微服务技术系列教程（39）- SpringBoot -RBAC权限模型

<!-->spring-boot 整合security -->
<dependency>
  <groupId>org.springframework.boot</groupId>
  <artifactId>spring-boot-starter-security</artifactId>
</dependency>
<!-- springboot 整合mybatis框架 -->
<dependency>
  <groupId>org.mybatis.spring.boot</groupId>
  <artifactId>mybatis-spring-boot-starter</artifactId>
  <version>1.3.2</version>
</dependency>
<!-- alibaba的druid数据库连接池 -->
<dependency>
  <groupId>com.alibaba</groupId>
  <artifactId>druid-spring-boot-starter</artifactId>
  <version>1.1.9</version>
</dependency>
<dependency>
  <groupId>mysql</groupId>
  <artifactId>mysql-connector-java</artifactId>
</dependency>

# 配置freemarker
spring:
  freemarker:
    # 设置模板后缀名
    suffix: .ftl
    # 设置文档类型
    content-type: text/html
    # 设置页面编码格式
    charset: UTF-8
    # 设置页面缓存
    cache: false
    # 设置ftl文件路径
    template-loader-path:
      - classpath:/templates
  # 设置静态文件路径，js,css等
  mvc:
    static-path-pattern: /static/**
  ####整合数据库层
  datasource:
    name: test
    url: jdbc:mysql://127.0.0.1:3306/rbac_db
    username: root
    password: 123456
    # druid 连接池
    type: com.alibaba.druid.pool.DruidDataSource
    driver-class-name: com.mysql.jdbc.Driver

public interface UserMapper {
  // 查询用户信息
  @Select(" select * from sys_user where username = #{userName}")
  User findByUsername(@Param("userName") String userName);
  // 查询用户的权限
  @Select(" select permission.* from sys_user user" + " inner join sys_user_role user_role"
      + " on user.id = user_role.user_id inner join "
      + "sys_role_permission role_permission on user_role.role_id = role_permission.role_id "
      + " inner join sys_permission permission on role_permission.perm_id = permission.id where user.username = #{userName};")
  List<Permission> findPermissionByUsername(@Param("userName") String userName);
}

// 设置动态用户信息
@Service
public class MyUserDetailsService implements UserDetailsService {
    @Autowired
    private UserMapper userMapper;
    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        // 1.根据用户名称查询数据用户信息
        User user = userMapper.findByUsername(username);
        // 2.底层会根据数据库查询用户信息，判断密码是否正确
        // 3. 给用户设置权限
        List<Permission> listPermission = userMapper.findPermissionByUsername(username);
        System.out.println("username:" + username + ",对应权限:" + listPermission.toString());
        if (listPermission != null && listPermission.size() > 0) {
            // 定义用户权限
            List<GrantedAuthority> authorities = new ArrayList<GrantedAuthority>();
            for (Permission permission : listPermission) {
                authorities.add(new SimpleGrantedAuthority(permission.getPermTag()));
            }
            user.setAuthorities(authorities);
        }
        return user;
    }
}

@Component
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
  @Autowired
  private MyAuthenticationFailureHandler failureHandler;
  @Autowired
  private MyAuthenticationSuccessHandler successHandler;
  @Autowired
  private MyUserDetailsService myUserDetailsService;
  @Autowired
  private PermissionMapper permissionMapper;
  // 配置认证用户信息和权限
  protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    // // 添加admin账号
    // auth.inMemoryAuthentication().withUser("admin").password("123456").
    // authorities("showOrder","addOrder","updateOrder","deleteOrder");
    // // 添加userAdd账号
    // auth.inMemoryAuthentication().withUser("userAdd").password("123456").authorities("showOrder","addOrder");
    // 如果想实现动态账号与数据库关联 在该地方改为查询数据库
    auth.userDetailsService(myUserDetailsService).passwordEncoder(new PasswordEncoder() {
      // 加密的密码与数据库密码进行比对CharSequence rawPassword 表单字段 encodedPassword
      // 数据库加密字段
      public boolean matches(CharSequence rawPassword, String encodedPassword) {
        System.out.println("rawPassword:" + rawPassword + ",encodedPassword:" + encodedPassword);
        // 返回true 表示认证成功 返回fasle 认证失败
        return MD5Util.encode((String) rawPassword).equals(encodedPassword);
      }
      // 对表单密码进行加密
      public String encode(CharSequence rawPassword) {
        System.out.println("rawPassword:" + rawPassword);
        return MD5Util.encode((String) rawPassword);
      }
    });
  }
  // 配置拦截请求资源
  protected void configure(HttpSecurity http) throws Exception {
    ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry authorizeRequests = http
        .authorizeRequests();
    // 1.读取数据库权限列表
    List<Permission> listPermission = permissionMapper.findAllPermission();
    for (Permission permission : listPermission) {
      // 设置权限
      authorizeRequests.antMatchers(permission.getUrl()).hasAnyAuthority(permission.getPermTag());
    }
    authorizeRequests.antMatchers("/login").permitAll().antMatchers("/**").fullyAuthenticated().and().formLogin()
        .loginPage("/login").successHandler(successHandler).and().csrf().disable();
  }
  @Bean
  public static NoOpPasswordEncoder passwordEncoder() {
    return (NoOpPasswordEncoder) NoOpPasswordEncoder.getInstance();
  }
}

public class MD5Util {
  // 加盐
  private static final String SALT = "ylw";
  public static String encode(String password) {
    password = password + SALT;
    MessageDigest md5 = null;
    try {
      md5 = MessageDigest.getInstance("MD5");
    } catch (Exception e) {
      throw new RuntimeException(e);
    }
    char[] charArray = password.toCharArray();
    byte[] byteArray = new byte[charArray.length];
    for (int i = 0; i < charArray.length; i++)
      byteArray[i] = (byte) charArray[i];
    byte[] md5Bytes = md5.digest(byteArray);
    StringBuffer hexValue = new StringBuffer();
    for (int i = 0; i < md5Bytes.length; i++) {
      int val = ((int) md5Bytes[i]) & 0xff;
      if (val < 16) {
        hexValue.append("0");
      }
      hexValue.append(Integer.toHexString(val));
    }
    return hexValue.toString();
  }
  public static void main(String[] args) {
    System.out.println(MD5Util.encode("123456"));
  }
}

INSERT INTO `sys_role_permission` VALUES ('2', '3');