security动态配置权限（三）

转x33g5p2x  于2022-03-02 转载在 其他  
字(18.5k)|赞(0)|评价(0)|浏览(197)

前言：在security基于数据库的认证（二）时，我们懂得了security是怎么从db里获取用户名和密码并且验证的，不过那些些权限还是静态配置的，本章主要讲如何实现动态配置权限

1.要准备的sql

  1. /*
  2.  Navicat Premium Data Transfer
  4.  Source Server         : localhost
  5.  Source Server Type    : MySQL
  6.  Source Server Version : 80018
  7.  Source Host           : localhost:3306
  8.  Source Schema         : demo
  10.  Target Server Type    : MySQL
  11.  Target Server Version : 80018
  12.  File Encoding         : 65001
  14.  Date: 02/03/2022 11:49:35
  15. */
  17. SET NAMES utf8mb4;
  18. SET FOREIGN_KEY_CHECKS = 0;
  20. -- ----------------------------
  21. -- Table structure for menu
  22. -- ----------------------------
  23. DROP TABLE IF EXISTS `menu`;
  24. CREATE TABLE `menu`  (
  25.   `id` int(11) NOT NULL AUTO_INCREMENT,
  26.   `url` varchar(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci NULL DEFAULT NULL COMMENT '资源路径',
  27.   PRIMARY KEY (`id`) USING BTREE
  28. ) ENGINE = InnoDB AUTO_INCREMENT = 4 CHARACTER SET = utf8mb4 COLLATE = utf8mb4_0900_ai_ci ROW_FORMAT = Dynamic;
  30. -- ----------------------------
  31. -- Records of menu
  32. -- ----------------------------
  33. INSERT INTO `menu` VALUES (1, '/db/**');
  34. INSERT INTO `menu` VALUES (2, '/damin/**');
  35. INSERT INTO `menu` VALUES (3, '/user/**');
  37. -- ----------------------------
  38. -- Table structure for menu_role_ref
  39. -- ----------------------------
  40. DROP TABLE IF EXISTS `menu_role_ref`;
  41. CREATE TABLE `menu_role_ref`  (
  42.   `id` int(11) NOT NULL AUTO_INCREMENT,
  43.   `menu_id` int(11) NULL DEFAULT NULL COMMENT '菜单id',
  44.   `role_id` int(11) NULL DEFAULT NULL COMMENT '角色id',
  45.   PRIMARY KEY (`id`) USING BTREE
  46. ) ENGINE = InnoDB AUTO_INCREMENT = 4 CHARACTER SET = utf8mb4 COLLATE = utf8mb4_0900_ai_ci ROW_FORMAT = Dynamic;
  48. -- ----------------------------
  49. -- Records of menu_role_ref
  50. -- ----------------------------
  51. INSERT INTO `menu_role_ref` VALUES (1, 1, 1);
  52. INSERT INTO `menu_role_ref` VALUES (2, 2, 2);
  53. INSERT INTO `menu_role_ref` VALUES (3, 3, 3);
  55. -- ----------------------------
  56. -- Table structure for role
  57. -- ----------------------------
  58. DROP TABLE IF EXISTS `role`;
  59. CREATE TABLE `role`  (
  60.   `id` int(11) NOT NULL AUTO_INCREMENT,
  61.   `name` varchar(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci NULL DEFAULT NULL,
  62.   `description` varchar(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci NULL DEFAULT NULL,
  63.   PRIMARY KEY (`id`) USING BTREE
  64. ) ENGINE = InnoDB AUTO_INCREMENT = 4 CHARACTER SET = utf8mb4 COLLATE = utf8mb4_0900_ai_ci ROW_FORMAT = Dynamic;
  66. -- ----------------------------
  67. -- Records of role
  68. -- ----------------------------
  69. INSERT INTO `role` VALUES (1, 'ROLE_db', '数据库管理员');
  70. INSERT INTO `role` VALUES (2, 'ROLE_admin', '系统管理员');
  71. INSERT INTO `role` VALUES (3, 'ROLE_user', '用户');
  73. -- ----------------------------
  74. -- Table structure for user
  75. -- ----------------------------
  76. DROP TABLE IF EXISTS `user`;
  77. CREATE TABLE `user`  (
  78.   `id` int(11) NOT NULL AUTO_INCREMENT,
  79.   `username` varchar(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci NULL DEFAULT NULL,
  80.   `password` varchar(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci NULL DEFAULT NULL,
  81.   `enabled` tinyint(1) NULL DEFAULT NULL,
  82.   `locked` tinyint(1) NULL DEFAULT NULL,
  83.   PRIMARY KEY (`id`) USING BTREE
  84. ) ENGINE = InnoDB AUTO_INCREMENT = 4 CHARACTER SET = utf8mb4 COLLATE = utf8mb4_0900_ai_ci ROW_FORMAT = Dynamic;
  86. -- ----------------------------
  87. -- Records of user
  88. -- ----------------------------
  89. INSERT INTO `user` VALUES (1, 'root', '$2a$10$O8G0X/sUPAA76MV7U3BwY.3Uo8/QMBcqK678Rwkoz.fowbce.CLtO', 1, 0);
  90. INSERT INTO `user` VALUES (2, 'admin', '$2a$10$O8G0X/sUPAA76MV7U3BwY.3Uo8/QMBcqK678Rwkoz.fowbce.CLtO', 1, 0);
  91. INSERT INTO `user` VALUES (3, 'tom', '$2a$10$O8G0X/sUPAA76MV7U3BwY.3Uo8/QMBcqK678Rwkoz.fowbce.CLtO', 1, 0);
  93. -- ----------------------------
  94. -- Table structure for user_role_ref
  95. -- ----------------------------
  96. DROP TABLE IF EXISTS `user_role_ref`;
  97. CREATE TABLE `user_role_ref`  (
  98.   `id` int(11) NOT NULL AUTO_INCREMENT,
  99.   `user_id` int(11) NULL DEFAULT NULL,
  100.   `role_id` int(11) NULL DEFAULT NULL,
  101.   PRIMARY KEY (`id`) USING BTREE
  102. ) ENGINE = InnoDB AUTO_INCREMENT = 5 CHARACTER SET = utf8mb4 COLLATE = utf8mb4_0900_ai_ci ROW_FORMAT = Dynamic;
  104. -- ----------------------------
  105. -- Records of user_role_ref
  106. -- ----------------------------
  107. INSERT INTO `user_role_ref` VALUES (1, 1, 1);
  108. INSERT INTO `user_role_ref` VALUES (2, 1, 2);
  109. INSERT INTO `user_role_ref` VALUES (3, 2, 2);
  110. INSERT INTO `user_role_ref` VALUES (4, 3, 3);
  112. SET FOREIGN_KEY_CHECKS = 1;

