Spring Security 自动登录源码分析

朴灿烈づ我的快乐病毒、 2022-11-19 01:10 221阅读 0赞

# 1 RememberMeServices 源码解析 #

**描述：** 实现自动登录核心类。查看UsernamePasswordAuthenticationFilter（认证）过滤器。  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 1]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 2]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 3]  
**描述：** RememberMeServices 会创建token并且会存入cookie中。  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 4]  
**描述：** 创建token有两种方式，基于内存，基于数据库、这里看基于数据库。  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 5]  
**描述：** JdbcTokenRepositoryImpl该类封装了很多sql语句，用于操作token。第一条比较重要，建表语句。

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 6]

CREATE TABLE persistent_logins (
    	username VARCHAR ( 64 ) NOT NULL,
    	series VARCHAR ( 64 ) PRIMARY KEY,
    	token VARCHAR ( 64 ) NOT NULL,
    	last_used TIMESTAMP NOT NULL 
    )

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 7]  
**总结：** RememberMeServices 自动登录流程：  
(1) 认证成功  
(2) 创建token，写入cookie，存入数据库。  
(3) 带着有效cookie访问接口时，RememberMeAuthenticationFilter会通过cookie获取到用户信息，进而进行放行。

# 2 代码实现 #

## 2.1 配置文件修改 ##

**描述：** 配置PersistentTokenRepository  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 8]  
**描述：** 配置remember  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 9]

package com.rosh.security.config;
    
    import com.rosh.security.service.RoshUserDetailService;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.beans.factory.annotation.Qualifier;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
    import org.springframework.security.crypto.password.PasswordEncoder;
    import org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl;
    import org.springframework.security.web.authentication.rememberme.PersistentTokenRepository;
    
    import javax.sql.DataSource;
    
    /** * @Description: Spring Security 自定义配置类 * @Author: rosh * @Date: 2021/4/13 21:16 */
    @Configuration
    public class WebSecurityConfig extends WebSecurityConfigurerAdapter { 
    
    
        /** * 用户自定义认证 */
        @Autowired
        @Qualifier("roshUserDetailService")
        private RoshUserDetailService roshUserDetailService;
    
        /** * 数据源 */
        @Autowired
        private DataSource dataSource;
    
        /** * 配置JdbcTokenRepositoryImpl */
        @Bean
        public PersistentTokenRepository persistentTokenRepository() { 
            JdbcTokenRepositoryImpl jdbcTokenRepository = new JdbcTokenRepositoryImpl();
            jdbcTokenRepository.setDataSource(dataSource);
            return jdbcTokenRepository;
        }
    
    
        /** * 配置登录用户名、密码及角色 */
        @Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception { 
            auth.userDetailsService(roshUserDetailService).passwordEncoder(passwordEncoder());
        }
    
    
        /** * 配置加密方式，官方推荐加密方式为BCrypt */
        @Bean
        public PasswordEncoder passwordEncoder() { 
            return new BCryptPasswordEncoder();
        }
    
    
        /** * 自定义页面配置、登录访问配置 */
        @Override
        protected void configure(HttpSecurity http) throws Exception { 
    
            http.logout().logoutUrl("/logout").logoutSuccessUrl("/user/logout").permitAll();
    
    
            http.exceptionHandling().accessDeniedPage("/unauth.html");
            http.formLogin()
                    //配置登录页面
                    .loginPage("/login.html")
                    //登录访问路径
                    .loginProcessingUrl("/user/login").permitAll()
                    //登录成功访问接口
                    .defaultSuccessUrl("/success.html")
                    //登录失败访问的接口
                    .failureForwardUrl("/user/login/failed")
                    //配置url访问权限，登录url可以直接访问，不需要认证
                    .and().authorizeRequests().antMatchers("/login.html", "/user/login/failed").permitAll()
                    //当前用户必须有admin角色才能访问
                    .antMatchers("/admin/*").hasRole("admin")
                    //当前主体拥有admin、customer角色才能访问
                    .antMatchers("/customer/*").hasAnyRole("admin", "customer")
                    //其余url需要认证才能访问
                    .anyRequest().authenticated()
    
                    /** * remember 设置 ，token有效时间为3天 */
                    .and().rememberMe().tokenRepository(persistentTokenRepository()).tokenValiditySeconds(60 * 60 * 24 * 3).userDetailsService(roshUserDetailService)
                    //关闭csrf
                    .and().csrf().disable();
        }
    }

## 2.2 登录页面 ##

**描述：** name必须是remember-me  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 10]

## 2.3 测试 ##

访问接口：http://localhost:8888/admin/hello

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 11]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 12]  
退出浏览器，继续访问当前接口http://localhost:8888/admin/hello 依旧能访问  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 13]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70]: /images/20221022/eba6b94f92934040800005666474fc18.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 1]: /images/20221022/4fdf0a325d904622ab956b1043fb6dae.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 2]: /images/20221022/a060f790a22f40ffbb39f65402dccf00.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 3]: /images/20221022/6ab76cea9b5142ebb7bb66b56c713878.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 4]: /images/20221022/94ba74f837454087860b0781ddddc9c3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 5]: /images/20221022/3233f9d9f88b4a579f97e50ef207e9f3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 6]: /images/20221022/27a83923e0674111b90f74d8a9ab9e00.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 7]: /images/20221022/d3aa487683db4f18a720ef7a8dc1b746.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 8]: /images/20221022/f4621f5571664da4a3c76221628b636b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 9]: /images/20221022/da68f5149c474967ba98349381d64bda.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 10]: /images/20221022/666bf5e36cad47b786ed048155b6b1d9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 11]: /images/20221022/c0f0a78ecedc48c1bafd747e0ca7b031.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 12]: /images/20221022/1681d766a07941cf8d4a34c591ae8efe.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70 13]: /images/20221022/94374c9f9d2f495e8470c147633c4343.png