登录  /  注册
首页 > 博客列表 > RBAC原则设计Friday权限管理系统（8）
博主信息
博文 98
粉丝 1
评论 0
访问量 77905
专题推荐
更多>
相关推荐
热门教程
更多>
相关教程
热门推荐
最新课程
最新下载
更多>
网站特效
网站源码
网站素材
前端模板
RBAC原则设计Friday权限管理系统（8）
阿杰
原创
262人浏览过

1、实现登录验证和鉴权

pom.xml

  1.         <!-- 实现登录验证和鉴权 -->
  2.         <dependency>
  3.             <groupId>org.springframework.boot</groupId>
  4.             <artifactId>spring-boot-starter-security</artifactId>
  5.         </dependency>
  6.         <dependency>
  7.             <groupId>com.alibaba</groupId>
  8.             <artifactId>fastjson</artifactId>
  9.             <version>1.2.56</version>
  10.         </dependency>

config/SecurityConfig

  1. /**
  2.  * spring security配置
  3.  * */
  5. @EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true)
  6. public class SecurityConfig extends WebSecurityConfigurerAdapter {
  8.     //认证失败处理类
  9.     @Autowired
  10.     private AuthenticationEntryPointImpl unauthorizedHandler;
  13.     @Override
  14.     protected void configure(HttpSecurity httpSecurity) throws Exception {
  15.         httpSecurity
  16.                 // csrf禁用，因为不使用session
  17.                 .csrf().disable()
  18.                 // 认证失败处理类
  19.                 .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()
  20.                 // 基于token,所以不需要session
  21.                 .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
  22.                 // 过滤请求
  23.                 .authorizeRequests()
  24.                 // 对于登录login允许匿名访问
  25.                 .antMatchers("/login","/profile/avatar/**").anonymous()
  26.                 .antMatchers(
  27.                         HttpMethod.GET,
  28.                         "/*.html",
  29.                         "/**/*.html",
  30.                         "/**/*.css",
  31.                         "/**/*.js"
  32.                 ).permitAll()
  33.                 .antMatchers("/profile/**").anonymous()
  34.                 // 除了这些，都要授权
  35.                 .anyRequest().authenticated()
  36.                 .and()
  37.                 .headers().frameOptions().disable();
  38.     }
  39. }

security/handle/AuthenticationEntryPointImpl

  1. /**
  2.  * 认证失败处理类返回未授权
  3.  * */
  5. @Component
  6. public class AuthenticationEntryPointImpl implements AuthenticationEntryPoint, Serializable {
  7.     private static final long serialVersionUID = -8970718410437077606L;
  9.     @Override
  10.     public void commence(HttpServletRequest request, HttpServletResponse response, AuthenticationException e) throws IOException {
  11.         int code = HttpStatus.UNAUTHORIZED;
  12.         String msg = StringUtils.format("请求访问：{}，认证失败，无法访问系统资源", request.getRequestURI());
  13.         ServletUtils.renderString(response, JSON.toJSONString(RestResult.error(code,msg)));
  14.     }
  15. }

security/service/UserDetailServiceImpl

  1. package edu.friday.common.security.service;
  3. import edu.friday.common.enums.UserStatus;
  4. import edu.friday.common.exception.BaseException;
  5. import edu.friday.common.security.LoginUser;
  6. import edu.friday.model.SysUser;
  7. import edu.friday.model.vo.SysUserVo;
  8. import edu.friday.service.SysUserService;
  9. import edu.friday.utils.BeanUtils;
  10. import edu.friday.utils.StringUtils;
  11. import org.slf4j.Logger;
  12. import org.slf4j.LoggerFactory;
  13. import org.springframework.beans.factory.annotation.Autowired;
  14. import org.springframework.security.core.userdetails.UserDetails;
  15. import org.springframework.security.core.userdetails.UserDetailsService;
  16. import org.springframework.security.core.userdetails.UsernameNotFoundException;
  17. import org.springframework.stereotype.Service;
  20. /**
  21.  * 用户验证处理
  22.  * */
  23. @Service
  24. public class UserDetailsServiceImpl implements UserDetailsService {
  25.     private static final Logger log = LoggerFactory.getLogger(UserDetailsServiceImpl.class);
  27.     @Autowired
  28.     private SysUserService userService;
  30.     @Autowired
  31.     private SysPermissionService permissionService;
  33.     @Override
  34.     public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
  35.         SysUser user = userService.selectUserByUserName(username);
  36.         if(StringUtils.isNull(user)){
  37.             log.info("登录用户：{} 不存在.",username);
  38.             throw new UsernameNotFoundException("登录用户：" + username + " 不存在");
  39.         } else if (UserStatus.DELETED.getCode().equals(user.getDelFlag())) {
  40.             log.info("登录用户：{} 已被删除.",username);
  41.             throw new BaseException("对不起，您的账号：" + username + "已被删除");
  42.         } else if (UserStatus.DISABLE.getCode().equals(user.getStatus())) {
  43.             log.info("登录用户：{} 已被停用.",username);
  44.             throw new BaseException("对不起，您的账号：" + username + "已被停用");
  45.         }
  46.         return createLoginUser(user);
  47.     }
  49.     public UserDetails createLoginUser(SysUser user){
  50.         SysUserVo sysUserVo = new SysUserVo();
  51.         BeanUtils.copyProperties(user,sysUserVo);
  52.         return new LoginUser(sysUserVo,permissionService.getMenuPermission(sysUserVo));
  53.     }
  54. }

