{"id":3746,"date":"2019-01-16T18:04:48","date_gmt":"2019-01-16T10:04:48","guid":{"rendered":"http:\/\/www.xttblog.com\/?p=3746"},"modified":"2019-01-16T18:04:48","modified_gmt":"2019-01-16T10:04:48","slug":"spring-security-oauth2-%e8%87%aa%e5%ae%9a%e4%b9%89%e7%99%bb%e5%bd%95%e9%a1%b5%e9%9d%a2","status":"publish","type":"post","link":"https:\/\/www.xttblog.com\/?p=3746","title":{"rendered":"spring-security-oauth2 \u81ea\u5b9a\u4e49\u767b\u5f55\u9875\u9762"},"content":{"rendered":"

\n\t\u4e00\u4e2a\u7f51\u7ad9\u7684\u767b\u5f55\u9875\u9762\u5c31\u76f8\u5f53\u4e8e\u4e00\u4e2a\u4eba\u7684\u8138\uff0c\u8138\u5f80\u5f80\u7ed9\u4eba\u7559\u4e0b\u7b2c\u4e00\u5370\u8c61\u3002\u5370\u8c61\u597d\uff0c\u5c31\u4f1a\u5e26\u6765\u597d\u4f53\u9a8c\u3002\u597d\u4f53\u9a8c\u5c31\u53ef\u80fd\u6709\u66f4\u9ad8\u7684\u6d3b\u8dc3\u5ea6\uff0c\u6240\u4ee5\u50cf\u6211\u524d\u9762\u300aSpringBoot + spring-security-oauth2 \u5b9e\u73b0\u4eff\u5fae\u4fe1\uff0cQQ\uff0c\u5fae\u535a\u7b49\u6388\u6743\u8ba4\u8bc1<\/a>\u300b\u4e2d\u7684\u6f02\u4eae\u7684\u767b\u5f55\u9875\u9762\u8be5\u5982\u4f55\u5b9a\u5236\u5462\uff1f\u672c\u6587\uff0c\u6211\u4eec\u4e00\u8d77\u6765\u5b9e\u8df5\u4e00\u628a\u5427\u3002\n<\/p>\n

\n\t\u4e25\u683c\u6765\u8bf4\uff0c\u8fd9\u4e2a\u767b\u5f55\u9875\u9762\u7684\u5b9a\u5236\u5316\uff0c\u5e76\u4e0d\u7b97 spring-security-oauth2 \u4e2d\u7684\u529f\u80fd\uff0c\u800c\u662f\u9760 Spring Security \u6765\u5b9e\u73b0\u7684\u3002\u5728 OAuth2 \u4e2d\u6211\u4eec\u53ef\u4ee5\u9488\u5bf9\u4e0d\u540c\u7684\u5e94\u7528\u6709\u4e0d\u540c\u7684\u767b\u5f55\u9875\u9762\uff0c\u8fd9\u4e2a\u767b\u5f55\u9875\u9762\u7684\u4ee3\u7801\u5728 Server \u7aef\uff0c\u8ba4\u8bc1\u6211\u4eec\u53ef\u4ee5\u653e\u5728\u5ba2\u6237\u7aef Client \u4e2d\u3002\n<\/p>\n

\n\t\u5b9e\u73b0\u7684\u539f\u7406\u5f88\u7b80\u5355\uff0c\u5c31\u662f\u5f53\u6211\u4eec\u8981\u8bbf\u95ee\u672a\u6388\u6743\u7684\u9875\u9762\u65f6\uff0c\u8fdb\u884c\u62e6\u622a\uff0c\u901a\u8fc7 @EnableOAuth2Sso \u6ce8\u89e3\uff0c\u8ba9\u5b83\u901a\u8fc7 OAuth2 \u5230 AuthenticationProvider \u4e2d\u53bb\u8ba4\u8bc1\u3002\n<\/p>\n

\n\t\u9996\u5148\uff0c\u6211\u4eec\u8981\u5b9e\u73b0 WebSecurityConfigurerAdapter\uff0c\u914d\u7f6e\u54ea\u4e9b\u8d44\u6e90\u9700\u8981\u62e6\u622a\uff0c\u54ea\u4e9b\u4e0d\u9700\u8981\u8ba4\u8bc1\u3002\n<\/p>\n

