SpringSecurity的简单案例

男娘i 2022-10-13 01:57 209阅读 0赞

创建一个项目只需要加入security和web的依赖：

<dependencies>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter</artifactId>
            </dependency>
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-web</artifactId>
                <version>2.5.0</version>
            </dependency>
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-security</artifactId>
                <version>2.2.13.RELEASE</version>
            </dependency>
    
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-test</artifactId>
                <scope>test</scope>
            </dependency>
        </dependencies>

之后再创建两个包，一个是security的配置文件的，一个是controller的，  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQ0NzM5NzA2_size_16_color_FFFFFF_t_70]  
securityConfig的类：

package com.thunder.config;
    
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    
    /** * @author HuiXing */
    public class SecurityConfig extends WebSecurityConfigurerAdapter { 
    
        @Override
        protected void configure(HttpSecurity http) throws Exception { 
            http.formLogin()//单表登陆
                    .and()
                    .authorizeRequests() //认证配置
                    .anyRequest()       //任何请求
                    .authenticated();   //都需要身份认证
        }
    }

controller层的类：

package com.thunder.controller;
    
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.RestController;
    
    /** * @author HuiXing */
    @RestController
    @RequestMapping("test")
    public class TestController { 
    
        @RequestMapping("hello")
        public String test(){ 
    
            return "hello security!";
        }
    }

接着就可以运行项目访问了，当你使用localhost:8080/test/hello地址访问controller层的方法的时候，你会发现：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQ0NzM5NzA2_size_16_color_FFFFFF_t_70 1]  
需要进行认证才可以进行访问，进行认证的默认用户名是user，密码是随机的，打印在控制台输出：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQ0NzM5NzA2_size_16_color_FFFFFF_t_70 2]  
输出了正确的用户名和密码之后才可以访问成功：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQ0NzM5NzA2_size_16_color_FFFFFF_t_70 3]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQ0NzM5NzA2_size_16_color_FFFFFF_t_70]: /images/20221005/c8938e54a1fa4fa7abab6a7b114440ba.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQ0NzM5NzA2_size_16_color_FFFFFF_t_70 1]: /images/20221005/c6f5b99f78c742b3827ca569c73b9c26.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQ0NzM5NzA2_size_16_color_FFFFFF_t_70 2]: /images/20221005/a07ce614919c4140af7ee961891d07a9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQ0NzM5NzA2_size_16_color_FFFFFF_t_70 3]: /images/20221005/bf4fd1f9e2e04e69abe8376527407773.png