Question

我希望自己的'用户'实体登录应用程序。

我想知道的是，如果可能，如果可能，那么我应该在哪里采取预防措施，我应该考虑哪些要点以及需要修改哪些文件？

Answer 1

您可以创建扩展UserDetailsService的用户服务，然后创建UserDetail对象。

这与此类似。

创建用户类：

public class MyUserDetails implements UserDetails {

    private UserEntity user;
    private List<GrantedAuthority> authorities;

    /**
     * Constructor 
     */
    public MyUserDetails(UserEntity user) {
        this.user = user;
        this.authorities = Arrays.asList(new SimpleGrantedAuthority(user.getRole().name()));
    }

    /* (non-Javadoc)
     * @see org.springframework.security.core.userdetails.UserDetails#getAuthorities()
     */
    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        return authorities;
    }

    /* (non-Javadoc)
     * @see org.springframework.security.core.userdetails.UserDetails#getPassword()
     */
    @Override
    public String getPassword() {
        return user.getPassword();
    }

    /* (non-Javadoc)
     * @see org.springframework.security.core.userdetails.UserDetails#getUsername()
     */
    @Override
    public String getUsername() {
        return user.getEmail();
    }

    /* (non-Javadoc)
     * @see org.springframework.security.core.userdetails.UserDetails#isAccountNonExpired()
     */
    @Override
    public boolean isAccountNonExpired() {
        return true;
    }

    /* (non-Javadoc)
     * @see org.springframework.security.core.userdetails.UserDetails#isAccountNonLocked()
     */
    @Override
    public boolean isAccountNonLocked() {
        return !user.isLocked();
    }

    /* (non-Javadoc)
     * @see org.springframework.security.core.userdetails.UserDetails#isCredentialsNonExpired()
     */
    @Override
    public boolean isCredentialsNonExpired() {
        return !user.isExpired();
    }

    /* (non-Javadoc)
     * @see org.springframework.security.core.userdetails.UserDetails#isEnabled()
     */
    @Override
    public boolean isEnabled() {
        return user.isEnabled();
    }

    /**
     * @return the user
     */
    public UserEntity getUser() {
        return user;
    }

    /**
     * @param user the user to set
     */
    public void setUser(UserEntity user) {
        this.user = user;
    }
}

然后你应该创建你的UserDetailsService：

@Service
public class MyUserDetailsService implements UserDetailsService {

    @Autowired
    private UserRepository userRepo;

    /*
   * (non-Javadoc)
   * @see org.springframework.security.core.userdetails.UserDetailsService#loadUserByUsername(java.lang.String)
   */
    @Override
  public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        UserEntity user = userDao.findByEmail(username);

        if (user == null) {
                LOGGER.warn("User {} does not exist in our database", username);
                throw new UsernameNotFoundException("User not found.");
        }

        return new MyUserDetails(user);
  }
}

最后，您应该为Spring安全添加配置以使用您的服务：

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {  

    @Autowired
    private MyUserDetailsService userDetailsService;

    @Override
    public void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userDetailsService).passwordEncoder(new Md5PasswordEncoder());
    }
}

Answer 2

您需要通过实现UserDetailsService（如

）来创建用户类

  @Transactional
 @Override
 public UserDetails loadUserByUsername(String username)
   throws UsernameNotFoundException {

  MyUser details = userDao.getUser(username);
  Collection<simplegrantedauthority> authorities = new ArrayList<simplegrantedauthority>();
  SimpleGrantedAuthority userAuthority = new SimpleGrantedAuthority(
    "ROLE_USER");
  SimpleGrantedAuthority adminAuthority = new SimpleGrantedAuthority(
    "ROLE_ADMIN");
  if (details.getRole().equals("user"))
   authorities.add(userAuthority);
  else if (details.getRole().equals("admin")) {
   authorities.add(userAuthority);
   authorities.add(adminAuthority);
  }
  UserDetails user = new User(details.getUsername(),
    details.getPassword(), true, true, true, true, authorities);
  return user;
 }
}

然后配置spring以使用您的customuser对象...比如

<authentication-manager>
  <authentication-provider user-service-ref="authService">
  </authentication-provider>
 </authentication-manager>

可在Spring Custom User with DAO and Entity

找到完整示例

创建我自己的用户实体

2 个答案: