springSecurity 学习（二）表单认证

心已赠人 2023-01-02 02:26 213阅读 0赞

新建 MyWebSecurityConfig 类  继承 WebSecurityConfigurerAdapter  ，再给MyWebSecurityConfig 类上加注解 @EnableWebSecurity，重写config方法

### 1、默认表单验证  ###

上述代码申明安全特性

1、验证所有请求

2、允许用户用表单进行身份验证(提供了简单的表单登录页）

3、允许用户进行HTTPBasic认证

### 2、自定义表单登录页 ###

myLogin.html页面放置在  resources/static/ 下

请求成功后页面返回原请求页

### 3、请求成功后返回指定的数据给前端 ###

@EnableWebSecurity
    public class MyWebSecurityConfig extends WebSecurityConfigurerAdapter {
        @Override
        protected void configure(HttpSecurity http) throws Exception {
            http.authorizeRequests()
                        .anyRequest().authenticated()
                        .and()
                    .formLogin()
                        //登录页面地址
                        .loginPage("myLogin.html")
                        //登录请求的url
                        .loginProcessingUrl("login")
                    .successHandler(new AuthenticationSuccessHandler() {
                        @Override
                        public void onAuthenticationSuccess(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Authentication authentication) throws IOException, ServletException {
                            httpServletResponse.setContentType("application/json;charset=UTF-8");
                            PrintWriter writer = httpServletResponse.getWriter();
                            HashMap<String, Object> map = new HashMap<>();
                            map.put("code","success");
    
                            writer.write(new ObjectMapper().writeValueAsString(map));
                        }
                    })
                        //所有用户可以访问登录
                        .permitAll()
                        .and()
                    //关闭跨站请求防护功能
                    .csrf().disable();
        }
    }