From 177249c76aeea0b4bf8d8816d4994e3b445b45ce Mon Sep 17 00:00:00 2001 From: huanghongfa <huanghongfa123456> Date: 星期四, 02 九月 2021 10:39:34 +0800 Subject: [PATCH] Merge remote-tracking branch 'origin/zzj' into zzj --- springcloud_k8s_panzhihuazhihuishequ/auth/src/main/java/com/panzhihua/auth/config/SecurityConfig.java | 76 ++++++++++++++++++-------------------- 1 files changed, 36 insertions(+), 40 deletions(-) diff --git a/springcloud_k8s_panzhihuazhihuishequ/auth/src/main/java/com/panzhihua/auth/config/SecurityConfig.java b/springcloud_k8s_panzhihuazhihuishequ/auth/src/main/java/com/panzhihua/auth/config/SecurityConfig.java index 1b0e22a..02ad139 100644 --- a/springcloud_k8s_panzhihuazhihuishequ/auth/src/main/java/com/panzhihua/auth/config/SecurityConfig.java +++ b/springcloud_k8s_panzhihuazhihuishequ/auth/src/main/java/com/panzhihua/auth/config/SecurityConfig.java @@ -1,7 +1,7 @@ package com.panzhihua.auth.config; +import javax.annotation.Resource; -import com.panzhihua.auth.handel.*; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import org.springframework.security.authentication.AuthenticationManager; @@ -12,10 +12,14 @@ import org.springframework.security.config.http.SessionCreationPolicy; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; -import javax.annotation.Resource; +import com.panzhihua.auth.handel.AjaxAuthenticationEntryPoint; +import com.panzhihua.auth.handel.UserAuthenticationProvider; +import com.panzhihua.auth.handel.UserLoginFailureHandler; +import com.panzhihua.auth.handel.UserLogoutSuccessHandler; /** * SpringSecurity配置类 + * * @Author youcong */ @Configuration @@ -27,24 +31,28 @@ @Resource private UserAuthenticationProvider userAuthenticationProvider; - + public static void main(String[] args) { + BCryptPasswordEncoder bCryptPasswordEncoder = new BCryptPasswordEncoder(); + String encode = bCryptPasswordEncoder.encode("123456"); + System.out.println(encode); + } /** * 加密方式 + * * @Author youcong */ @Bean - public BCryptPasswordEncoder bCryptPasswordEncoder(){ + public BCryptPasswordEncoder bCryptPasswordEncoder() { return new BCryptPasswordEncoder(); } - /** * 配置登录验证逻辑 */ @Override - protected void configure(AuthenticationManagerBuilder auth){ - //这里可启用我们自己的登陆验证逻辑 + protected void configure(AuthenticationManagerBuilder auth) { + // 这里可启用我们自己的登陆验证逻辑 auth.authenticationProvider(userAuthenticationProvider); } @@ -56,52 +64,40 @@ */ @Bean @Override - public AuthenticationManager authenticationManagerBean() throws Exception - { + public AuthenticationManager authenticationManagerBean() throws Exception { return super.authenticationManagerBean(); } + /** * 配置security的控制逻辑 + * * @Author youcong - * @Param http 请求 + * @Param http 请求 */ @Override protected void configure(HttpSecurity http) throws Exception { - http.authorizeRequests() - .anyRequest().permitAll() - .and() - // 配置登录成功自定义处理类 - .formLogin() -// .successHandler(new UserLoginSuccessHandler()) - // 配置登录失败自定义处理类 - .failureHandler(new UserLoginFailureHandler()) - .and() - // 配置登出地址 - .logout() - .logoutUrl("/login/userLogout") - // 配置用户登出自定义处理类 - .logoutSuccessHandler(new UserLogoutSuccessHandler()) - .and() - // 开启跨域 - .cors() - //异常处理(权限拒绝、登录失效等) - .and().exceptionHandling() - .authenticationEntryPoint(new AjaxAuthenticationEntryPoint())//匿名用户访问无权限资源时的异常处理; - .and() - // 取消跨站请求伪造防护 - .csrf().disable(); + http.authorizeRequests().anyRequest().permitAll().and() + // 配置登录成功自定义处理类 + .formLogin() + // .successHandler(new UserLoginSuccessHandler()) + // 配置登录失败自定义处理类 + .failureHandler(new UserLoginFailureHandler()).and() + // 配置登出地址 + .logout().logoutUrl("/login/userLogout") + // 配置用户登出自定义处理类 + .logoutSuccessHandler(new UserLogoutSuccessHandler()).and() + // 开启跨域 + .cors() + // 异常处理(权限拒绝、登录失效等) + .and().exceptionHandling().authenticationEntryPoint(new AjaxAuthenticationEntryPoint())// 匿名用户访问无权限资源时的异常处理; + .and() + // 取消跨站请求伪造防护 + .csrf().disable(); // 基于Token不需要session http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS); // 禁用缓存 http.headers().cacheControl(); - - } - - public static void main(String[] args) { - BCryptPasswordEncoder bCryptPasswordEncoder=new BCryptPasswordEncoder(); - String encode = bCryptPasswordEncoder.encode("123456"); - System.out.println(encode); } } -- Gitblit v1.7.1