\r\n@Configuration  \r\n@Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)  \r\n@EnableWebSecurity  \r\nstatic class SecurityConfig extends WebSecurityConfigurerAdapter {  \r\n    @Override  \r\n    protected void configure(AuthenticationManagerBuilder auth) throws Exception {  \r\n        auth.authenticationProvider(authenticationProvider);  \r\n    }\r\n    @Override  \r\n    protected void configure(HttpSecurity http) throws Exception {  \r\n      http.csrf().disable();  \r\n      http.antMatcher("\/oauth\/**")  \r\n        .authorizeRequests()  \r\n          .antMatchers("\/oauth\/index").permitAll()  \r\n          .antMatchers("\/oauth\/token").permitAll()  \r\n          .antMatchers("\/oauth\/check_token").permitAll()  \r\n          .antMatchers("\/oauth\/confirm_access").permitAll()  \r\n          .antMatchers("\/oauth\/error").permitAll()  \r\n          .antMatchers("\/oauth\/approvale\/confirm").permitAll()  \r\n          .antMatchers("\/oauth\/approvale\/error").permitAll()  \r\n          .anyRequest().authenticated()  \r\n        .and()  \r\n          .formLogin()  \r\n          .loginPage("\/oauth\/index")\r\n          .loginProcessingUrl("\/oauth\/login");  \r\n    }  \r\n    @Autowired  \r\n    private CustomAuthenticationProvider authenticationProvider;  \r\n}<\/pre>\n
\n\t\u767b\u5f55\u8ba4\u8bc1\u90e8\u5206\uff0c\u6211\u4eec\u901a\u8fc7\u5b9e\u73b0 AuthenticationProvider \u63a5\u53e3\uff0c\u5bf9\u63a5\u6570\u636e\u5e93\u6765\u5b9e\u73b0\u3002\n<\/p>\n
\r\n@Component\r\npublic class CustomAuthenticationProvider implements AuthenticationProvider {\r\n  @Autowired\r\n  private AccountService accountService;  \r\n  @Override\r\n  public Authentication authenticate(Authentication authentication) throws AuthenticationException {\r\n    String name = authentication.getName();\r\n    String password = authentication.getCredentials().toString();\r\n    Account account = accountService.authUser(name, password);\r\n    if (account == null) {\r\n      throw new AuthenticationCredentialsNotFoundException("Account is not found.");  \r\n    }\r\n    List<GrantedAuthority> grantedAuths = AuthorityUtils.createAuthorityList(account.getRoleString());\r\n    return new UsernamePasswordAuthenticationToken(name, password, grantedAuths);  \r\n  }  \r\n  @Override\r\n  public boolean supports(Class<?> authentication) {\r\n    return authentication.equals(UsernamePasswordAuthenticationToken.class);\r\n  }\r\n}<\/pre>\n
\n\t\u4e1a\u52a1\u903b\u8f91\u5c42 AccountService \u7684\u4ee3\u7801\u5982\u4e0b\uff1a\n<\/p>\n
\r\n@Service  \r\npublic class AccountService {  \r\n  @Autowired  \r\n  private AccountRepository accountRepository;  \r\n  public Account authUser(String userName, String password) {  \r\n    Account u = accountRepository.findByUserName(userName);  \r\n    if (u == null) {  \r\n      return null;  \r\n    }  \r\n    if (!u.getPassword().equals(password)) {  \r\n      return null;  \r\n    }  \r\n    return u;\r\n  }  \r\n}  <\/pre>\n
\n\tAccountRepository \u4ee3\u7801\u5982\u4e0b\uff1a\n<\/p>\n
\r\npublic interface AccountRepository {  \r\n  @Select("select id, user_name as userName, email, password, role_string as roleString from account where user_name=#{user_name}")  \r\n  Account findByUserName(String userName);  \r\n}  <\/pre>\n
\n\t\u5b9e\u4f53\u7c7b\uff1a\n<\/p>\n
