package com.mzl.flower.config;
|
|
import com.fasterxml.jackson.databind.ObjectMapper;
|
import com.mzl.flower.config.security.handler.SelfAuthenticationFailureHandler;
|
import com.mzl.flower.config.security.handler.SelfAuthenticationSuccessHandler;
|
import com.mzl.flower.config.security.provider.*;
|
import com.mzl.flower.service.impl.*;
|
import org.springframework.beans.factory.annotation.Autowired;
|
import org.springframework.context.annotation.Bean;
|
import org.springframework.context.annotation.Configuration;
|
import org.springframework.context.annotation.Lazy;
|
import org.springframework.security.authentication.AuthenticationManager;
|
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
|
import org.springframework.security.config.http.SessionCreationPolicy;
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
import org.springframework.security.crypto.password.PasswordEncoder;
|
import org.springframework.security.oauth2.provider.ClientDetailsService;
|
import org.springframework.security.oauth2.provider.token.AuthorizationServerTokenServices;
|
|
@Configuration
|
@EnableWebSecurity
|
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
@Autowired
|
private ObjectMapper objectMapper;
|
|
@Autowired
|
private ClientDetailsService clientDetailsService;
|
|
@Lazy
|
@Autowired
|
private AuthorizationServerTokenServices defaultAuthorizationServerTokenServices;
|
|
@Autowired
|
private WebUserDetailsService webUserDetailsService;
|
|
@Autowired
|
private PartnerUserDetailsService partnerUserDetailsService;
|
|
@Autowired
|
private SupUserDetailsService supUserDetailsService;
|
|
@Autowired
|
private AdminUserDetailsService adminUserDetailsService;
|
|
@Autowired
|
private BaseUserDetailsService baseUserDetailsService;
|
|
@Autowired
|
private PhoneUserDetailsService phoneUserDetailsService;
|
|
@Autowired
|
private WechatUserDetailsService wechatUserDetailsService;
|
|
|
/**
|
* 注入AuthenticationManager接口，启用OAuth2密码模式
|
*
|
* @return
|
* @throws Exception
|
*/
|
@Bean
|
@Override
|
public AuthenticationManager authenticationManagerBean() throws Exception {
|
AuthenticationManager manager = super.authenticationManagerBean();
|
return manager;
|
}
|
|
/**
|
* 通过HttpSecurity实现Security的自定义过滤配置
|
*
|
* @param httpSecurity
|
* @throws Exception
|
*/
|
@Override
|
protected void configure(HttpSecurity httpSecurity) throws Exception {
|
httpSecurity
|
.requestMatchers().anyRequest()
|
.and()
|
.authorizeRequests()
|
.antMatchers("/oauth/**").permitAll();
|
}
|
|
@Bean
|
public PasswordEncoder passwordEncoder() {
|
return new BCryptPasswordEncoder();
|
}
|
|
@Bean
|
public SelfAuthenticationSuccessHandler selfAuthenticationSuccessHandler() {
|
return SelfAuthenticationSuccessHandler.builder()
|
.objectMapper(objectMapper)
|
.clientDetailsService(clientDetailsService)
|
.passwordEncoder(passwordEncoder())
|
.authorizationServerTokenServices(defaultAuthorizationServerTokenServices).build();
|
}
|
|
@Bean
|
public SelfAuthenticationFailureHandler selfAuthenticationFailureHandler() {
|
return SelfAuthenticationFailureHandler.builder().objectMapper(objectMapper).build();
|
}
|
|
@Override
|
public void configure(AuthenticationManagerBuilder auth) {
|
auth.authenticationProvider(webAuthenticationProvider());
|
auth.authenticationProvider(adminAuthenticationProvider());
|
auth.authenticationProvider(userIdAuthenticationProvider());
|
auth.authenticationProvider(partnerAuthenticationProvider());
|
auth.authenticationProvider(supAuthenticationProvider());
|
auth.authenticationProvider(phoneAuthenticationProvider());
|
}
|
|
@Bean
|
public PartnerAuthenticationProvider partnerAuthenticationProvider() {
|
PartnerAuthenticationProvider provider = new PartnerAuthenticationProvider();
|
provider.setUserDetailsService(partnerUserDetailsService);
|
provider.setHideUserNotFoundExceptions(false);
|
provider.setPasswordEncoder(passwordEncoder());
|
return provider;
|
}
|
|
@Bean
|
public SupAuthenticationProvider supAuthenticationProvider() {
|
SupAuthenticationProvider provider = new SupAuthenticationProvider();
|
provider.setUserDetailsService(supUserDetailsService);
|
provider.setHideUserNotFoundExceptions(false);
|
provider.setPasswordEncoder(passwordEncoder());
|
return provider;
|
}
|
|
/**
|
* 普通登录认证
|
*
|
* @return
|
*/
|
@Bean
|
public WebAuthenticationProvider webAuthenticationProvider() {
|
WebAuthenticationProvider provider = new WebAuthenticationProvider();
|
provider.setUserDetailsService(webUserDetailsService);
|
provider.setHideUserNotFoundExceptions(false);
|
provider.setPasswordEncoder(passwordEncoder());
|
return provider;
|
}
|
|
/**
|
* 运营登录认证
|
*
|
* @return
|
*/
|
@Bean
|
public AdminAuthenticationProvider adminAuthenticationProvider() {
|
AdminAuthenticationProvider provider = new AdminAuthenticationProvider();
|
provider.setUserDetailsService(adminUserDetailsService);
|
provider.setHideUserNotFoundExceptions(false);
|
provider.setPasswordEncoder(passwordEncoder());
|
return provider;
|
}
|
|
@Bean
|
public UserIdAuthenticationProvider userIdAuthenticationProvider() {
|
UserIdAuthenticationProvider provider = new UserIdAuthenticationProvider();
|
provider.setUserDetailsService(wechatUserDetailsService);
|
provider.setHideUserNotFoundExceptions(false);
|
return provider;
|
}
|
|
/**
|
* 手机验证码登录认证
|
*
|
* @return
|
*/
|
@Bean
|
public PhoneAuthenticationProvider phoneAuthenticationProvider() {
|
PhoneAuthenticationProvider provider = new PhoneAuthenticationProvider();
|
provider.setUserDetailsService(phoneUserDetailsService);
|
provider.setHideUserNotFoundExceptions(false);
|
return provider;
|
}
|
|
}
|
