Spring Security+Spring Boot实现登录认证以及权限认证

以下是一个简化的Spring Security和Spring Boot结合使用的例子，实现了登录和基于角色的权限控制。

添加依赖到pom.xml：




<dependencies>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>
</dependencies>

配置SecurityConfig.java：




import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 
@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/", "/home").permitAll()
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .loginPage("/login")
                .permitAll()
                .and()
            .logout()
                .permitAll();
    }
 
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth
            .inMemoryAuthentication()
                .withUser("user").password("{noop}userPassword").roles("USER")
                .and()
                .withUser("admin").password("{noop}adminPassword").roles("USER", "ADMIN");
    }
}

创建LoginController.java：




import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.GetMapping;
 
@Controller
public class LoginController {
 
    @GetMapping("/login")
    public String login() {
        return "login";
    }
 
    @GetMapping("/")
    public String home() {
        return "home";
    }
}

创建home.html和login.html模板：

home.html:




<!DOCTYPE html>
<html xmlns="

Spring Security+Spring Boot实现登录认证以及权限认证

评论已关闭

推荐阅读