2.pom.xml

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  3.          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
  4.     <modelVersion>4.0.0</modelVersion>
  5.     <parent>
  6.         <groupId>org.springframework.boot</groupId>
  7.         <artifactId>spring-boot-starter-parent</artifactId>
  8.         <version>2.6.4</version>
  9.         <relativePath/> <!-- lookup parent from repository -->
  10.     </parent>
  11.     <groupId>com.yl</groupId>
  12.     <artifactId>security-dy</artifactId>
  13.     <version>0.0.1-SNAPSHOT</version>
  14.     <name>security-dy</name>
  15.     <description>Demo project for Spring Boot</description>
  16.     <properties>
  17.         <java.version>11</java.version>
  18.     </properties>
  19.     <dependencies>
  20.         <dependency>
  21.             <groupId>org.springframework.boot</groupId>
  22.             <artifactId>spring-boot-starter-security</artifactId>
  23.         </dependency>
  24.         <dependency>
  25.             <groupId>org.springframework.boot</groupId>
  26.             <artifactId>spring-boot-starter-web</artifactId>
  27.         </dependency>
  28.         <dependency>
  29.             <groupId>org.mybatis.spring.boot</groupId>
  30.             <artifactId>mybatis-spring-boot-starter</artifactId>
  31.             <version>2.2.2</version>
  32.         </dependency>
  33.         <dependency>
  34.             <groupId>com.alibaba</groupId>
  35.             <artifactId>druid-spring-boot-starter</artifactId>
  36.             <version>1.1.10</version>
  37.         </dependency>
  38.         <dependency>
  39.             <groupId>mysql</groupId>
  40.             <artifactId>mysql-connector-java</artifactId>
  41.             <scope>runtime</scope>
  42.         </dependency>
  43.         <dependency>
  44.             <groupId>org.springframework.boot</groupId>
  45.             <artifactId>spring-boot-starter-test</artifactId>
  46.             <scope>test</scope>
  47.         </dependency>
  48.         <dependency>
  49.             <groupId>org.springframework.security</groupId>
  50.             <artifactId>spring-security-test</artifactId>
  51.             <scope>test</scope>
  52.         </dependency>
  53.     </dependencies>
  55.     <build>
  56.         <resources>
  57.             <resource>
  58.                 <directory>src/main/java</directory>
  59.                 <includes>
  60.                     <include>**/*.xml</include>
  61.                 </includes>
  62.             </resource>
  63.             <resource>
  64.                 <directory>src/min/resources</directory>
  65.             </resource>
  66.         </resources>
  67.         <plugins>
  68.             <plugin>
  69.                 <groupId>org.springframework.boot</groupId>
  70.                 <artifactId>spring-boot-maven-plugin</artifactId>
  71.             </plugin>
  72.         </plugins>
  73.     </build>
  75. </project>

