SpringSecurity5.7.11实现用户认证和记住我功能

package com.txc.securitydemo.config; import com.txc.securitydemo.service.UserService; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.Configuration; import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; import org.springframework.security.crypto.password.DelegatingPasswordEncoder; import org.springframework.security.crypto.password.PasswordEncoder; import org.springframework.security.web.SecurityFilterChain; import org.springframework.security.web.authentication.rememberme.JdbcTokenRepositoryImpl; import org.springframework.security.web.authentication.rememberme.PersistentTokenRepository; import javax.sql.DataSource; import java.util.HashMap; import java.util.Map; @Configuration public class SecurityConfig { //自定义登录逻辑 @Autowired private UserService userService; //自定义密码策略 @Bean PasswordEncoder passwordEncoder() { String encodingId = "bcrypt"; Map<String, PasswordEncoder> encoders = new HashMap(); encoders.put(encodingId, new BCryptPasswordEncoder(12)); return new DelegatingPasswordEncoder(encodingId, encoders); } @Autowired public void configureGlobal(AuthenticationManagerBuilder authManger) throws Exception { BCryptPasswordEncoder encoder = new BCryptPasswordEncoder(); authManger.userDetailsService(userService).passwordEncoder(encoder); } @Bean public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception { http .authorizeHttpRequests((auth) -> { try { auth .antMatchers("/login").permitAll() .antMatchers("/test").hasRole("manager") // 所有的请求 .anyRequest().authenticated() .and().rememberMe().tokenRepository(persistentTokenRepository()) .tokenValiditySeconds(60); } catch (Exception e) { throw new RuntimeException(e); } }) // 自定义登录页面地址 .formLogin() .loginPage("/login.html") .loginProcessingUrl("/login")//登录接口自定义，系统自动生成 .usernameParameter("username") .passwordParameter("password") .defaultSuccessUrl("/index.html") // 放行登录地址（访问登录地址无需已登录状态） .permitAll().and().csrf().disable(); //http.exceptionHandling().accessDeniedPage("/unauth.html"); return http.build(); } @Autowired private DataSource dataSource; //配置开启记住我功能 @Bean public PersistentTokenRepository persistentTokenRepository(){ JdbcTokenRepositoryImpl jdbcTokenRepository=new JdbcTokenRepositoryImpl(); jdbcTokenRepository.setDataSource(dataSource); return jdbcTokenRepository; } }