微服务和云原生架构实践-后端安全设计

﹏ヽ暗。殇╰゛Y 2024-04-18 18:37 68阅读 0赞

### Spring Security基础概念⼀ ###

*  Principal

主体，执⾏操作的⽤户

*  Authentication

认证，确认机密信息(如⽤户名/密码)的有效性

*  Authorization

授权，定义Principal的访问控制策略

*  GrantedAuthority

授予Principal的应⽤级权限

*  SecurityContext

安全上下⽂，保存Authentication和其它安全信息

*  SecurityContextHolder

提供对SecurityContext的访问点

### Spring Security过滤链 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poYW9rZWppbjUyMQ_size_16_color_FFFFFF_t_70][]

参考：[http://www.einnovator.org/document/334/spring-security\#web][http_www.einnovator.org_document_334_spring-security_web]

### AuthSvc⽤户名密码登录认证架构 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poYW9rZWppbjUyMQ_size_16_color_FFFFFF_t_70 1][]

### JWT认证 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poYW9rZWppbjUyMQ_size_16_color_FFFFFF_t_70 2][]

### JWT认证⽅法 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poYW9rZWppbjUyMQ_size_16_color_FFFFFF_t_70 3][]

⽅法⼀：通过令牌本⾝，⽆状态，参考MovieSvc

⽅法⼆：通过UserDetailsService，参考AuthSvc

⽅法三： 通过远程AuthSvc⽤户信息接⼜

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poYW9rZWppbjUyMQ_size_16_color_FFFFFF_t_70]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/4bf7d8669ae54e2b8a1790b007b6ee18.png
[http_www.einnovator.org_document_334_spring-security_web]: http://www.einnovator.org/document/334/spring-security#web
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poYW9rZWppbjUyMQ_size_16_color_FFFFFF_t_70 1]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/2e881dddb90f4365b2014184d61dde43.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poYW9rZWppbjUyMQ_size_16_color_FFFFFF_t_70 2]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/854536a8074c4d98b608ee4ec64aa4a0.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3poYW9rZWppbjUyMQ_size_16_color_FFFFFF_t_70 3]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/18/fddd718b8ac84a8c9cf8d3e718b3d098.png