Spring Security权限认证管理

朱雀 2023-02-18 03:19 27阅读 0赞

针对项目的安全管理，Spring家族提供了安全框架Spring Security，它是一个基于Spring生态圈的，用于提供安全访问控制解决方案的框架。

Spring Security的安全管理有两个重要概念，分别是Authentication（认证）和Authorization（授权）。其中，认证即确认用户是否登录；授权即确定用户所拥有的功能权限。

## 第一章系统默认用户认证 ##

1.依赖

<dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
    </dependency>
    
    <dependency>
        <groupId>mysql</groupId>
        <artifactId>mysql-connector-java</artifactId>
        <version>5.1.46</version>
    </dependency>
    
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-jdbc</artifactId>
    </dependency>
    
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-thymeleaf</artifactId>
    </dependency>
    
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>
    
    <dependency>
        <groupId>org.mybatis.spring.boot</groupId>
        <artifactId>mybatis-spring-boot-starter</artifactId>
        <version>2.1.3</version>
    </dependency>
    
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-devtools</artifactId>
        <scope>runtime</scope>
        <optional>true</optional>
    </dependency>
    
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-configuration-processor</artifactId>
        <optional>true</optional>
    </dependency>
    
    <dependency>
        <groupId>org.projectlombok</groupId>
        <artifactId>lombok</artifactId>
        <optional>true</optional>
    </dependency>
    
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-test</artifactId>
        <scope>test</scope>
        <exclusions>
            <exclusion>
                <groupId>org.junit.vintage</groupId>
                <artifactId>junit-vintage-engine</artifactId>
            </exclusion>
        </exclusions>
    </dependency>
    
    <dependency>
        <groupId>org.springframework.security</groupId>
        <artifactId>spring-security-test</artifactId>
        <scope>test</scope>
    </dependency>

yml配置

spring:
      datasource:
        driver-class-name: com.mysql.jdbc.Driver
        url: jdbc:mysql:///yunhome?seUnicode=true;characterEncoding=UTF-8
        username: root
        password: root
      thymeleaf:
        cache: false

2.业务代码

@Controller
    public class IndexController {
        @RequestMapping("/index")
        public String index(){
            //跳转index.html
            return "index";
        }
    }

index.html

<!DOCTYPE html>
    <html lang="en" xmlns:th="http://www.thymeleaf.org">
    <head>
        <meta charset="UTF-8">
        <title>首页</title>
    </head>
    <body>
    <h3><a th:href="@{/admin}">访问后台</a></h3>
    <h3><a th:href="@{/front}">访问前台</a></h3>
    </body>
    </html>

工程结构图

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70][]

**3.启动访问**

运行启动类，控制台效果如下：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 1][]

打开浏览器访问：[http://localhost:8080/index][http_localhost_8080_index]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 2][]

**说明**

在Spring Boot项目中加入spring-boot-starter-security依赖启动器后，Security会 默认提供一个可登录的用户信息，其中用户名为user，密码随机生成，这个密码会随着项目 的每次启动随机生成并打印在控制台上。

输入用户名user和登陆密码

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 3][]

登录成功后，才会进入一开始访问的index.html页面

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 4][]

**第二章 自定义用户认证**

config包下创建一个配置类 SecurityConfig 继承 WebSecurityConfigurerAdapter 重写 configure(AuthenticationManagerBuilder auth) 方法 配置类上添加@EnableWebSecurity注解，开启安全管理功能，该注解中包含@Configuration

@EnableWebSecurity
    public class SecurityConfig extends WebSecurityConfigurerAdapter {
        @Override//重写认证方法
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
           //1.构建密码加密器
            BCryptPasswordEncoder encoder = new BCryptPasswordEncoder();
    	 //2.自定义两个用户信息（曹操，666，房东/大乔,123,租客）
            auth.inMemoryAuthentication().
                    passwordEncoder(encoder).//密码加密
                    withUser("曹操").
                    password(encoder.encode("666")).
                    roles("房东").
                    and().//添加第二个用户
                    withUser("大乔").
                    password(encoder.encode("123")).
                    roles("租客");
        }
    }

**2、需求**

在index.html页面中，房东可以访问后台和前台，租客只能访问前台。

3、添加依赖

<dependency>
    	<groupId>org.thymeleaf.extras</groupId>
    	<artifactId>thymeleaf-extras-springsecurity5</artifactId>
    </dependency>

改造index.html

添加sec名称空间  xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-
    springsecurity5"

<!DOCTYPE html>
    <html lang="en" xmlns:th="http://www.thymeleaf.org"
          xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-springsecurity5">
    <head>
        <meta charset="UTF-8">
        <title>首页</title>
    </head>
    <body>
    
    <h3 sec:authorize="hasRole('房东')">
        <a th:href="@{/admin}">访问后台</a>
    </h3>
    <h3><a th:href="@{/front}">访问前台</a></h3>
    
    </body>
    </html>

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 5][]

登录成功之后

![20200615210936801.png][]

## **第三章jdbc用户认证** ##

表数据

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 6][]

** **

修改表数据

使用加密器对666和123加密：
    BCryptPasswordEncoder encoder = new BCryptPasswordEncoder();
    String p666 = encoder.encode("666");
    String p123 = encoder.encode("123");
    System.out.println(p666);
    System.out.println(p123);
    将控制台输出的密文替换数据库中的原始密码

把打印出的加密密码放在数据库

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 7][]

修改配置类

@EnableWebSecurity
    public class SecurityConfig extends WebSecurityConfigurerAdapter {
        
        @Autowired//注入dataSource
        private DataSource dataSource;
    
        @Override//重写认证方法
        protected void configure(AuthenticationManagerBuilder auth) throws Exception {
            BCryptPasswordEncoder encoder = new BCryptPasswordEncoder();
            String p666 = encoder.encode("666");
            String p123 = encoder.encode("123");
            System.out.println(p666);
            System.out.println(p123);
         
          //连接jdbc认证用户信息
            auth.jdbcAuthentication().passwordEncoder(encoder).
                    dataSource(dataSource).
                    usersByUsernameQuery("select name ,psw ,1 from h_users where name=?")
                   .authoritiesByUsernameQuery("select name  ,role  from h_users where name=?");
    
        }
    }

说明

方法usersByUsernameQuery(sql)
    	根据用户名去验证密码；默认查询语句为：
    	select username,password,enabled from users where username = ?
    	默认查询三个字段：用户名，密码，是否可用：1 为可用，0为不可用。
    方法authoritiesByUsernameQuery(sql)
    	根据用户名查询权限,默认sql为：
    	select username,authority from authorities where username = ?
    	默认查询两个字段：用户名，权限

测试效果：

使用曹操登录

![20200615212808384.png][]

使用貂蝉登录

![20200615212823155.png][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200615204041810.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200615205743340.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4,size_16,color_FFFFFF,t_70
[http_localhost_8080_index]: http://localhost:8080/index
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200615210022530.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200615210202958.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20200615210236954.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 5]: https://img-blog.csdnimg.cn/2020061521085230.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4,size_16,color_FFFFFF,t_70
[20200615210936801.png]: https://img-blog.csdnimg.cn/20200615210936801.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 6]: https://img-blog.csdnimg.cn/20200615211040114.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4_size_16_color_FFFFFF_t_70 7]: https://img-blog.csdnimg.cn/20200615211420621.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQxMjI0NjM4,size_16,color_FFFFFF,t_70
[20200615212808384.png]: https://img-blog.csdnimg.cn/20200615212808384.png
[20200615212823155.png]: https://img-blog.csdnimg.cn/20200615212823155.png