2.SpringSecurity - 处理器简单说明

矫情吗；* 2024-02-21 09:16 54阅读 0赞

#### 文章目录 ####

*  SpringSecurity 返回json
 *  一、登录成功处理器
 *   *  1.1 统一响应类HttpResult
     *  1.2 登录成功处理器
     *  1.3 配置登录成功处理器
     *  1.4 登录
 *  二、登录失败处理器
 *   *  2.1 登录失败处理器
     *  2.2 配置登录失败处理器
     *  2.3 登录
 *  三、退出成功处理器
 *   *  3.1 退出成功处理器
     *  3.2 配置退出成功处理器
     *  3.3 退出
 *  四、访问拒绝（无权限）处理器
 *   *  4.1 访问拒绝处理器
     *  4.2 配置访问拒绝处理器
     *  4.3 被拒绝
 *  五、自定义处理器

## SpringSecurity 返回json ##

> 承接：[1.SpringSecurity -快速入门、加密、基础授权-CSDN博客][1.SpringSecurity -_-CSDN]

## 一、登录成功处理器 ##

前后端分离成为企业应用开发中的主流，前后端分离通过json进行交互，登录成功和失败后不用页面跳转，而是一段json提示

### 1.1 统一响应类HttpResult ###

@Data
    @AllArgsConstructor
    @NoArgsConstructor
    @Builder
    public class HttpResult {
        
        private Integer code;
        private String msg;
        private Object data;
        
        public HttpResult(Integer code, String msg) {
        
            this.code = code;
            this.msg = msg;
        }
    }

### 1.2 登录成功处理器 ###

/**
     * 认证成功就会调用该接口里的方法
     */
    @Component
    public class AppAuthenticationSuccessHandle implements AuthenticationSuccessHandler {
        
    
    //  JSON序列化器，进行序列化和反序列化
        @Resource
        private ObjectMapper objectMapper;;
    
        @Override
        public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException {
        
    //      定义返回对象httpResult
            HttpResult httpResult = HttpResult.builder()
                    .code(200)
                    .msg("登陆成功")
                    .build();
    
            String strResponse = objectMapper.writeValueAsString(httpResult);
    
    //      响应字符集
            response.setCharacterEncoding("UTF-8");
    //      响应内容类型JSON,字符集utf-8
            response.setContentType("application/json;charset=utf-8");
    //      响应给前端
            PrintWriter writer = response.getWriter();
            writer.println(strResponse);
            writer.flush();
        }
    }

### 1.3 配置登录成功处理器 ###

@Configuration
    public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
        
    
        @Resource
        private AppAuthenticationSuccessHandle appAuthenticationSuccessHandle;
    
        @Override
        protected void configure(HttpSecurity http) throws Exception {
        
    
            http.authorizeRequests()//授权http请求
                    .anyRequest() //任何请求
                    .authenticated();//都需要认证
    
            http.formLogin()
                    .successHandler(appAuthenticationSuccessHandle) //认证成功处理器
                    .permitAll();//允许表单登录
        }
     }

### 1.4 登录 ###

![image-20231016223324743][]

**登录成功后如下所示**

![image-20231016223344428][]

## 二、登录失败处理器 ##

### 2.1 登录失败处理器 ###

/**
     * 认证失败就会调用下面的方法
     */
    @Component
    public class AppAuthenticationFailHandle implements AuthenticationFailureHandler {
        
        //  JSON序列化器，进行序列化和反序列化
        @Resource
        private ObjectMapper objectMapper;;
    
        @Override
        public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response, AuthenticationException exception) throws IOException, ServletException {
        
            //      定义返回对象httpResult
            HttpResult httpResult = HttpResult.builder()
                    .code(401)
                    .msg("登录失败")
                    .build();
    
            String strResponse = objectMapper.writeValueAsString(httpResult);
    
    //      响应字符集
            response.setCharacterEncoding("UTF-8");
    //      响应内容类型JSON,字符集utf-8
            response.setContentType("application/json;charset=utf-8");
    //      响应给前端
            PrintWriter writer = response.getWriter();
            writer.println(strResponse);
            writer.flush();
        }
    }

### 2.2 配置登录失败处理器 ###

@Resource
    private AppAuthenticationFailHandle appAuthenticationFailHandle;
    
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        
    
        http.authorizeRequests()//授权http请求
                .anyRequest() //任何请求
                .authenticated();//都需要认证
    
        http.formLogin()
                .successHandler(appAuthenticationSuccessHandle) //认证成功处理器
                .failureHandler(appAuthenticationFailHandle) // 认证失败处理器
                .permitAll();//允许表单登录
    }

