SpringSecurity详解，实现自定义登录接口

在Spring Security中，你可以通过实现AuthenticationProvider接口来创建一个自定义的登录接口。以下是一个简单的例子：

1. 创建一个实现了AuthenticationProvider接口的类：

import org.springframework.security.authentication.AuthenticationProvider;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.stereotype.Component;
 
@Component
public class CustomAuthenticationProvider implements AuthenticationProvider {
 
    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        // 在这里实现你的登录逻辑，比如查询数据库验证用户名和密码
        // 验证成功后创建 Authentication 对象
        String name = authentication.getName(); // 用户名
        String password = authentication.getCredentials().toString(); // 密码
 
        // 假设验证通过，返回认证成功的 Authentication 对象
        return new UsernamePasswordAuthenticationToken(name, password, authentication.getAuthorities());
    }
 
    @Override
    public boolean supports(Class<?> authentication) {
        // 指定支持的 Authentication 类型
        return authentication.equals(UsernamePasswordAuthenticationToken.class);
    }
}

2. 配置Spring Security以使用自定义的登录接口：

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            // 配置登录接口等安全性设置
            .authorizeRequests()
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .loginProcessingUrl("/custom-login") // 自定义登录URL
                .permitAll();
    }
 
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.authenticationProvider(customAuthenticationProvider());
    }
 
    @Bean
    public CustomAuthenticationProvider customA