SpringBoot+ES项目：8. 业务开发 - 角色权限控制

╰+哭是因爲堅強的太久メ 2021-10-29 12:28 367阅读 0赞

**1. 权限控制原理**

利用Spring Security 实现角色控制  
主要实现类：LoginUrlAuthenticationEntryPoint

**2. 建立用户的Controller包并建立UserController类**

package com.xunwu.web.controller.user;
    
    @Controller
    public class UserController {
        @GetMapping("/user/login")
        public String loginPage(){
            return "user/login";
        }
        @GetMapping("/user/center")
        public String centerPage(){
            return "user/center";
        }
    }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2x0aGlyZG9uZWw_size_16_color_FFFFFF_t_70]

\*\*3. 建立角色控制器类LoginUrlEntryPoint \*\*

建立角色控制器类，用于存储用户角色控制相关信息

package com.xunwu.security;
    
    /**
     * 基于角色的登录入口控制器
     */
    public class LoginUrlEntryPoint extends LoginUrlAuthenticationEntryPoint {
    
        private static final String API_FREFIX = "/api";
        private static final String API_CODE_403 = "{\"code\": 403}";
        private static final String CONTENT_TYPE = "application/json;charset=UTF-8";
    
        private PathMatcher pathMatcher = new AntPathMatcher();
        private final Map<String, String> authEntryPointMap;
    
        public LoginUrlEntryPoint(String loginFormUrl) {
            super(loginFormUrl);
            authEntryPointMap = new HashMap<>();
    
            // 普通用户登录入口映射
            authEntryPointMap.put("/user/**", "/user/login");
            // 管理员登录入口映射
            authEntryPointMap.put("/admin/**", "/admin/login");
        }
    
        /**
         * 根据请求跳转到指定的页面，父类是默认使用loginFormUrl
         * @param request
         * @param response
         * @param exception
         * @return
         */
        @Override
        protected String determineUrlToUseForThisRequest(HttpServletRequest request, HttpServletResponse response,
                                                         AuthenticationException exception) {
            String uri = request.getRequestURI().replace(request.getContextPath(), "");
    
            for (Map.Entry<String, String> authEntry : this.authEntryPointMap.entrySet()) {
                if (this.pathMatcher.match(authEntry.getKey(), uri)) {
                    return authEntry.getValue();
                }
            }
            return super.determineUrlToUseForThisRequest(request, response, exception);
        }
    
       
      
    }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2x0aGlyZG9uZWw_size_16_color_FFFFFF_t_70 1]

**4. 将角色控制类LoginUrlEntryPoint 注入WebSecurityConfig**

@Bean
        public LoginUrlEntryPoint urlEntryPoint() {
            return new LoginUrlEntryPoint("/user/login");
        }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2x0aGlyZG9uZWw_size_16_color_FFFFFF_t_70 2]

1.  结果  
    我们未登陆状态访问user下地址时自动跳转至user/login

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2x0aGlyZG9uZWw_size_16_color_FFFFFF_t_70 3]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2x0aGlyZG9uZWw_size_16_color_FFFFFF_t_70]: /images/20211029/cd6ad20e69e24e569605246ee1d1bf42.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2x0aGlyZG9uZWw_size_16_color_FFFFFF_t_70 1]: /images/20211029/4296604b16d94cfba8996187e0225d90.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2x0aGlyZG9uZWw_size_16_color_FFFFFF_t_70 2]: /images/20211029/ab0d564bc42645839e993f04b2404766.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2x0aGlyZG9uZWw_size_16_color_FFFFFF_t_70 3]: /images/20211029/9adfa4de1de2458cba77b6fc0624d284.png