spring security部分源码分析过滤器加载流程

最新推荐文章于 2024-07-07 15:55:40 发布

Chris_Chris_

最新推荐文章于 2024-07-07 15:55:40 发布

阅读量273

点赞数 1

分类专栏：框架 # 认证文章标签： spring java spring boot

本文链接：https://blog.youkuaiyun.com/weixin_41029286/article/details/124989586

版权

过滤器链加载流程

在引入的springframework.boot.autoconfigure的包中的spring.factories中注入了

//过滤器自动配置
org.springframework.boot.autoconfigure.security.servlet.SecurityFilterAutoConfiguration

进入这个类

@Configuration(proxyBeanMethods = false)
@ConditionalOnWebApplication(type = Type.SERVLET)
//SecurityProperties中定义了默认用户名密码
@EnableConfigurationProperties(SecurityProperties.class)
@ConditionalOnClass({
    AbstractSecurityWebApplicationInitializer.class, SessionCreationPolicy.class })
@AutoConfigureAfter(SecurityAutoConfiguration.class)
public class SecurityFilterAutoConfiguration {
   
	//...
}

这个类加载完成后加载SecurityAutoConfiguration

@Configuration(proxyBeanMethods = false)
@ConditionalOnClass(DefaultAuthenticationEventPublisher.class)
@EnableConfigurationProperties(SecurityProperties.class)
@Import({
    SpringBootWebSecurityConfiguration.class, WebSecurityEnablerConfiguration.class,
		SecurityDataConfiguration.class })
public class SecurityAutoConfiguration {
   

	@Bean
	@ConditionalOnMissingBean(AuthenticationEventPublisher.class)
	public DefaultAuthenticationEventPublisher authenticationEventPublisher(ApplicationEventPublisher publisher) {
   
		return new DefaultAuthenticationEventPublisher(publisher);
	}

}

SecurityAutoConfiguration 导入了WebSecurityEnablerConfiguration web安全启动配置类

@Configuration(proxyBeanMethods = false)
@ConditionalOnBean(WebSecurityConfigurerAdapter.class)
@ConditionalOnMissingBean(name = BeanIds.SPRING_SECURITY_FILTER_CHAIN)
@ConditionalOnWebApplication(type = ConditionalOnWebApplication.Type.SERVLET)
@EnableWebSecurity
public class WebSecurityEnablerConfiguration {
   

}

@EnableWebSecurity注解开启了Security安全功能

@Retention(value = java.lang.annotation.RetentionPolicy.RUNTIME)
@Target(value = {
    java.lang.annotation.ElementType.TYPE })
@Documented
@Import({
    WebSecurityConfiguration.class,
		SpringWebMvcImportSelector.class,
		OAuth2ImportSelector.class })
@EnableGlobalAuthentication
@Configuration
public @interface EnableWebSecurity {
   

	/**
	 * Controls debugging support for Spring Security. Default is false.
	 * @return if true, enables debug support with Spring Security
	 */