security/LoginUser

  1. package edu.friday.common.security;
  3. import com.fasterxml.jackson.annotation.JsonIgnore;
  4. import edu.friday.model.vo.SysUserVo;
  5. import lombok.AllArgsConstructor;
  6. import lombok.Data;
  7. import lombok.NoArgsConstructor;
  8. import org.springframework.security.core.GrantedAuthority;
  9. import org.springframework.security.core.userdetails.UserDetails;
  11. import java.util.Collection;
  12. import java.util.Set;
  14. @Data
  15. @NoArgsConstructor
  16. @AllArgsConstructor
  17. public class LoginUser implements UserDetails {
  18.     private static final long serialVersionUID = 1L;
  20.     /**
  21.      *  用户唯一标识
  22.      * */
  23.     private String token;
  25.     /**
  26.      * 登录时间
  27.      * */
  28.     private Long loginTime;
  30.     /**
  31.      * 过期时间
  32.      * */
  33.     private Long expireTime;
  35.     /**
  36.      * 登录IP地址
  37.      * */
  38.     private String ipaddr;
  40.     /**
  41.      * 登录地点
  42.      * */
  43.     private String loginLocation;
  45.     /**
  46.      * 浏览器类型
  47.      * */
  48.     private String browser;
  50.     /**
  51.      * 操作系统
  52.      * */
  53.     private String os;
  55.     /**
  56.      * 权限列表
  57.      * */
  58.     private Set<String> permissions;
  60.     /**
  61.      * 用户信息
  62.      * */
  63.     private SysUserVo user;
  65.     public LoginUser(SysUserVo user, Set<String> permissions) {
  66.         this.user = user;
  67.         this.permissions = permissions;
  68.     }
  70.     @Override
  71.     public Collection<? extends GrantedAuthority> getAuthorities() {
  72.         return null;
  73.     }
  75.     @JsonIgnore
  76.     @Override
  77.     public String getPassword() {
  78.         return null;
  79.     }
  81.     @Override
  82.     public String getUsername() {
  83.         return null;
  84.     }
  86.     /**
  87.      * 账户是否过期，过期无法验证
  88.      * */
  89.     @Override
  90.     public boolean isAccountNonExpired() {
  91.         return false;
  92.     }
  94.     /**
  95.      * 指定用户是否解锁，锁定的用户无法进行身份验证
  96.      * */
  97.     @JsonIgnore
  98.     @Override
  99.     public boolean isAccountNonLocked() {
  100.         return false;
  101.     }
  103.     /**
  104.      * 指示是否已过期的用户的凭据(密码),过期的凭据防止认证
  105.      *
  106.      * @return
  107.      */
  108.     @JsonIgnore
  109.     @Override
  110.     public boolean isCredentialsNonExpired() {
  111.         return false;
  112.     }
  114.     /**
  115.      * 是否可用 ,禁用的用户不能身份验证
  116.      *
  117.      * @return
  118.      */
  119.     @Override
  120.     public boolean isEnabled() {
  121.         return false;
  122.     }
  123. }

service/impl/SysUserServiceImpl

  1.     /**
  2.      * 通过用户名称查找用户
  3.      * @param userName 用户名
  4.      * return 用户对象信息
  5.      * */
  6.     @Override
  7.     public SysUser selectUserByUserName(String userName) {
  8.         SysUser sysUser = new SysUser();
  9.         sysUser.setUserName(userName);
  10.         sysUser.setDelFlag("0");
  11.         Example<SysUser> example = Example.of(sysUser);
  12.         return findOne(example);
  13.     }

