本文共 4850 字，大约阅读时间需要 16 分钟。

Spring Security快速入门

spring提供安全认证服务的框架

• 导入Maven依赖

       
    
     5.0.2.RELEASE
        
    
     5.0.1.RELEASE
      
     
       
          
     
      org.springframework
           
     
      spring-core
           
     
      ${spring.version}
         
        
          
     
      org.springframework
           
     
      spring-web
           
     
      ${spring.version}
         
        
          
     
      org.springframework
           
     
      spring-webmvc
           
     
      ${spring.version}
         
        
          
     
      org.springframework
           
     
      spring-context-support
           
     
      ${spring.version}
         
        
          
     
      org.springframework
           
     
      spring-test
           
     
      ${spring.version}
         
        
          
     
      org.springframework
           
     
      spring-jdbc
           
     
      ${spring.version}
         
        
          
     
      org.springframework.security
           
     
      spring-security-web
           
     
      ${spring.security.version}
         
        
          
     
      org.springframework.security
           
     
      spring-security-config
           
     
      ${spring.security.version}
         
        
          
     
      javax.servlet
           
     
      javax.servlet-api
           
     
      3.1.0
           
     
      provided
         
      
     
       
          
           
             
      
       org.apache.maven.plugins
              
      
       maven-compiler-plugin
              
      
       3.2
              
                
       1.8          
       
        1.8
                 
       
        UTF-8
               
            
           
             
      
       org.apache.tomcat.maven
              
      
       tomcat9-maven-plugin
              
                
                 
       
        8090
                 
                 
       
        /
               
            
         
      
   

• web.xml配置

       
    
     contextConfigLocation
        
    
     classpath:spring-security.xml
      
     
       
    
     org.springframework.web.context.ContextLoaderListener
      
     
     
       
    
     springSecurityFilterChain
        
    
     org.springframework.web.filter.DelegatingFilterProxy
      
     
       
    
     springSecurityFilterChain
        
    
     /*
      
     
       
    
     index.html
        
    
     index.htm
        
    
     index.jsp
        
    
     default.html
        
    
     default.htm
        
    
     default.jsp
      
   

自定义页面

• Spring-security.xml配置

spring security认证用户登录

import org.springframework.security.core.userdetails.UserDetailsService;public interface IUserService extends UserDetailsService {
   }

@Service("userService")@Transactionalpublic class UserServiceImpl implements IUserService {
       @Autowired    private IUserDao userDao;    @Autowired    private BCryptPasswordEncoder bCryptPasswordEncoder;    @Override    public UserInfo findById(String id) throws Exception{
           return  userDao.findById(id);    }    @Override    public void save(UserInfo userInfo) throws Exception {
           //对密码进行加密处理        userInfo.setPassword(bCryptPasswordEncoder.encode(userInfo.getPassword()));        userDao.save(userInfo);    }    @Override    public List
   
     findAll() throws Exception {
           return userDao.findAll();    }    @Override    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
           UserInfo userInfo = null;        try {
               userInfo = userDao.findByUsername(username);        } catch (Exception e) {
               e.printStackTrace();        }        //处理自己的用户对象封装成UserDetails        //  User user=new User(userInfo.getUsername(),"{noop}"+userInfo.getPassword(),getAuthority(userInfo.getRoles()));        User user = new User(userInfo.getUsername(), userInfo.getPassword(), userInfo.getStatus() == 0 ? false : true, true, true, true, getAuthority(userInfo.getRoles()));        return user;    }    //作用就是返回一个List集合，集合中装入的是角色描述    public List
    
      getAuthority(List
     
       roles) {
           List
      
        list = new ArrayList<>();        for (Role role : roles) {
               list.add(new SimpleGrantedAuthority("ROLE_" + role.getRoleName()));        }        return list;    }}
      
     
    
   

完整Spring-security.xml配置文件

权限关联与控制

待续~

转载地址：http://zaxab.baihongyu.com/