Spring Security 登录认证 ​

import com.github.itdachen.boot.security.config.WebSecurityConfigurerAdapter;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.web.SecurityFilterChain;


@Configuration
@EnableWebSecurity
@EnableMethodSecurity(proxyTargetClass = true)
public class FlyNextWebSecurityConfiguration extends WebSecurityConfigurerAdapter {

    /***
     * WebSecurityConfigurerAdapter 被弃用
     * 替代方案: 申明 SecurityFilterChain 的 Bean
     */
    @Bean
    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {

        /**
         * 默认集成安全认证, 可重写 WebSecurityConfigurerAdapter 类中的方法
         */
        configure(http);

        return http.build();
    }

}

import com.github.itdachen.auth.manager.IUserMenuManager;
import com.github.itdachen.auth.mapper.IAuthenticationAuthorityMapper;
import com.github.itdachen.auth.mapper.IUserDetailsMapper;
import com.github.itdachen.boot.autoconfigure.app.AppInfoProperties;
import com.github.itdachen.boot.autoconfigure.app.PlatformInfoProperties;
import com.github.itdachen.boot.security.constants.LoginModeConstant;
import com.github.itdachen.boot.security.details.AbstractSecurityUserDetailsService;
import com.github.itdachen.boot.security.exception.BizSecurityException;
import com.github.itdachen.boot.security.user.CurrentUserInfo;
import com.github.itdachen.framework.context.constants.YesOrNotConstant;
import com.github.itdachen.framework.context.userdetails.UserInfoDetails;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;

import java.util.HashSet;
import java.util.List;
import java.util.Set;


@Service
public class AdminSecurityUserDetailsService extends AbstractSecurityUserDetailsService {
    private static final Logger logger = LoggerFactory.getLogger(AdminSecurityUserDetailsService.class);


    /** 根据登录账号查询用户信息 */
    @Override
    public CurrentUserInfo loadUserByUsername(String username) throws UsernameNotFoundException {
        /* 查询用户信息 */
        UserInfoDetails user = userDetailsMapper.loadUserByUsername(username);
        if (null == user) {
            logger.error("登录账号: " + username + " 不存在");
            throw new BizSecurityException("登录账号 " + username + " 不存在,请检查账号是否正确");
        }
        /* ... 登录其他信息除了 */

        return toVerifyUserDetails(user);
    }

    /** 根据电话号码查询用户信息 */
    @Override
    public CurrentUserInfo loadUserByMobile(String mobile) throws UsernameNotFoundException {
        /* 查询用户信息 */
        UserInfoDetails user = userDetailsMapper.loadUserByMobile(mobile);
        if (null == user) {
            logger.error("登录手机号: " + mobile + " 不存在");
            throw new BizSecurityException("登登录手机号录账号 " + mobile + " 不存在,请检查手机号是否正确！！！");
        }
        /* ... 登录其他信息除了 */

        return toVerifyUserDetails(user);
    }


    /** 获取权限信息 */
    @Override
    protected Set<String> getUserAuthority(UserInfoDetails userInfoDetails) {
        /* 查询用户权限 */
        List<String> userAuthority = authenticationAuthorityMapper.findUserAuthority(userInfoDetails.getAppId(), list);
        return new HashSet<>(userAuthority);
    }

}

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.stereotype.Component;
import com.github.itdachen.boot.security.validate.code.sms.SmsCodeSender;


@Component
public class DefaultSmsCodeSender implements SmsCodeSender {
    private static final Logger logger = LoggerFactory.getLogger(DefaultSmsCodeSender.class);

    @Override
    public void send(String mobile, String code) {
        logger.info("向手机 " + mobile + " 发送短信验证码: " + code);
        // 短信发送具体实现 ...
    }

}

import com.github.itdachen.boot.security.interceptor.FlyWebSecurityInterceptor;
import com.github.itdachen.boot.security.matchers.IAuthorizeRequestMatchers;
import com.github.itdachen.boot.security.resolvers.FlyUserDetailsMethodArgumentResolver;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Lazy;
import org.springframework.web.method.support.HandlerMethodArgumentResolver;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

import java.util.List;


/**
 * web 配置
 */
@Configuration
public class FlyNextWebMvcConfigurer implements WebMvcConfigurer {
    private static final Logger logger = LoggerFactory.getLogger(FlyNextWebMvcConfigurer.class);


    @Override
    public void addArgumentResolvers(List<HandlerMethodArgumentResolver> resolvers) {
        resolvers.add(currentUserMethodArgumentResolver());
    }

    /* 自定义解析器，用于获取登录用户信息 */
    @Bean
    public FlyUserDetailsMethodArgumentResolver currentUserMethodArgumentResolver() {
        return new FlyUserDetailsMethodArgumentResolver();
    }


}

import com.github.itdachen.framework.context.annotation.CurrentUser;
import com.github.itdachen.framework.context.userdetails.UserInfoDetails;
import org.springframework.stereotype.Controller;
import org.springframework.ui.ModelMap;
import org.springframework.web.bind.annotation.GetMapping;

/**
 * 通过注解的方式获取当前登录用户信息
 */
@Controller
public class DashboardController {


    @GetMapping("/user")
    public void home(@CurrentUser UserInfoDetails userInfoDetails) throws Exception {
        System.out.println(userInfoDetails.toString());
    }


}