概述：springsecurity这个东西太容易忘了，这里写点东西，避免忘掉

目录

第一步：引入依赖

第二步：创建user表

第三步：创建一个用户实体类（User）和一个用于访问用户数据的Repository接口

第四步：创建一个实现UserDetailsService接口的自定义用户详情服务类，用于从数据库中加载用户信息。

第五步：创建一个配置类来配置Spring Security。

第六步：创建一个简单的控制器类用于测试

第七步：编写一个简单的数据库初始化器类用于初始化用户信息

运行项目测试查看结果

---

第一步：引入依赖

pom文件

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd"><modelVersion>4.0.0</modelVersion><groupId>org.cyl</groupId><artifactId>spaceTutorial</artifactId><version>0.0.1-SNAPSHOT</version><name>Send</name><description>Send</description><properties><java.version>17</java.version><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding><project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding></properties><dependencyManagement><dependencies><dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-dependencies</artifactId><version>2.7.13</version><scope>import</scope><type>pom</type></dependency></dependencies></dependencyManagement><dependencies><dependency><groupId>org.projectlombok</groupId><artifactId>lombok</artifactId><version>1.18.30</version></dependency><dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-web</artifactId></dependency><!-- Spring Boot Starter Data JPA --><dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-data-jpa</artifactId></dependency><!-- Spring Boot Starter Security --><dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-security</artifactId></dependency><!-- MySQL Connector Java --><dependency><groupId>mysql</groupId><artifactId>mysql-connector-java</artifactId><version>8.0.33</version></dependency></dependencies>
<build><plugins><plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.8.0</version><configuration><compilerArgs><arg>--enable-preview</arg><arg>--add-modules=jdk.incubator.vector</arg></compilerArgs><compilerVersion>17</compilerVersion><source>17</source><target>17</target></configuration></plugin></plugins>
</build>
</project>

第二步：创建user表

CREATE TABLE users (id BIGINT AUTO_INCREMENT PRIMARY KEY,username VARCHAR(100) NOT NULL,password VARCHAR(255) NOT NULL,enabled TINYINT(1) DEFAULT 1,role VARCHAR(50)
);

第三步：创建一个用户实体类（User）和一个用于访问用户数据的Repository接口

User类

package org.cyl.spaceutils.pojo;import javax.persistence.*;
import java.io.Serializable;@Entity
@Table(name = "users")
public class User implements Serializable {@Id@GeneratedValue(strategy = GenerationType.IDENTITY)private Long id;@Column(name = "username")private String username;@Column(name = "password")private String password;@Column(name = "enabled")private boolean enabled;@Column(name = "role")private String role;// Getters and setterspublic Long getId() {return id;}public void setId(Long id) {this.id = id;}public String getUsername() {return username;}public void setUsername(String username) {this.username = username;}public String getPassword() {return password;}public void setPassword(String password) {this.password = password;}public boolean isEnabled() {return enabled;}public void setEnabled(boolean enabled) {this.enabled = enabled;}public String getRole() {return role;}public void setRole(String role) {this.role = role;}
}

Repository接口

public interface UserRepository extends JpaRepository<User, Long> {User findByUsername(String username);
}

第四步：创建一个实现UserDetailsService接口的自定义用户详情服务类，用于从数据库中加载用户信息。

实现类

package org.cyl.spaceutils.service;import org.cyl.spaceutils.pojo.User;
import org.cyl.spaceutils.repository.UserRepository;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.authority.AuthorityUtils;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;@Service
public class CustomUserDetailsService implements UserDetailsService {@Autowiredprivate UserRepository userRepository;@Overridepublic UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {User user = userRepository.findByUsername(username);if (user == null) {throw new UsernameNotFoundException("User not found with username: " + username);}return new org.springframework.security.core.userdetails.User(user.getUsername(), user.getPassword(), user.isEnabled(), true, true, true,AuthorityUtils.createAuthorityList(user.getRole()));}
}

第五步：创建一个配置类来配置Spring Security。

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {@Autowiredprivate CustomUserDetailsService userDetailsService;@Overrideprotected void configure(HttpSecurity http) throws Exception {http.authorizeRequests().antMatchers("/admin/**").hasRole("ADMIN").antMatchers("/user/**").hasRole("USER").anyRequest().authenticated().and().formLogin().and().logout().permitAll();}@Overrideprotected void configure(AuthenticationManagerBuilder auth) throws Exception {auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder());}@Beanpublic PasswordEncoder passwordEncoder() {return new BCryptPasswordEncoder();}
}

第六步：创建一个简单的控制器类用于测试

import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;@RestController
public class HomeController {@GetMapping("/")public String home() {return "Welcome to the home page!";}@GetMapping("/user")public String user() {return "Welcome user!";}@GetMapping("/admin")public String admin() {return "Welcome admin!";}
}

第七步：编写一个简单的数据库初始化器类用于初始化用户信息

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.CommandLineRunner;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.stereotype.Component;@Component
public class DatabaseInitializer implements CommandLineRunner {@Autowiredprivate UserRepository userRepository;@Autowiredprivate PasswordEncoder passwordEncoder;@Overridepublic void run(String... args) throws Exception {User user = new User();user.setUsername("user");user.setPassword(passwordEncoder.encode("password"));user.setRole("ROLE_USER");userRepository.save(user);User admin = new User();admin.setUsername("admin");admin.setPassword(passwordEncoder.encode("admin"));admin.setRole("ROLE_ADMIN");userRepository.save(admin);}
}

运行项目测试查看结果

启动时会增加数据到mysql里面

以ROLE_USER的身份登录

现在登录可能会出现用户被禁用的情况，将enabled设置为1即可

现在用admin账号登录

然后访问/user,出现不能访问，即可

访问/admin，查看

然后用user用户登录,记得先退出

访问/admin,出现无法访问的情况

访问/user，出现访问正常的情况

搞定