3.application.properties

  1. spring.datasource.url=jdbc:mysql://localhost:3306/demo?useUnicode=true&characterEncoding=utf8&useSSL=false&serverTimezone=Asia/Shanghai
  2. spring.datasource.type=com.alibaba.druid.pool.DruidDataSource
  3. spring.datasource.username=root
  4. spring.datasource.password=root

4.实体类

  1. package com.yl.securitydy.domain;
  3. import org.springframework.security.core.GrantedAuthority;
  4. import org.springframework.security.core.authority.SimpleGrantedAuthority;
  5. import org.springframework.security.core.userdetails.UserDetails;
  7. import java.util.ArrayList;
  8. import java.util.Collection;
  9. import java.util.List;
  11. public class User implements UserDetails {
  12.     private Integer id;
  13.     private String username;
  14.     private String password;
  15.     private Boolean enabled;
  16.     private Boolean locked;
  17.     private List<Role> roles;
  19.     public Integer getId() {
  20.         return id;
  21.     }
  23.     public void setId(Integer id) {
  24.         this.id = id;
  25.     }
  27.     public void setUsername(String username) {
  28.         this.username = username;
  29.     }
  31.     @Override
  32.     public Collection<? extends GrantedAuthority> getAuthorities() {
  33.         List<SimpleGrantedAuthority> list = new ArrayList<>();
  34.         for (Role role : roles) {
  35.             list.add(new SimpleGrantedAuthority(role.getName()));
  36.         }
  37.         return list;
  38.     }
  40.     @Override
  41.     public String getPassword() {
  42.         return password;
  43.     }
  45.     @Override
  46.     public String getUsername() {
  47.         return username;
  48.     }
  50.     // 账户是否未过期
  51.     @Override
  52.     public boolean isAccountNonExpired() {
  53.         return true;
  54.     }
  56.     // 账户是否未锁定
  57.     @Override
  58.     public boolean isAccountNonLocked() {
  59.         return !locked;
  60.     }
  62.     // 凭证是否未过期
  63.     @Override
  64.     public boolean isCredentialsNonExpired() {
  65.         return true;
  66.     }
  68.     @Override
  69.     public boolean isEnabled() {
  70.         return enabled;
  71.     }
  73.     public void setPassword(String password) {
  74.         this.password = password;
  75.     }
  77.     public void setEnabled(Boolean enabled) {
  78.         this.enabled = enabled;
  79.     }
  81.     public void setLocked(Boolean locked) {
  82.         this.locked = locked;
  83.     }
  85.     public List<Role> getRoles() {
  86.         return roles;
  87.     }
  89.     public void setRoles(List<Role> roles) {
  90.         this.roles = roles;
  91.     }
  93.     @Override
  94.     public String toString() {
  95.         return "User{" +
  96.                 "id=" + id +
  97.                 ", username='" + username + '\'' +
  98.                 ", password='" + password + '\'' +
  99.                 ", enabled=" + enabled +
  100.                 ", locked=" + locked +
  101.                 '}';
  102.     }
  103. }
  1. package com.yl.securitydy.domain;
  3. import java.io.Serializable;
  5. public class Role implements Serializable {
  6.    private Integer id;
  7.    private String name;
  8.    private String description;
  10.     public Integer getId() {
  11.         return id;
  12.     }
  14.     public void setId(Integer id) {
  15.         this.id = id;
  16.     }
  18.     public String getName() {
  19.         return name;
  20.     }
  22.     public void setName(String name) {
  23.         this.name = name;
  24.     }
  26.     public String getDescription() {
  27.         return description;
  28.     }
  30.     public void setDescription(String description) {
  31.         this.description = description;
  32.     }
  34.     @Override
  35.     public String toString() {
  36.         return "Role{" +
  37.                 "id=" + id +
  38.                 ", name='" + name + '\'' +
  39.                 ", description='" + description + '\'' +
  40.                 '}';
  41.     }
  42. }
  1. package com.yl.securitydy.domain;
  3. import java.io.Serializable;
  4. import java.util.List;
  6. public class Menu implements Serializable {
  7.     private Integer id;
  8.     private String url;
  9.     private List<Role> roles;
  11.     public List<Role> getRoles() {
  12.         return roles;
  13.     }
  15.     public void setRoles(List<Role> roles) {
  16.         this.roles = roles;
  17.     }
  19.     public Integer getId() {
  20.         return id;
  21.     }
  23.     public void setId(Integer id) {
  24.         this.id = id;
  25.     }
  27.     public String getUrl() {
  28.         return url;
  29.     }
  31.     public void setUrl(String url) {
  32.         this.url = url;
  33.     }
  35.     @Override
  36.     public String toString() {
  37.         return "Menu{" +
  38.                 "id=" + id +
  39.                 ", url='" + url + '\'' +
  40.                 ", roles=" + roles +
  41.                 '}';
  42.     }
  43. }

