springboot-security02FromDB 权限管理（用户信息和角色信息保存在数据库）详解程序员

 <!-- security --> 
         <dependency> 
             <groupId>org.springframework.boot</groupId> 
             <artifactId>spring-boot-starter-security</artifactId> 
         </dependency> 
         <dependency> 
             <groupId>org.springframework.boot</groupId> 
             <artifactId>spring-boot-starter-thymeleaf</artifactId> 
          </dependency> 
  
         <!--jpa--> 
         <dependency> 
             <groupId>org.springframework.boot</groupId> 
             <artifactId>spring-boot-starter-data-jpa</artifactId> 
         </dependency> 
         <!--mysql--> 
         <dependency> 
             <groupId>mysql</groupId> 
             <artifactId>mysql-connector-java</artifactId> 
         </dependency>

 spring.thymeleaf.prefix=classpath:/page/ 
  
 #mysql连接地址 
 spring.datasource.url=jdbc:mysql://localhost:3307/springboot_test 
 #mysql用户名和密码 
 spring.datasource.username=root 
 spring.datasource.password=root 
 #driver驱动 
 spring.datasource.driver-class-name=com.mysql.jdbc.Driver 
 #show sql 
 spring.jpa.show-sql=true 
 # Hibernate ddl auto (create, create-drop, update) 
 #### hibernate的ddl-auto=update配置表名，数据库的表和列会自动创建（根据Java实体） 
 spring.jpa.hibernate.ddl-auto=update 
 # 方言 
 spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.MySQL5Dialect

@Configuration 
@EnableWebSecurity 
@EnableGlobalMethodSecurity(prePostEnabled = true)//开启进入Controller之前，检验权限。这个注解配置后，[email protected]("hasAnyAuthority('ADMIN')")才会生效 
public class WebSecurityConfig extends WebSecurityConfigurerAdapter{ 
    @SuppressWarnings("SpringJavaAutowiringInspection") 
    @Autowired 
    private MyUDService myUDService; 
    @Bean 
    @Override 
    protected AuthenticationManager authenticationManager() throws Exception { 
        return super.authenticationManager(); 
    } 
 
    @Override 
    protected void configure(HttpSecurity httpSecurity) throws Exception { 
 
        httpSecurity.authorizeRequests() 
                .antMatchers("/", "/login", "/err/*").permitAll() //无需验证权限 
                .anyRequest().authenticated() //其他地址的访问均需验证权限 
                .and().formLogin().loginPage("/login").defaultSuccessUrl("/home").permitAll()//指定登录页是"/login" //登录成功后默认跳转到"/home" 
                .and().logout().logoutSuccessUrl("/login").permitAll(); //退出登录后的默认url是"/login" 
    } 
 
    /** 
     * 全局配置 
     * @param builder 
     * @throws Exception 
     */ 
    @Autowired 
    public void configure(AuthenticationManagerBuilder builder) throws Exception { 
        builder 
                .userDetailsService(myUDService) 
                .passwordEncoder(this.passwordEncoder()); 
    } 
 
    /** 
     * 设置用户密码的加密方式：MD5加密 
     * @return 
     */ 
    @Bean 
    public PasswordEncoder passwordEncoder(){ 
        PasswordEncoder pe = new PasswordEncoder() {//自定义密码加密方式 
            //加密 
            @Override 
            public String encode(CharSequence charSequence) { 
                return MD5Util.encode((String)charSequence); 
            } 
 
            //校验密码 
            @Override 
            public boolean matches(CharSequence charSequence, String s) { 
                return MD5Util.encode((String)charSequence).equals(s); 
            } 
        }; 
        return pe; 
    } 
}

@Component 
public class MyUDService implements UserDetailsService { 
 
    @Autowired 
    private UserService userService; 
 
    @Override 
    public UserDetails loadUserByUsername(String s) throws UsernameNotFoundException { 
        User user = userService.findByUserName(s); 
        if(user == null) { 
            throw new UsernameNotFoundException("UserName " + s + " not found"); 
        } 
 
        System.out.println("用户" + s + "：" + user); 
        return user; 
    } 
}

@SpringBootApplication 
public class Start02App { 
 
    public static void main(String[] args) { 
        SpringApplication.run(Start02App.class, args); 
    } 
 
    /** 
     * 自定义异常页 
     */ 
    @Bean 
    public EmbeddedServletContainerCustomizer containerCustomizer() { 
        return new EmbeddedServletContainerCustomizer(){ 
            @Override 
            public void customize(ConfigurableEmbeddedServletContainer container) { 
                container.addErrorPages(new ErrorPage(HttpStatus.NOT_FOUND, "/error/404")); 
                container.addErrorPages(new ErrorPage(HttpStatus.INTERNAL_SERVER_ERROR, "/error/500")); 
                container.addErrorPages(new ErrorPage(java.lang.Throwable.class,"/error/500")); 
                container.addErrorPages(new ErrorPage(HttpStatus.FORBIDDEN,"/error/403")); 
            } 
        }; 
    } 
}

@RunWith(SpringRunner.class) 
@SpringBootTest(classes = Start02App.class) 
public class UserServiceTest { 
 
    @Autowired 
    private UserDao userDao; 
    @Autowired 
    private UserService userService; 
 
    private ObjectMapper objectMapper = new ObjectMapper(); 
 
    @Test 
    public void testAll() throws JsonProcessingException { 
 
        this.saveUser(); 
        this.list(); 
 
    } 
 
    private void saveUser() throws JsonProcessingException { 
        User admin = new User(); 
        admin.setUserName("admin"); 
        admin.setPassword(MD5Util.encode("admin")); 
        admin.setPwdBak("admin"); 
        admin.setRole("ADMIN"); 
        User adminSave = userDao.save(admin); 
        for(int i=0;i<=5;i++) { 
            System.out.println("admin save--->:" + objectMapper.writeValueAsString(adminSave)); 
            User user = new User(); 
            user.setUserName("test"+i); 
            user.setPassword(MD5Util.encode("user" + i)); 
            user.setPwdBak("user" + i); 
            user.setRole("USER"); 
            User userSave = userDao.save(user); 
            System.out.println("user save--->:" + objectMapper.writeValueAsString(userSave)); 
        } 
    } 
 
    private void list() throws JsonProcessingException { 
        List<User> userList = userService.userList(); 
        System.out.println("用户列表：" + objectMapper.writeValueAsString(userList)); 
    } 
 
}