【腾讯云 Cloud Studio 实战训练营】使用Cloud Studio构建SpringSecurity权限框架

@ConfigurationProperties(prefix = "authentication")
@Component
public class Authentication {
private String loginPage;

private String loginProcessingUrl;

private String username;

private String password;

private String[] staticPaths ;</code></pre></div></div><h4 id="9b8k4" name="4.2.2-Result">4.2.2 Result</h4><p>用于提供统一返回格式。</p><div class="rno-markdown-code"><div class="rno-markdown-code-toolbar"><div class="rno-markdown-code-toolbar-info"><div class="rno-markdown-code-toolbar-item is-type"><span class="is-m-hidden">代码语言：</span>java</div></div><div class="rno-markdown-code-toolbar-opt"><div class="rno-markdown-code-toolbar-copy"><i class="icon-copy"></i><span class="is-m-hidden">复制</span></div></div></div><div class="developer-code-block"><pre class="prism-token token line-numbers language-java"><code class="language-java" style="margin-left:0">public class Result {



private Integer code;



private String message;



private Object data;</code></pre></div></div><h3 id="5ccpj" name="4.3-Service">4.3 Service</h3><p>UserService类查询账号密码，验证账号密码是否正确，这里不连接数据库，只提供模拟查询验证，各位可再基础上自行拓展。</p><div class="rno-markdown-code"><div class="rno-markdown-code-toolbar"><div class="rno-markdown-code-toolbar-info"><div class="rno-markdown-code-toolbar-item is-type"><span class="is-m-hidden">代码语言：</span>java</div></div><div class="rno-markdown-code-toolbar-opt"><div class="rno-markdown-code-toolbar-copy"><i class="icon-copy"></i><span class="is-m-hidden">复制</span></div></div></div><div class="developer-code-block"><pre class="prism-token token line-numbers language-java"><code class="language-java" style="margin-left:0">@Component(&#34;userService&#34;)

public class UserService implements UserDetailsService {
Logger logger = LoggerFactory.getLogger(getClass());


@Autowired

PasswordEncoder passwordEncoder;



@Override

public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {

    logger.info(&#34;输入的账号: &#34; + username);

    if(!&#34;CloudStudio&#34;.equalsIgnoreCase(username)) {

        throw new UsernameNotFoundException(&#34;用户名或密码错误&#34;);

    }

    String password = passwordEncoder.encode(&#34;1234&#34;);

    //模拟返回权限

    return new User(username, password, AuthorityUtils.commaSeparatedStringToAuthorityList(&#34;admin&#34;));

}

}

@Configuration

@EnableWebSecurity
public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
@Autowired

UserDetailsService userDetailsService;



@Autowired

private AuthenticationSuccessHandler customAuthenticationSuccessHandler;



@Autowired

private AuthenticationFailureHandler customAuthenticationFailureHandler;



@Autowired

private Authentication authentication;



@Bean

public PasswordEncoder passwordEncoder() {

    return new BCryptPasswordEncoder();

}

@Override

protected void configure(AuthenticationManagerBuilder auth) throws Exception {

    auth.userDetailsService(userDetailsService);

}

@Override

protected void configure(HttpSecurity http) throws Exception {

    // 表单登录方式

    http.formLogin()

        .loginPage(authentication.getLoginPage())

        // 登录表单提交处理url, 默认是/login

        .loginProcessingUrl(authentication.getLoginProcessingUrl())

        //验证账号

        .usernameParameter(authentication.getUsername())

        //验证密码

        .passwordParameter(authentication.getPassword())

        //指定访问成功/失败的处理类

        .successHandler(customAuthenticationSuccessHandler)

        .failureHandler(customAuthenticationFailureHandler)

        .and()

        .authorizeRequests()

        ///login/page所有人都能访问，要不没法登录

        .antMatchers(authentication.getLoginPage()).permitAll()

        //其余接口必须验证用户才能访问

        .anyRequest().authenticated()

    ;

}


@Override

public void configure(WebSecurity web){

    web.ignoring().antMatchers("/dist/\*\*", "/modules/\*\*", "/plugins/\*\*");

}

}

@Component("customAuthenticationSuccessHandler")

public class CustomAuthenticationSuccessHandler implements AuthenticationSuccessHandler {
@Override

public void onAuthenticationSuccess(HttpServletRequest request,

    HttpServletResponse response, Authentication authentication) throws IOException, ServletException {

    // 认证成功后，响应JSON字符串

    Result result = Result.ok("认证成功");

    //此处指定返回对象为json，也可以改为返回值

    response.setContentType("application/json;charset=UTF-8");

    response.getWriter().write(result.toJsonString());

}

}
@Component("customAuthenticationFailureHandler")
public class CustomAuthenticationFailureHandler implements AuthenticationFailureHandler {
@Override

public void onAuthenticationFailure(HttpServletRequest request,

        HttpServletResponse response, AuthenticationException exception) throws IOException, ServletException {

    // 认证失败响应JSON字符串，

    Result result = Result.build(HttpStatus.UNAUTHORIZED.value(), exception.getMessage());

    //此处指定返回对象为json，也可以改为返回值

    response.setContentType("application/json;charset=UTF-8");

    response.getWriter().write(result.toJsonString());

}

}

server:

port: 80
spring:
thymeleaf:
cache: false #关闭thymeleaf缓存

authentication:
loginPage: /login/page
loginProcessingUrl: /login/form # 登录表单提交处理的url
username: name # 登录表单提交的用户名的属性名
password: pwd  # 登录表单提交的密码的属性名
staticPaths: # 静态页面放弃拦截


/dist/**


/modules/**


/plugins/**

@Controller



public class CustomLoginController {
@RequestMapping("/login/page")

public String toLogin() {

    return "login";

}

}
@Controller
public class MainController {
@RequestMapping({"/index", "/", ""})

public String index() {

    return "index";

}

}