### 2.3 登录 ###

**输入一个错误的密码**

![image-20231016224805298][]

**如下图所示**

![image-20231016224824503][]

## 三、退出成功处理器 ##

### 3.1 退出成功处理器 ###

/**
     * 退出成功处理器
     */
    @Component
    public class AppLogoutSuccessHandle implements LogoutSuccessHandler{
        
        //  JSON序列化器，进行序列化和反序列化
        @Resource
        private ObjectMapper objectMapper;;
    
    
        @Override
        public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException {
        
    //      定义返回对象httpResult
            HttpResult httpResult = HttpResult.builder()
                    .code(200)
                    .msg("退出成功")
                    .build();
    
            String strResponse = objectMapper.writeValueAsString(httpResult);
    
    //      响应字符集
            response.setCharacterEncoding("UTF-8");
    //      响应内容类型JSON,字符集utf-8
            response.setContentType("application/json;charset=utf-8");
    //      响应给前端
            PrintWriter writer = response.getWriter();
            writer.println(strResponse);
            writer.flush();
        }
    }

### 3.2 配置退出成功处理器 ###

@Resource
    private AppLogoutSuccessHandle appLogoutSuccessHandle;
    
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        
    
        http.authorizeRequests()//授权http请求
                .anyRequest() //任何请求
                .authenticated();//都需要认证
    
        http.formLogin()
                .successHandler(appAuthenticationSuccessHandle) //认证成功处理器
                .failureHandler(appAuthenticationFailHandle) // 认证失败处理器
                .permitAll();//允许表单登录
    
        http.logout().logoutSuccessHandler(appLogoutSuccessHandle);//登录成功处理器
    }

### 3.3 退出 ###

![image-20231016231114408][]

## 四、访问拒绝（无权限）处理器 ##

### 4.1 访问拒绝处理器 ###

@Component
    public class AppAccessDenyHandle implements AccessDeniedHandler {
        
        //  JSON序列化器，进行序列化和反序列化
        @Resource
        private ObjectMapper objectMapper;;
    
        @Override
        public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException) throws IOException, ServletException {
        
            //      定义返回对象httpResult
            HttpResult httpResult = HttpResult.builder()
                    .code(403)
                    .msg("您没有权限访问该资源！！")
                    .build();
    
            String strResponse = objectMapper.writeValueAsString(httpResult);
    
    //      响应字符集
            response.setCharacterEncoding("UTF-8");
    //      响应内容类型JSON,字符集utf-8
            response.setContentType("application/json;charset=utf-8");
    //      响应给前端
            PrintWriter writer = response.getWriter();
            writer.println(strResponse);
            writer.flush();
        }
    }

### 4.2 配置访问拒绝处理器 ###

@Resource
    private AppAccessDenyHandle appAccessDenyHandle;
    
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        
    
        http.authorizeRequests()//授权http请求
                .anyRequest() //任何请求
                .authenticated();//都需要认证
    
        http.formLogin()
                .successHandler(appAuthenticationSuccessHandle) //认证成功处理器
                .failureHandler(appAuthenticationFailHandle) // 认证失败处理器
                .permitAll();//允许表单登录
    
        http.logout()
                .logoutSuccessHandler(appLogoutSuccessHandle);//登录成功处理器;
    
        http.exceptionHandling()//异常处理
                .accessDeniedHandler(appAccessDenyHandle);//访问被拒绝处理器
    }

### 4.3 被拒绝 ###

![image-20231016231313240][]

## 五、自定义处理器 ##

[SpringSecurity - 认证与授权、自定义失败处理、跨域问题、认证成功/失败处理器\_我爱布朗熊的博客-CSDN博客][SpringSecurity - _-CSDN]

[1.SpringSecurity -_-CSDN]: https://blog.csdn.net/weixin_51351637/article/details/133870484?spm=1001.2014.3001.5502
[image-20231016223324743]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/9a4e4481809e44ca9b0031039e52c4c0.png
[image-20231016223344428]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/377c3082cb2d4db09b1d993d96480a68.png
[image-20231016224805298]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/b5ef8a8844e14affaa7103f683d6c7bf.png
[image-20231016224824503]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/5bccce13c60b4cdb98ffcf4bd82f7da7.png
[image-20231016231114408]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/88ae608e79ef42e9a078be85b2119abb.png
[image-20231016231313240]: https://image.dandelioncloud.cn/pgy_files/images/2024/02/21/c9a57adf099440b4a3cdd325af12ef8d.png
[SpringSecurity - _-CSDN]: https://blog.csdn.net/weixin_51351637/article/details/133256058