SpringBoot Security 自定义用户认证

在Spring Boot中，你可以通过实现UserDetailsService接口来自定义用户认证。以下是一个简单的例子：

1. 创建一个实现了UserDetailsService接口的服务类：

import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;
 
@Service
public class CustomUserDetailsService implements UserDetailsService {
 
    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        // 这里可以查询数据库或者其他方式获取用户信息
        // 假设我们有一个简单的用户名密码对
        if ("user".equals(username)) {
            return User.withDefaultPasswordEncoder()
                    .username(username)
                    .password("password")
                    .roles("USER")
                    .build();
        }
        throw new UsernameNotFoundException("User not found");
    }
}

2. 配置Spring Security以使用自定义的用户详情服务：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            // 配置HTTP安全性规则
            .authorizeRequests()
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .and()
            .httpBasic();
    }
 
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userDetailsService());
    }
 
    @Bean
    public CustomUserDetailsService userDetailsService() {
        return new CustomUserDetailsService();
    }
}

在这个例子中，CustomUserDetailsService类负责根据用户名加载用户详情。在SecurityConfig配置类中，通过覆盖configure(AuthenticationManagerBuilder auth)方法，将自定义的用户服务注册到Spring Secu