SpringSecurity 提示：There is no PasswordEncoder mapped for the id "null"

曾经终败给现在 2023-10-18 20:49 65阅读 0赞

SpringBoot 集成 SpringSecurity pom.xml 文件如下：

<project xmlns="http://maven.apache.org/POM/4.0.0"
    	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    	<modelVersion>4.0.0</modelVersion>
    	<groupId>com.zzg</groupId>
    	<artifactId>boot-spring-security</artifactId>
    	<version>0.0.1-SNAPSHOT</version>
    	<packaging>pom</packaging>
    
    	<parent>
    		<groupId>org.springframework.boot</groupId>
    		<artifactId>spring-boot-starter-parent</artifactId>
    		<version>2.1.2.RELEASE</version>
    	</parent>
    
    	<properties>
    		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    		<encoding>UTF-8</encoding>
    		<java.version>1.8</java.version>
    		<maven.compiler.source>1.8</maven.compiler.source>
    		<maven.compiler.target>1.8</maven.compiler.target>
    	</properties>
    
    	<dependencies>
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-web</artifactId>
    		</dependency>
    		
    		<dependency>
    			<groupId>org.springframework.boot</groupId>
    			<artifactId>spring-boot-starter-test</artifactId>
    			<scope>test</scope>
    		</dependency>
    		
    		<dependency>
    			<groupId>commons-lang</groupId>
    			<artifactId>commons-lang</artifactId>
    			<version>2.6</version>
    		</dependency>
    		
    		<dependency>
    			<groupId>commons-codec</groupId>
    			<artifactId>commons-codec</artifactId>
    			<version>1.10</version>
    		</dependency>
    		
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-security</artifactId>
            </dependency>
            
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-starter-thymeleaf</artifactId>
            </dependency>
    
    	</dependencies>
    	<modules>
    		<module>boot-spring-security-api</module>
    		<module>boot-spring-security-dao</module>
    		<module>boot-spring-security-contrller</module>
    	</modules>
    </project>

springboot 项目截图:

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pob3V6aGl3ZW5nYW5n_size_16_color_FFFFFF_t_70][]

相关源码展示:

Application.java

package com.zzg;
    
    import org.springframework.boot.SpringApplication;
    import org.springframework.boot.autoconfigure.SpringBootApplication;
    
    @SpringBootApplication
    public class Application {
    
    	public static void main(String[] args) {
    		// TODO Auto-generated method stub
    		SpringApplication.run(Application.class, args);
    	}
    
    }

SecurityController.java

package com.zzg.controller;
    
    import org.springframework.stereotype.Controller;
    import org.springframework.web.bind.annotation.RequestMapping;
    
    @Controller
    public class SecurityController {
    	@RequestMapping("/")
    	public String index() {
    	    return "index";
    	}
    
    	@RequestMapping("/hello")
    	public String hello() {
    	    return "hello";
    	}
    
    	@RequestMapping("/login")
    	public String login() {
    	    return "login";
    	}
    
    
    }

WebSecurityConfig.java

package com.zzg.security.config;
    
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    
    import com.zzg.security.encryption.UnEncryptedPasswordEncoder;
    
    @Configuration
    @EnableWebSecurity
    public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
    
    	/**
    	 *认证管理器构建
    	 */
    	@Override
    	protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    		// TODO Auto-generated method stub
    		 auth
             .inMemoryAuthentication()
                 .withUser("user").password("password").roles("USER")
                 .and()
                 .passwordEncoder(new UnEncryptedPasswordEncoder());
    	}
    
    	/**
    	 * Http请求访问权限控制
    	 */
    	@Override
    	protected void configure(HttpSecurity http) throws Exception {
    		// TODO Auto-generated method stub
    		 http
             .authorizeRequests()
                 .antMatchers("/", "/hello").permitAll()
                 .anyRequest().authenticated()
                 .and()
             .formLogin()
                 .loginPage("/login")
                 .permitAll()
                 .and()
             .logout()
                 .permitAll();
    	}
    	
