添加spring security

2020-07-15 19:05:21 +08:00
parent 852c3b2b61
commit 8b04c70a07
11 changed files with 416 additions and 98 deletions
@@ -0,0 +1,59 @@
+package com.yaoyuan.jiscuss.service.impl;
+
+import com.yaoyuan.jiscuss.entity.Users;
+import com.yaoyuan.jiscuss.service.IUsersService;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.User;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.stereotype.Component;
+
+import java.util.ArrayList;
+import java.util.List;
+
+/**
+ * @author yaoyuan2.chu
+ * @Title:
+ * @Package com.yaoyuan.jiscuss.service.impl
+ * @Description:
+ * @date 2020/7/15 16:34
+ */
+@Component
+public class UserDetailServiceImpl implements UserDetailsService {
+    @Autowired
+    private IUsersService userInfoService;
+
+    /**
+     * 需新建配置类注册一个指定的加密方式Bean，或在下一步Security配置类中注册指定
+     */
+    @Autowired
+    private PasswordEncoder passwordEncoder;
+
+    @Override
+    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
+        // 通过用户名从数据库获取用户信息
+        Users userInfo = userInfoService.getByUsername(username);
+        if (userInfo == null) {
+            throw new UsernameNotFoundException("用户不存在");
+        }
+
+        // 得到用户角色
+        String role = "admin";
+
+        // 角色集合
+        List<GrantedAuthority> authorities = new ArrayList<>();
+        // 角色必须以`ROLE_`开头，数据库中没有，则在这里加
+        authorities.add(new SimpleGrantedAuthority("ROLE_" + role));
+
+        return new User(
+                userInfo.getUsername(),
+                // 因为数据库是明文，所以这里需加密密码
+                passwordEncoder.encode(userInfo.getPassword()),
+                authorities
+        );
+    }
+}