security/service/SysPermissionService

  1. package edu.friday.common.security.service;
  3. import edu.friday.model.vo.SysUserVo;
  4. import edu.friday.service.SysMenuService;
  5. import edu.friday.service.SysRoleService;
  6. import org.springframework.beans.factory.annotation.Autowired;
  7. import org.springframework.stereotype.Component;
  9. import java.util.HashSet;
  10. import java.util.Set;
  12. @Component
  13. public class SysPermissionService {
  14.     @Autowired
  15.     private SysRoleService roleService;
  17.     @Autowired
  18.     private SysMenuService menuService;
  20.     /**
  21.      * 获取角色权限
  22.      * */
  23.     public Set<String> getRolePermission(SysUserVo user){
  24.         Set<String> roles = new HashSet<String>();
  25.         // 管理员拥有所有权限
  26.         if(user.isAdmin()){
  27.             roles.add("admin");
  28.         }else{
  29.             roles.addAll(roleService.selectRolePermissionByUserId(user.getUserId()));
  30.         }
  31.         return roles;
  32.     }
  34.     /**
  35.      * 获取菜单数据权限
  36.      *
  37.      * @param user 用户信息
  38.      * return 菜单权限信息
  39.      * */
  40.     public Set<String> getMenuPermission(SysUserVo user){
  41.         Set<String> roles = new HashSet<String>();
  42.         // 管理员拥有所有权限
  43.         if(user.isAdmin()){
  44.             roles.add("*:*:*");
  45.         }else{
  46.             roles.addAll(menuService.selectMenuPermsByUserId(user.getUserId()));
  47.         }
  48.         return roles;
  49.     }
  50. }

service/impl/SysRoleServiceImpl

  1.     @Override
  2.     public Set<String> selectRolePermissionByUserId(Long userId) {
  3.         List<SysRole> perms = sysRoleRepository.selectRoleByUserId(userId);
  4.         Set<String> permsSet = new HashSet<>();
  6.         for (SysRole perm:perms) {
  7.             if(StringUtils.isNotNull(perm)){
  8.                 permsSet.addAll(Arrays.asList(perm.getRoleKey().trim().split(",")));
  9.             }
  10.         }
  11.         return permsSet;
  12.     }

service/impl/SysMenuServiceImpl

  1.     /**
  2.      * 根据用户id查询权限
  3.      * @param userId 用户id
  4.      *
  5.      * @return 权限列表
  6.      * */
  7.     @Override
  8.     public Set<String> selectMenuPermsByUserId(Long userId) {
  9.         List<String> perms = sysMenuRepository.selectMenuPermsByUserId(userId);
  10.         Set<String>  permsSet = new HashSet<>();
  11.         for (String perm:perms){
  12.             if(StringUtils.isNotEmpty(perm)){
  13.                 permsSet.addAll(Arrays.asList(perm.trim().split(",")));
  14.             }
  15.         }
  16.         return permsSet;
  17.     }

repository/custom/SysMenuRepository

  1. package edu.friday.repository.custom;
  3. import edu.friday.model.SysMenu;
  4. import org.springframework.data.jpa.repository.JpaRepository;
  5. import org.springframework.data.jpa.repository.Query;
  6. import org.springframework.data.repository.query.Param;
  8. import java.util.List;
  10. public interface SysMenuRepository extends JpaRepository<SysMenu,Long> {
  11.     final String JOIN_ROLE_MENU = " left join sys_role_menu rm on m.menu_id = rm.menu_id ";
  12.     final String JOIN_USER_ROLE = " left join sys_user_role ur on rm.role_id = ur.role_id ";
  14.     @Query(value = " select distinct m.perms from sys_menu m" + JOIN_ROLE_MENU + JOIN_USER_ROLE
  15.     + " where ur.user_id = :userId", nativeQuery = true)
  16.     List<String> selectMenuPermsByUserId(@Param("userId") Long userId);
  17. }

本博文版权归博主所有，转载请注明地址！如有侵权、违法，请联系admin@php.cn举报处理！
全部评论 文明上网理性发言，请遵守新闻评论服务协议
0条评论
作者最新博文
关于我们 免责申明 意见反馈 讲师合作 广告合作 最新更新
php中文网：公益在线php培训，帮助PHP学习者快速成长！
关注服务号 技术交流群
app下载
PHP中文网订阅号
每天精选资源文章推送
PHP中文网APP
随时随地碎片化学习
PHP中文网抖音号
发现有趣的

Copyright 2014-2025 https://www.php.cn/ All Rights Reserved | php.cn | 湘ICP备2023035733号

  • PHP学习

  • 技术支持

  • 返回顶部
    • 登录PHP中文网，和优秀的人一起学习！
    全站2000+教程免费学
    微信扫码登录