    
    }

UnEncryptedPasswordEncoder.java

package com.zzg.security.encryption;
    
    import org.springframework.security.crypto.password.PasswordEncoder;
    /**
     * 自定义加密工具类
     * @author Administrator
     *
     */
    public class UnEncryptedPasswordEncoder implements PasswordEncoder {
    	// 返回加密字符串
    	@Override
    	public String encode(CharSequence charSequence) {
    		// TODO Auto-generated method stub
    		return charSequence.toString();
    	}
    	// 判断加密字符串是否相等
    	@Override
    	public boolean matches(CharSequence charSequence, String encodedPassword) {
    		// TODO Auto-generated method stub
    		return encodedPassword.equals(charSequence.toString());
    	}
    
    }

hello.html

<!DOCTYPE html>
    <html xmlns="http://www.w3.org/1999/xhtml" xmlns:th="http://www.thymeleaf.org"
          xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-springsecurity3">
        <head>
            <title>Hello World!</title>
        </head>
        <body>
            <h1 th:inline="text">Hello [[${#httpServletRequest.remoteUser}]]!</h1>
            <form th:action="@{/logout}" method="post">
                <input type="submit" value="Sign Out"/>
            </form>
        </body>
    </html>

index.html

<!DOCTYPE html>
    <html>
    <head>
    <meta charset="UTF-8"/>
    <title>Security</title>
    </head>
    <body>
            <h1>Spring Security!</h1>
            <p>点击<a th:href="@{/hello}">这里</a>到碗里来！</p>
    </body>
    </html>

<!DOCTYPE html>
    <html xmlns="http://www.w3.org/1999/xhtml" xmlns:th="http://www.thymeleaf.org"
          xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-springsecurity3">
        <head>
            <title>Spring Security 实例教程一 </title>
        </head>
        <body>
            <div th:if="${param.error}">
                Invalid username and password.
            </div>
            <div th:if="${param.logout}">
                You have been logged out.
            </div>
            <form th:action="@{/login}" method="post">
                <div><label> User Name : <input type="text" name="username"/> </label></div>
                <div><label> Password: <input type="password" name="password"/> </label></div>
                <div><input type="submit" value="Sign In"/></div>
            </form>
        </body>
    </html>

application.properties

# thymelef setting
    thymeleaf.cache=false

程序的演示效果，拷贝以上代码，在本地执行即可。

遇到的问题：没有写自定义加密工具类（UnEncryptedPasswordEncoder），提示如下错误信息：There is no PasswordEncoder mapped for the id "null"

通过查询sprinsecurity api 文档（[https://docs.spring.io/spring-security/site/docs/5.2.0.BUILD-SNAPSHOT/reference/htmlsingle/\#core-services-password-encoding][https_docs.spring.io_spring-security_site_docs_5.2.0.BUILD-SNAPSHOT_reference_htmlsingle_core-services-password-encoding]），如下截图所示：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pob3V6aGl3ZW5nYW5n_size_16_color_FFFFFF_t_70 1][]

大致意思如下：从springsecurity5.0.x 版本开始，用户密码的规则格式=\{加密ID\}加密字段，因此在我们刚刚在内存中配置的默认用户信息没有配置springsecurity加密实例化对象,导致报错的缘故。

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pob3V6aGl3ZW5nYW5n_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20190702005545157.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pob3V6aGl3ZW5nYW5n,size_16,color_FFFFFF,t_70
[https_docs.spring.io_spring-security_site_docs_5.2.0.BUILD-SNAPSHOT_reference_htmlsingle_core-services-password-encoding]: https://docs.spring.io/spring-security/site/docs/5.2.0.BUILD-SNAPSHOT/reference/htmlsingle/#core-services-password-encoding
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pob3V6aGl3ZW5nYW5n_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/2019070201130797.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3pob3V6aGl3ZW5nYW5n,size_16,color_FFFFFF,t_70