\r\n@SuppressWarnings("serial")  \r\npublic class Account implements Serializable {  \r\n  private Integer id;  \r\n  private String userName;  \r\n  private String email;  \r\n  private String password;  \r\n  private String roleString;  \r\n  \/\/ ...setter\/getter  \r\n} <\/pre>\n
\n\tSQL\uff1a\n<\/p>\n
\r\nCREATE TABLE account  \r\n(  \r\n  id serial NOT NULL,  \r\n  user_name character varying(50),  \r\n  email character varying(255),  \r\n  password character varying(512),  \r\n  role_string character varying(50),  \r\n  CONSTRAINT account_pkey PRIMARY KEY (id)  \r\n);  \r\nINSERT INTO account(user_name, email, password, role_string)  \r\n    VALUES ('user', 'user@sample.com', '123', 'ROLE_USER');  <\/pre>\n
\n\t\u626b\u63cf\u5305\uff1a\n<\/p>\n
\r\n@Configuration  \r\n@MapperScan("com.rensanning")  \r\n@EnableTransactionManagement(proxyTargetClass = true)  \r\nstatic class RepositoryConfig {  \r\n}  <\/pre>\n
\n\t\u767b\u5f55\u9875\u9762\u4ee3\u7801\uff1a\n<\/p>\n
\r\n<!DOCTYPE html>\r\n<html>\r\n<head>\r\n  <meta charset="UTF-8">\r\n  <title>Insert title here<\/title>\r\n  <link rel="stylesheet" href="https:\/\/unpkg.com\/element-ui\/lib\/theme-chalk\/index.css">\r\n  <script src="https:\/\/cdn.bootcss.com\/vue\/2.5.17\/vue.min.js"><\/script>\r\n  <script src="https:\/\/unpkg.com\/element-ui\/lib\/index.js"><\/script>\r\n  <script src="https:\/\/cdn.bootcss.com\/jquery\/3.3.1\/jquery.js"><\/script>\r\n<\/head>\r\n<body>\r\n<div class="login-box" id="app" >\r\n   <el-form action="\/auth\/login" method="post" label-position="left" label-width="0px" class="demo-ruleForm login-container">\r\n    <h2 class="title" >\u7edf\u4e00\u8ba4\u8bc1\u767b\u5f55\u5e73\u53f0<\/h2>\r\n    <el-form-item>\r\n      <el-input type="text"  name="username" v-model="username" auto-complete="off" placeholder="\u8d26\u53f7"><\/el-input>\r\n    <\/el-form-item>\r\n    <el-form-item>\r\n      <el-input type="password" name="password" v-model="password" auto-complete="off" placeholder="\u5bc6\u7801"><\/el-input>\r\n    <\/el-form-item>\r\n    <el-form-item style="width:100%; text-align:center;">\r\n      <el-button type="primary" style="width:47%;" @click.native.prevent="reset">\u91cd \u7f6e<\/el-button>\r\n      <el-button type="primary" style="width:47%;" native-type="submit" :loading="loading">\u767b \u5f55<\/el-button>\r\n    <\/el-form-item>\r\n  <el-form>\r\n<\/div> \r\n<\/body>\r\n<script type="text\/javascript">\r\n  new Vue({\r\n    el : '#app',\r\n    data : {\r\n      loading: false,\r\n          username: 'admin',\r\n          password: '123'\r\n    },\r\n    methods : {\r\n      reset: function() {\r\n        this.username = 'admin'\r\n        this.password = '123'\r\n      }\r\n    }\r\n  })\r\n<\/script>\r\n<style lang="scss" scoped>\r\n  .login-container {\r\n    -webkit-border-radius: 5px;\r\n    border-radius: 5px;\r\n    -moz-border-radius: 5px;\r\n    background-clip: padding-box;\r\n    margin: 100px auto;\r\n    width: 320px;\r\n    padding: 35px 35px 15px 35px;\r\n    background: #fff;\r\n    border: 1px solid #eaeaea;\r\n    box-shadow: 0 0 25px #cac6c6;\r\n  }\r\n  .title {\r\n    margin: 0px auto 20px auto;\r\n    text-align: center;\r\n    color: #505458;\r\n  }\r\n<\/style>\r\n<\/html><\/pre>\n
\n\t\u6ce8\u610f\uff0cpom.xml \u4e2d\uff0c\u9700\u8981\u5f15\u5165 spring-boot-starter-thymeleaf\uff0c\u6700\u7ec8\u8fd0\u884c\u6548\u679c\uff1a\n<\/p>\n
\n\t\"OAuth2\n<\/p>\n
\n\t\u53c2\u8003\u8d44\u6599
\n<\/h2>\n