从零学习spring security（二）登录成功及失败处理

「爱情、让人受尽委屈。」 2021-09-29 09:04 544阅读 0赞

登录成功后我们需要实现AuthenticationSuccessHandler接口来处理我们的逻辑。当然可以继承它的实现类SavedRequestAwareAuthenticationSuccessHandler。  
登录失败后我们需要实现AuthenticationFailureHandler接口来处理我们的逻辑。当然可以继承它的实现类SimpleUrlAuthenticationFailureHandler。

/** * @ClassName: IAuthenticationFailHandler * @Description: 登录失败处理类 * @Author: zhbin * @CreateDate: 2019/7/8 17:02 * @Version: 1.0 */
    @Slf4j
    @Component
    //public class IAuthenticationFailHandler implements AuthenticationFailureHandler { 
    public class IAuthenticationFailHandler extends SimpleUrlAuthenticationFailureHandler { 
        @Autowired
        private SecurityProperties securityProperties;
        @Override
        public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response, AuthenticationException e) throws IOException, ServletException { 
    
            log.info("登录失败");
            if(LoginType.JSON.equals(securityProperties.getProperties().getLoginType())){ 
                response.setContentType("application/json;charset=UTF-8");
                response.getWriter().write(JSONObject.toJSONString(e));
            }else{ 
                super.onAuthenticationFailure(request,response,e);
            }
    
        }
    }

/** * @ClassName: IAuthenticationSuccessHandler * @Description: 登录成功处理类 * @Author: zhbin * @CreateDate: 2019/7/8 17:02 * @Version: 1.0 */
    @Slf4j
    @Component
    //public class IAuthenticationSuccessHandler implements AuthenticationSuccessHandler { 
    public class IAuthenticationSuccessHandler extends SavedRequestAwareAuthenticationSuccessHandler { 
    
        @Autowired
        private SecurityProperties securityProperties;
    
        @Override
        public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException { 
    
            log.info("登录成功");
            if(LoginType.JSON.equals(securityProperties.getProperties().getLoginType())){ 
                response.setContentType("application/json;charset=UTF-8");
                response.getWriter().write(JSONObject.toJSONString(authentication));
            }else{ 
                super.onAuthenticationSuccess(request,response,authentication);
            }
    
        }
    }

这里我们只是简单的判断了下如果请求是JSON方式则相应json内容，如果不是则会调用父类方法跳转页面。  
我们在BrowserConfig中配置登录成功及失败的处理方式即可。

@Configuration
    public class BrowserConfig extends WebSecurityConfigurerAdapter { 
    
        @Bean
        public PasswordEncoder passwordEncoder(){ 
    
            return new BCryptPasswordEncoder();
        }
    
        @Autowired
        private IAuthenticationSuccessHandler authentication;
    
        @Autowired
        private IAuthenticationFailHandler failHandler;
    
        @Autowired
        private SecurityProperties securityProperties;
        @Override
        protected void configure(HttpSecurity http) throws Exception { 
    
    
            http.formLogin()
                    .loginPage("/authentication/require")
                    .loginProcessingUrl("/authentication/form")
                    // 登录成功
                    .successHandler(authentication)
                    // 登录失败
                    .failureHandler(failHandler)
                    .and()
                    .authorizeRequests()
                    .antMatchers("/authentication/require",securityProperties.getProperties().getLoginPage()).permitAll()
                    .anyRequest()
                    .authenticated()
                    .and()
                    .csrf().disable();
        }
    }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L20wXzM3OTY4OTgy_size_16_color_FFFFFF_t_70]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L20wXzM3OTY4OTgy_size_16_color_FFFFFF_t_70]: /images/20210918/e8ce49312aba4b2492d7ebf3b45e33c3.png