Question

我正在开发一个Spring-MVC项目，我有两种登录模式，一种是单人登录，另一种是团体登录。单人或个人登录现在可以使用，但我想实现组功能。由于组的数据库模型不同，我已在另一个数据库表中实现它。

用户只能通过一种方式登录。现在在后端，我想检查用户是否正在登录他的个人帐户或组帐户（唯一用户名）。我想知道如何在XML中实现多个dao身份验证方法，并根据登录重定向。两个模型都实现了UserDetails接口。这是security-context.xml

    <security:http create-session="ifRequired" use-expressions="true" auto-config="true" disable-url-rewriting="true">
        <security:form-login login-page="/" default-target-url="/canvas/list" always-use-default-target="false" authentication-failure-url="/denied.jsp" />
        <security:remember-me key="_spring_security_remember_me" user-service-ref="userDetailsService" token-validity-seconds="1209600" data-source-ref="dataSource"/>
        <security:logout logout-success-url="/" delete-cookies="JSESSIONID" invalidate-session="true" logout-url="/j_spring_security_logout"/>

<security:authentication-manager alias="authenticationManager">
        <security:authentication-provider user-service-ref="LoginServiceImpl">
           <security:password-encoder  ref="encoder"/>
        </security:authentication-provider>
    </security:authentication-manager>

    <beans:bean id="encoder"
                class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder">
        <beans:constructor-arg name="strength" value="11" />
    </beans:bean>

    <beans:bean id="daoAuthenticationProvider"
                class="org.springframework.security.authentication.dao.DaoAuthenticationProvider">
                <beans:property name="userDetailsService" ref="LoginServiceImpl"/>
               <beans:property name="passwordEncoder" ref="encoder"/>
    </beans:bean>

人物模型：

@Entity
@Table(name="person")
public class Person implements UserDetails{
   @Id
    @Column(name="id")
    @GeneratedValue(strategy = GenerationType.SEQUENCE,generator = "person_seq_gen")
    @SequenceGenerator(name = "person_seq_gen",sequenceName = "person_seq")
    private int id;
// Other stuff
}

GroupMembers模型：

@Entity
@Table(name="groupaccount")
public class GroupMembers implements UserDetails {

    private static final GrantedAuthority USER_AUTH = new SimpleGrantedAuthority("ROLE_GROUP");

    @Id
    @Column(name="memberid")
    @GeneratedValue(strategy = GenerationType.SEQUENCE,generator = "groupmembers_seq_gen")
    @SequenceGenerator(name = "groupmembers_seq_gen",sequenceName = "groupmembers_seq")
    private Long groupId;
//other stuff
}

LoginServiceImpl：

@Transactional
@Service("userDetailsService")
public class LoginServiceImpl implements UserDetailsService{

    @Autowired private PersonDAO personDAO;
    @Autowired private Assembler assembler;

    private static final GrantedAuthority USER_AUTH = new SimpleGrantedAuthority("ROLE_USER");

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException,DataAccessException {
        Person person = personDAO.findPersonByUsername(username.toLowerCase());
            if(person == null) { throw new UsernameNotFoundException("Wrong username or password");} //Never specify which one was it exactly
        return assembler.buildUserFromUserEntity(person);
    }
}

汇编程序：

@Service("assembler")
public class Assembler {
    @Transactional(readOnly = true)
    User buildUserFromUserEntity(Person userEntity){
        String username = userEntity.getUsername().toLowerCase();
        String password = userEntity.getPassword();

        // Long id = userEntity.getId();
        boolean enabled = userEntity.isEnabled();
        boolean accountNonExpired = userEntity.isAccountNonExpired();
        boolean credentialsNonExpired = userEntity.isCredentialsNonExpired();
        boolean accountNonLocked = userEntity.isAccountNonLocked();

        Collection<GrantedAuthority> authorities = new ArrayList<GrantedAuthority>();
        authorities.add(new SimpleGrantedAuthority("ROLE_USER"));

        User user = new User(username,password,enabled,accountNonExpired,credentialsNonExpired,accountNonLocked,authorities);
        return  user;
        }
}

我还需要一个LoginServiceImpl和汇编程序吗？如何在security-application-context.xml中为多个dao入口点定义bean。任何指针都是受欢迎的。谢谢。

Answer 1

是的，您需要单独的LoginServiceImpl和Assembler，因为您正在使用不同的Entity类用户和组进行两种身份验证。

更多信息，您需要使用不同的AuthenticationProvider和UserDetailsService进行用户和群组登录：

<security:authentication-manager alias="authenticationManager">
        <security:authentication-provider ref="userLoginAuthenticationProvider" />
        <security:authentication-provider ref="groupLoginAuthenticationProvider" />
</security:authentication-manager>

<!-- user login -->
<beans:bean id="userLoginAuthenticationProvider"
        class="org.springframework.security.authentication.dao.DaoAuthenticationProvider">
        <beans:property name="userDetailsService" ref="LoginServiceImpl"/>
        <beans:property name="passwordEncoder" ref="encoder"/>
</beans:bean>

<!-- group login -->
<beans:bean id="groupLoginAuthenticationProvider"
        class="org.springframework.security.authentication.dao.DaoAuthenticationProvider">
        <beans:property name="userDetailsService" ref="GroupLoginServiceImpl"/>
       <beans:property name="passwordEncoder" ref="encoder"/>
</beans:bean>

您必须实现在组存储库中调用存储库方法的GroupLoginServiceImpl。

请查看此demo project。它包含具有不同UserDetailService的身份验证，具体取决于提交的登录名。它还包含重定向到个人或组页面，具体取决于附加到身份验证的特定权限。只需输入mvn tomcat:run并浏览到http://localhost:8080/sandbox即可。祝你好运

Spring Security多个dao身份验证

1 个答案: