🥛 基于内存数据库的身份认证和角色授权

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-data-jpa</artifactId>
</dependency>

<dependency>
    <groupId>org.hsqldb</groupId>
    <artifactId>hsqldb</artifactId>
    <scope>runtime</scope>
</dependency>

@Configuration
@EnableWebSecurity // 开启Spring Security的功能
@EnableGlobalMethodSecurity(prePostEnabled=true)
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

    @Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }
}

@Entity
public class UserInfo {

    public enum Role{
        admin, normal
    }
	
    @Id // 主键
    @GeneratedValue // 自增
    private long uid;

    private String username;
    private String password;

    @Enumerated(EnumType.STRING)
    private Role role;

    // Getter And Setter
}

public interface UserInfoRepository extends JpaRepository<UserInfo,Long> {

    public UserInfo findByUsername(String username);

}

public interface UserInfoService {

    public UserInfo findByUsername(String username);

}

@Service
public class UserInfoServiceImpl implements UserInfoService {

    @Autowired
    private UserInfoRepository userInfoRepository;

    @Override
    public UserInfo findByUsername(String username) {
        return userInfoRepository.findByUsername(username);
    }

}

import org.springframework.security.core.userdetails.UserDetailsService;

......

@Service
public class CustomUserDetailService implements UserDetailsService {

    @Autowired
    private UserInfoService userInfoService;
    @Autowired
    private PasswordEncoder passwordEncoder;

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        System.out.println("CustomUserDetailService.loadUserByUsername()");
        // 通过 username 获取用户信息
        UserInfo userInfo = userInfoService.findByUsername(username);
        if(userInfo == null)
            throw new UsernameNotFoundException("not found");


        // 定义权限列表
        List<GrantedAuthority> authorities = new ArrayList<>();
        // 用户所拥有的权限 必须以 ROLE_ 开头
        authorities.add(new SimpleGrantedAuthority("ROLE_" + userInfo.getRole().name()));

        // 这里的密码需要使用PasswordEncoder进行加密，否则会报错
        User userDetails = new User(userInfo.getUsername(), passwordEncoder.encode(userInfo.getPassword()), authorities);
        return userDetails;
    }
}

@RestController
public class HelloController {

    @RequestMapping("/hello")
    public String hello() {
        return "Hello,Spring Security";
    }

    @RequestMapping("/helloAdmin")
    @PreAuthorize("hasAnyRole('admin')") // 只允许角色 admin 访问
    public String helloAdmin() {
        return "Hello,admin";
    }

    @RequestMapping("/helloUser")
    @PreAuthorize("hasAnyRole('admin','normal')") // 允许角色 admin 和 normal 访问
    public String helloUser() {
        return "Hello,user";
    }
}

@Service
public class DataInit {

    @Autowired
    UserInfoRepository userInfoRepository;

    @PostConstruct
    public void dataInit(){

        // 用户 admin
        UserInfo admin = new UserInfo();
        admin.setUsername("admin");
        admin.setPassword("123");
        admin.setRole(UserInfo.Role.admin);
        userInfoRepository.save(admin);

        // 用户 user
        UserInfo user = new UserInfo();
        user.setUsername("user");
        user.setPassword("123");
        user.setRole(UserInfo.Role.normal);
        userInfoRepository.save(user);
    }
}