5.mapper

  1. package com.yl.securitydy.mapper;
  3. import com.yl.securitydy.domain.User;
  4. import org.apache.ibatis.annotations.Mapper;
  6. @Mapper
  7. public interface UserMapper {
  9.     User loadUserByUserName(String username);
  10. }
  1. package com.yl.securitydy.mapper;
  3. import com.yl.securitydy.domain.Role;
  4. import org.apache.ibatis.annotations.Mapper;
  6. import java.util.List;
  8. @Mapper
  9. public interface RoleMapper {
  10.     List<Role> getRoleListByUserId(Integer userId);
  11. }
  1. package com.yl.securitydy.mapper;
  3. import com.yl.securitydy.domain.Menu;
  4. import org.apache.ibatis.annotations.Mapper;
  6. import java.util.List;
  8. @Mapper
  9. public interface MenuMapper {
  11.     List<Menu> getAllMenuList();
  12. }

6.mapper.xml

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
  3. <mapper namespace="com.yl.securitydy.mapper.UserMapper">
  5.     <select id="loadUserByUserName" resultType="com.yl.securitydy.domain.User">
  6.         select * from user where username = #{username}
  7.     </select>
  9. </mapper>
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
  3. <mapper namespace="com.yl.securitydy.mapper.RoleMapper">
  5.     <select id="getRoleListByUserId" resultType="com.yl.securitydy.domain.Role">
  6.         select * from role where id in (select role_id from user_role_ref where user_id = #{userId})
  7.     </select>
  9. </mapper>
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
  3. <mapper namespace="com.yl.securitydy.mapper.MenuMapper">
  4.     <resultMap id="baseResultMap" type="com.yl.securitydy.domain.Menu">
  5.         <id property="id" column="id"/>
  6.         <result property="url" column="url"/>
  7.         <collection property="roles" ofType="com.yl.securitydy.domain.Role">
  8.             <id property="id" column="rid"/>
  9.             <result property="name" column="name"/>
  10.             <result property="description" column="description"/>
  11.         </collection>
  12.     </resultMap>
  13.     <select id="getAllMenuList" resultMap="baseResultMap">
  14.         select m.*,r.id rid,r.name,r.description from menu m left join menu_role_ref mrr on m.id = mrr.menu_id left join role r on r.id = mrr.role_id;
  15.     </select>
  16. </mapper>

