Security 自定义DaoAuthenticationProvider 实现手动验证

最新推荐文章于 2025-02-28 12:53:35 发布

qq_37749055

最新推荐文章于 2025-02-28 12:53:35 发布

阅读量5.9k

点赞数 4

分类专栏： java 文章标签： java security

本文链接：https://blog.youkuaiyun.com/qq_37749055/article/details/103615717

版权

首先在WebSecurityConfiguration 加上

   protected void configure(AuthenticationManagerBuilder auth) throws Exception {
	    	auth.authenticationProvider(new LoginAuthenticationProvider(loginService));
	                 
	    }

loginService 是UserDetailsService的类

然后写

package com.eca.mind.devops.interceptor;

import java.util.ArrayList;
import java.util.Collection;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

import org.springframework.security.authentication.BadCredentialsException;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import