    spring.datasource.driver-class-name=com.mysql.cj.jdbc.Driver
    spring.datasource.url=jdbc:mysql://localhost:3306/demo?&useSSL=false&serverTimezone=UTC&allowPublicKeyRetrieval=true
    spring.datasource.username=root
    spring.datasource.password=123456

# 8、测试用的controller #

package com.atguigu.springsecuritydemo1.controller;
    
    import org.springframework.web.bind.annotation.GetMapping;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.RestController;
    
    @RestController
    @RequestMapping("/test")
    public class TestController { 
    
        @GetMapping("hello")
        public String add(){ 
            return "hello security";
        }
    
    }

# 9、以debug方式启动项目 #

断点的位置如下：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 1]  
访问：`http://localhost:8111/test/hello`  
结果重定向到：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 2]  
我们先随便输入一个数据库中不存在的用户名和密码，查看debug窗口：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 3]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 4]  
可以看到控制台的users对象为空，说明数据库中没有该用户  
然后输入一个数据库中存在的，username=lucy,password=123  
然后再查看debug控制台：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 5]  
可以看到users对象不为空，数据库中确实存在该用户

# 10 正常运行项目 #

访问`http://localhost:8111/test/hello`，输入lucy 123  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 6]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 7]  
可以看到，controller层确实返回了数据。

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70]: /images/20221005/f8244f3697234417b416d061d78e10f5.png
[20210617214842231.png]: /images/20221005/ec7111fb85d14d59a4a4f748fe842b11.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 1]: /images/20221005/909b10c2f2f448b58578952c708c2051.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 2]: /images/20221005/b09278467c3445f1952e0a20f9f927e8.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 3]: /images/20221005/03a2ba072dfb493a8122c52f5cad4a9e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 4]: /images/20221005/b858a54cd8c0461a98f00cc8fe61cb14.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 5]: /images/20221005/db0fdee074ff4f5fb22e6ba37d957840.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 6]: /images/20221005/147ce654ff054da498e34e939fdf0c20.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQzNzUzNzI0_size_16_color_FFFFFF_t_70 7]: /images/20221005/84fe6ed2ee1e47f9b9b5ef8cd0c445f7.png