spring boot 3.x 配置spring security

参考文章:https://spring.io/guides/gs/securing-web/

导入maven

<dependency>

    <groupId>org.springframework.boot</groupId>

    <artifactId>spring-boot-starter</artifactId>

</dependency>

<dependency>

    <groupId>org.springframework.boot</groupId>

    <artifactId>spring-boot-starter-test</artifactId>

    <scope>test</scope>

</dependency>

<dependency>

    <groupId>org.springframework.boot</groupId>

    <artifactId>spring-boot-starter-security</artifactId>

</dependency>

<dependency>

    <groupId>org.springframework.boot</groupId>

    <artifactId>spring-boot-starter-web</artifactId>

</dependency>

<dependency>

    <groupId>org.springframework.boot</groupId>

    <artifactId>spring-boot-starter-thymeleaf</artifactId>

</dependency>

配置spring security

package com.example.springboottest.config;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

import org.springframework.security.config.annotation.web.builders.HttpSecurity;

import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;

import org.springframework.security.core.userdetails.User;

import org.springframework.security.core.userdetails.UserDetails;

import org.springframework.security.crypto.factory.PasswordEncoderFactories;

import org.springframework.security.crypto.password.PasswordEncoder;

import org.springframework.security.provisioning.InMemoryUserDetailsManager;

import org.springframework.security.web.SecurityFilterChain;

@Configuration

@EnableWebSecurity

public class BaseConfiguration {

    /**

     * 用户信息服务(配置用户账号、密码、角色)

     * @param passwordEncoder 密码加密器

     * @return 在内存用户详细信息管理器中

     */

    @Bean

    public InMemoryUserDetailsManager userDetailsService(PasswordEncoder passwordEncoder) {

        UserDetails user = User.withUsername("user")

                .password(passwordEncoder.encode("123456"))

                .roles("user")

                .build();

        UserDetails admin = User.withUsername("admin")

                .password(passwordEncoder.encode("123456"))

                .roles("user", "admin")

                .build();

        return new InMemoryUserDetailsManager(user, admin);

    }

    /**

     * 过滤链

     * @param http http安全实例

     * @return 安全过滤链实例

     * @throws Exception

     */

    @Bean

    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {

        http

                .authorizeHttpRequests(resp -> {

                    resp.requestMatchers("/", "/index").permitAll();

                    resp.requestMatchers("/hello").hasRole("admin");

                })

                .formLogin(form -> {

                    form.loginPage("/login").defaultSuccessUrl("/index").permitAll();

                })

                .logout(logout -> {

                    logout.permitAll();

                });

        return http.build();

    }

    /**

     * 密码加密器

     * @return 密码加密器的实例

     */

    @Bean

    public PasswordEncoder passwordEncoder() {

        PasswordEncoder encoder = PasswordEncoderFactories.createDelegatingPasswordEncoder();

        return encoder;

    }

}

login页面

<!DOCTYPE html>

<html xmlns="http://www.w3.org/1999/xhtml" xmlns:th="https://www.thymeleaf.org">

    <head>

        <title>Spring Security Example </title>

    </head>

    <body>

        <form th:action="@{/login}" method="post">

            <div><label> User Name : <input type="text" name="username"/> </label></div>

            <div><label> Password: <input type="password" name="password"/> </label></div>

            <div><input type="submit" value="Sign In"/></div>

        </form>

    </body>

</html>

巴特西

spring boot 3.x 配置spring security

最新文章

热门文章