Spring Security UserDetail

女爷i 2022-11-06 12:52 8阅读 0赞

userdetail接口

public interface UserDetails extends Serializable { 
        Collection<? extends GrantedAuthority> getAuthorities();//用户的权限集， 默认需要添加ROLE_ 前缀
        String getPassword();//用户的加密后的密码， 不加密会使用{noop}前缀
        String getUsername();//应用内唯一的用户名
        boolean isAccountNonExpired();//账户是否过期
        boolean isAccountNonLocked();//账户是否锁定
        boolean isCredentialsNonExpired();//凭证是否过期
        boolean isEnabled();//用户是否可用
    }

`org.springframework.security.core.userdetails.User`是官方的实现类,可以直接用

public User(String username, String password, Collection<? extends GrantedAuthority> authorities) { 
            this(username, password, true, true, true, true, authorities);
        }
    
        public User(String username, String password, boolean enabled, boolean accountNonExpired, boolean credentialsNonExpired, boolean accountNonLocked, Collection<? extends GrantedAuthority> authorities) { 
            if (username != null && !"".equals(username) && password != null) { 
                this.username = username;
                this.password = password;
                this.enabled = enabled;
                this.accountNonExpired = accountNonExpired;
                this.credentialsNonExpired = credentialsNonExpired;
                this.accountNonLocked = accountNonLocked;
                this.authorities = Collections.unmodifiableSet(sortAuthorities(authorities));
            } else { 
                throw new IllegalArgumentException("Cannot pass null or empty values to constructor");
            }
        }

可以看到第一个构造函数使用`this`调用第二个构造函数,来实现了默认参数.  
username,password,authorities是必填的

另外user也实现了`builder`的设计模式,可以使用链式调用

参考:  
https://segmentfault.com/a/1190000020628228?utm\_source=tag-newest