Spring Security 配置数据源 - 内存用户

dreamstar / 2024-01-23 / 原文

Spring Security支持多种数据源：内存，数据库，LDAP等。不同来源的数据被封装成一个UserDetailService接口的实例。任何实现了UserDetailService的对象都可以做认证数据源。

这里介绍3种内存数据的配置方式：默认，application.properties 配置，java 配置

1.项目启动时的默认用户

默认情况下，登录的用户名是 user ，密码则是项目启动时随机生成的字符串

2.application.properties配置内存数据源

在application.properties文件中配置，则项目启动时不再打出password，我们可以使用java/123登陆系统

spring.security.user.name=java
spring.security.user.password=123

3.两种Java配置方式2选1即可

3.1 Java方式配置内存数据 InMemoryUserDetailsManager，不加密方式

InMemoryUserDetailsManager 就是系统默认提供的 UserDetailsService 实例

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.provisioning.InMemoryUserDetailsManager;

@Configuration
public class SecurityConfiguration {

    @Bean
    public InMemoryUserDetailsManager userDetailsService() {
        
        UserDetails user = User.withDefaultPasswordEncoder()
                .username("user")
                .password("password")
                .roles("USER")
                .build();
        return new InMemoryUserDetailsManager(user);        
    }
}

View Code

3.2 Java方式配置内存数据 InMemoryUserDetailsManager，不加密方式

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.crypto.password.NoOpPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.provisioning.InMemoryUserDetailsManager;

@Configuration
public class SecurityConfiguration {

    @Bean
    PasswordEncoder passwordEncoder() {
        return NoOpPasswordEncoder.getInstance();
    }
    
    //准备内存测试用户
    @Bean
    protected UserDetailsService userDetailsService() {
        InMemoryUserDetailsManager manager = new InMemoryUserDetailsManager();
        manager.createUser(User.withUsername("java12").password("abc").roles("admin").build());
        manager.createUser(User.withUsername("test12").password("abcd").roles("user").build());
        return manager;
    }  
}

View Code

3.3 Java方式配置内存数据 AuthenticationManagerBuilder

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.crypto.password.NoOpPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    
    @Bean
    PasswordEncoder passwordEncoder() {
        return NoOpPasswordEncoder.getInstance();
    }

    //准备内存测试用户
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.inMemoryAuthentication()
        .withUser("java")
        .password("1234")
        .roles("admin")
        .and()
        .withUser("test")
        .password("1234")
        .roles("user");
    }
    
}