Spring Security 5.7.x及更高版本中配置多个AuthenticationProvider

最新推荐文章于 2025-06-23 22:29:04 发布

原创

最新推荐文章于 2025-06-23 22:29:04 发布 · 966 阅读

7 ·

CC 4.0 BY-SA版权

文章标签：

#spring #java #后端

SpringBoot2.7.x版本中SpringSecurity账号和手机验证码登录多重认证实践

SecurityConfig配置

@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
@Configuration
public class SecurityConfig {

	@Autowired
	private AuthenticationEntryPointImpl authenticationEntryPoint;

	@Autowired
	private RestfulAccessDeniedHandler accessDeniedHandler;

	@Autowired
	private UserDetailsService userDetailsService;

	@Autowired
	private JwtAuthenticationFilter jwtAuthenticationFilter;

	@Autowired
	private SmsAuthenticationProvider smsAuthenticationProvider;
	/**
	 * 访问路径白名单
	 */
	private static final String[] WHITE_PATH = new String[] { "/login/xx", "/login", "/register/**",
			"/send/sms/**", };

	/**
	 * get方式访问路径白名单
	 */
	private static final String[] GET_WHITE_PATH = new String[] { "/user/list" };
	
	private DaoAuthenticationProvider daoAuthenticationProvider() {
		DaoAuthenticationProvider daoAuthenticationProvider = new DaoAuthenticationProvider();
		daoAuthen