1

2

3

4

5

6

7

8

@Setter

@Getter

@NoArgsConstructor

public class Role {

    private Integer id;

    private String name;

    private String nameZh;

}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

@NoArgsConstructor

public class User implements UserDetails {

    private Integer id;

    private String username;

    private String password;

    private Boolean enabled;

    private Boolean locked;

    private List<Role> roles;

    @Override

    public Collection<? extends GrantedAuthority> getAuthorities() {

        List<SimpleGrantedAuthority> authorities = new ArrayList<>();

        for (Role role : roles) {

            authorities.add(new SimpleGrantedAuthority(role.getName()));

        }

        return authorities;

    }

    @Override

    public String getPassword() {

        return password;

    }

    @Override

    public String getUsername() {

        return username;

    }

    @Override

    public boolean isAccountNonExpired() {

        return true;

    }

    @Override

    public boolean isAccountNonLocked() {

        return !locked;

    }

    @Override

    public boolean isCredentialsNonExpired() {

        return true;

    }

    @Override

    public boolean isEnabled() {

        return enabled;

    }

    /** get、set 方法 **/

    public Integer getId() {

        return id;

    }

    public void setId(Integer id) {

        this.id = id;

    }

    public void setUsername(String username) {

        this.username = username;

    }

    public void setPassword(String password) {

        this.password = password;

    }

    public void setEnabled(Boolean enabled) {

        this.enabled = enabled;

    }

    public Boolean getLocked() {

        return locked;

    }

    public void setLocked(Boolean locked) {

        this.locked = locked;

    }

    public List<Role> getRoles() {

        return roles;

    }

    public void setRoles(List<Role> roles) {

        this.roles = roles;

    }

}

1

2

3

4

5

@Mapper

public interface UserMapper {

    User loadUserByUsername(String username);

    List<Role> getUserRolesByUid(Integer id);

}

1

2

3

4

5

6

7

8

9

10

11

12

<?xml version="1.0" encoding="UTF-8" ?>

<!DOCTYPE mapper

        PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"

        "http://mybatis.org/dtd/mybatis-3-mapper.dtd">

<mapper namespace="com.example.demo.mapper.UserMapper">

    <select id="loadUserByUsername" resultType="com.example.demo.bean.User">

        select * from user where username=#{username}

    </select>

    <select id="getUserRolesByUid" resultType="com.example.demo.bean.Role">

        select * from role r,user_role ur where r.id=ur.rid and ur.uid=#{id}

    </select>

</mapper>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

<build>

    <plugins>

        <plugin>

            <groupId>org.springframework.boot</groupId>

            <artifactId>spring-boot-maven-plugin</artifactId>

        </plugin>

    </plugins>

    <!-- 重新指明资源文件位置 -->

    <resources>

        <resource>

            <directory>src/main/java</directory>

            <includes>

                <include>**/*.xml</include>

            </includes>

        </resource>

        <resource>

            <directory>src/main/resources</directory>

        </resource>

    </resources>

</build>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

@Service

public class UserService implements UserDetailsService {

    @Autowired

    UserMapper userMapper;

    @Override

    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {

        User user = userMapper.loadUserByUsername(username);

        if (user == null) {

            throw new UsernameNotFoundException("账户不存在!");

        }

        user.setRoles(userMapper.getUserRolesByUid(user.getId()));

        return user;

    }

}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

@Configuration

public class MyWebSecurityConfig extends WebSecurityConfigurerAdapter {

    @Autowired

    UserService userService;

    // 指定密码的加密方式

    @SuppressWarnings("deprecation")

    @Bean

    PasswordEncoder passwordEncoder(){

        // 不对密码进行加密

        return NoOpPasswordEncoder.getInstance();

    }

    // 配置用户及其对应的角色

    @Override

    protected void configure(AuthenticationManagerBuilder auth) throws Exception {

        auth.userDetailsService(userService);

    }

    // 配置 URL 访问权限

    @Override

    protected  void configure(HttpSecurity http) throws Exception {

        http.authorizeRequests() // 开启 HttpSecurity 配置

            .antMatchers("/admin/**").hasRole("ADMIN") // admin/** 模式URL必须具备ADMIN角色

            .antMatchers("/user/**").access("hasAnyRole('ADMIN','USER')") // 该模式需要ADMIN或USER角色

            .antMatchers("/db/**").access("hasRole('ADMIN') and hasRole('DBA')") // 需ADMIN和DBA角色

            .anyRequest().authenticated() // 用户访问其它URL都必须认证后访问（登录后访问）

            .and().formLogin().loginProcessingUrl("/login").permitAll() // 开启表单登录并配置登录接口

            .and().csrf().disable(); // 关闭csrf

    }

}

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

@RestController

public class HelloController {

    @GetMapping("/admin/hello")

    public String admin() {

        return "hello admin";

    }

    @GetMapping("/user/hello")

    public String user() {

        return "hello user";

    }

    @GetMapping("/db/hello")

    public String db() {

        return "hello db";

    }

    @GetMapping("/hello")

    public String hello() {

        return "hello";

    }

}