7.service

  1. package com.yl.securitydy.service;
  3. import com.yl.securitydy.domain.Role;
  4. import com.yl.securitydy.domain.User;
  5. import com.yl.securitydy.mapper.RoleMapper;
  6. import com.yl.securitydy.mapper.UserMapper;
  7. import org.springframework.beans.factory.annotation.Autowired;
  8. import org.springframework.security.core.userdetails.UserDetails;
  9. import org.springframework.security.core.userdetails.UserDetailsService;
  10. import org.springframework.security.core.userdetails.UsernameNotFoundException;
  11. import org.springframework.stereotype.Service;
  13. import java.util.List;
  15. @Service
  16. public class UserService implements UserDetailsService {
  17.     @Autowired
  18.     UserMapper userMapper;
  19.     @Autowired
  20.     RoleMapper roleMapper;
  21.     @Override
  22.     public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
  23.         User user = userMapper.loadUserByUserName(username);
  24.         if (user == null) {
  25.             throw new UsernameNotFoundException("用户不存在");
  26.         }
  27.         List<Role> roles = roleMapper.getRoleListByUserId(user.getId());
  28.         user.setRoles(roles);
  29.         return user;
  30.     }
  31. }
  1. package com.yl.securitydy.service;
  3. import com.yl.securitydy.domain.Menu;
  4. import com.yl.securitydy.mapper.MenuMapper;
  5. import org.springframework.beans.factory.annotation.Autowired;
  6. import org.springframework.stereotype.Service;
  8. import java.util.List;
  10. @Service
  11. public class MenuService {
  12.     @Autowired
  13.     MenuMapper menuMapper;
  15.     public List<Menu> getAllMenuList(){
  16.         return menuMapper.getAllMenuList();
  17.     }
  18. }

8.自定义源数据拦截器

  1. package com.yl.securitydy.config;
  3. import com.yl.securitydy.domain.Menu;
  4. import com.yl.securitydy.domain.Role;
  5. import com.yl.securitydy.service.MenuService;
  6. import org.springframework.beans.factory.annotation.Autowired;
  7. import org.springframework.security.access.ConfigAttribute;
  8. import org.springframework.security.access.SecurityConfig;
  9. import org.springframework.security.web.FilterInvocation;
  10. import org.springframework.security.web.access.intercept.FilterInvocationSecurityMetadataSource;
  11. import org.springframework.stereotype.Component;
  12. import org.springframework.util.AntPathMatcher;
  14. import java.util.Collection;
  15. import java.util.List;
  17. @Component
  18. public class MyFilter implements FilterInvocationSecurityMetadataSource {
  19.     AntPathMatcher antPathMatcher = new AntPathMatcher();
  21.     @Autowired
  22.     MenuService menuService;
  24.     // 判断请求路径需要那些角色可以访问
  25.     @Override
  26.     public Collection<ConfigAttribute> getAttributes(Object object) throws IllegalArgumentException {
  27.         //获取请求地址
  28.         String requestUrl = ((FilterInvocation) object).getRequestUrl();
  29.         List<Menu> menuList = menuService.getAllMenuList();
  30.         for (Menu menu : menuList) {
  31.             if (antPathMatcher.matchStart(menu.getUrl(),requestUrl)) {
  32.                 List<Role> roles = menu.getRoles();
  33.                 String[] roleStrs = new String[roles.size()];
  34.                 for (int i = 0;i < roles.size();i++) {
  35.                     roleStrs[i] = roles.get(i).getName();
  36.                 }
  37.                 return SecurityConfig.createList(roleStrs);
  38.             }
  39.         }
  40.         // 对于没有匹配到的一些请求地址，默认其登录后就可以访问
  41.         return SecurityConfig.createList("ROLE_login");
  42.     }
  44.     @Override
  45.     public Collection<ConfigAttribute> getAllConfigAttributes() {
  46.         return null;
  47.     }
  49.     @Override
  50.     public boolean supports(Class<?> clazz) {
  51.         return true;
  52.     }
  53. }

9.自定义决策管理器

  1. package com.yl.securitydy.config;
  3. import org.springframework.security.access.AccessDecisionManager;
  4. import org.springframework.security.access.AccessDeniedException;
  5. import org.springframework.security.access.ConfigAttribute;
  6. import org.springframework.security.authentication.AnonymousAuthenticationToken;
  7. import org.springframework.security.authentication.InsufficientAuthenticationException;
  8. import org.springframework.security.core.Authentication;
  9. import org.springframework.security.core.GrantedAuthority;
  10. import org.springframework.stereotype.Component;
  12. import java.util.Collection;
  14. @Component
  15. public class MyAccess implements AccessDecisionManager {
  17.     //获取当前用户拥有的角色并且和访问地址需要的角色做匹配，然后决策
  18.     @Override
  19.     public void decide(Authentication authentication, Object object, Collection<ConfigAttribute> configAttributes) throws AccessDeniedException, InsufficientAuthenticationException {
  20.         for (ConfigAttribute attribute : configAttributes) {
  21.             if ("ROLE_login".equals(attribute.getAttribute())) {
  22.                 // 如果用户时匿名用户登录直接抛异常
  23.                 if (authentication instanceof AnonymousAuthenticationToken) {
  24.                     throw new AccessDeniedException("非法请求！");
  25.                 } else {
  26.                     //放行
  27.                     return;
  28.                 }
  29.             }
  30.             Collection<? extends GrantedAuthority> authorities = authentication.getAuthorities();
  31.             for (GrantedAuthority authority : authorities) {
  32.                 if (authority.getAuthority().equals(attribute.getAttribute())) {
  33.                     //放行
  34.                     return;
  35.                 }
  36.             }
  37.         }
  38.         throw new AccessDeniedException("非法请求！");
  39.     }
  41.     @Override
  42.     public boolean supports(ConfigAttribute attribute) {
  43.         return true;
  44.     }
  46.     @Override
  47.     public boolean supports(Class<?> clazz) {
  48.         return true;
  49.     }
  50. }

10.securityconfig

  1. package com.yl.securitydy.config;
  3. import com.yl.securitydy.service.UserService;
  4. import org.springframework.beans.factory.annotation.Autowired;
  5. import org.springframework.context.annotation.Bean;
  6. import org.springframework.context.annotation.Configuration;
  7. import org.springframework.security.config.annotation.ObjectPostProcessor;
  8. import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
  9. import org.springframework.security.config.annotation.web.builders.HttpSecurity;
  10. import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
  11. import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
  12. import org.springframework.security.web.access.intercept.FilterSecurityInterceptor;
  14. @Configuration
  15. public class SecurityConfig extends WebSecurityConfigurerAdapter {
  16.     @Autowired
  17.     UserService userService;
  18.     @Autowired
  19.     MyFilter myFilter;
  20.     @Autowired
  21.     MyAccess myAccess;
  23.     @Bean
  24.     BCryptPasswordEncoder bCryptPasswordEncoder() {
  25.         return new BCryptPasswordEncoder();
  26.     }
  28.     @Override
  29.     protected void configure(AuthenticationManagerBuilder auth) throws Exception {
  30.         auth.userDetailsService(userService);
  31.     }
  33.     @Override
  34.     protected void configure(HttpSecurity http) throws Exception {
  35.         http.authorizeRequests()
  36.                 .withObjectPostProcessor(new ObjectPostProcessor<FilterSecurityInterceptor>() {
  37.                     @Override
  38.                     public <O extends FilterSecurityInterceptor> O postProcess(O object) {
  39.                         object.setAccessDecisionManager(myAccess);
  40.                         object.setSecurityMetadataSource(myFilter);
  41.                         return object;
  42.                     }
  43.                 })
  44.                 .and()
  45.                 .formLogin()
  46.                 .permitAll()
  47.                 .and()
  48.                 .csrf().disable();
  49.     }
  50. }

11.controller

  1. package com.yl.securitydy.controller;
  3. import org.springframework.web.bind.annotation.GetMapping;
  4. import org.springframework.web.bind.annotation.RestController;
  6. @RestController
  7. public class HelloController {
  9.     @GetMapping("/hello")
  10.     public String hello() {
  11.         return "hello";
  12.     }
  14.     @GetMapping("/db/hello")
  15.     public String db() {
  16.         return "hello db";
  17.     }
  19.     @GetMapping("/admin/hello")
  20.     public String admin() {
  21.         return "hello admin";
  22.     }
  24.     @GetMapping("/user/hello")
  25.     public String user() {
  26.         return "hello user";
  27.     }
  28. }

12.测试

1.登录root账号（其拥有两个角色，可以访问/db/hello和/admin/hello）

2.root账号访问不了/user/hello接口

版权说明 : 本文为转载文章, 版权归原作者所有 版权申明

原文链接 : https://blog.csdn.net/weixin_41359273/article/details/123226116

内容来源于网络，如有侵权，请联系作者删除！

Javaspring

相关文章

    查看更多

    热门标签

    更多
    JavaquerypythonNode开发语言requestUtil数据库Table后端算法LoggerMessageElementParser

    最新文章

    更多
    • 蜀ICP备13028337号-1 大数据知识库 https://www.saoniuhuo.com © All rights reserved
    • 本站内容来源互联网,如果侵犯您的权益请联系我们删除, 联系方式：448109455@qq.com