-- 創(chuàng)建數(shù)據(jù)庫
CREATE DATABASE `security-demo`;
USE `security-demo`;

-- 創(chuàng)建用戶表
CREATE TABLE `user`(
	`id` INT NOT NULL AUTO_INCREMENT PRIMARY KEY,  -- 主鍵ID
	`username` VARCHAR(50) DEFAULT NULL ,  -- 用戶名
	`password` VARCHAR(500) DEFAULT NULL, -- 密碼
	`enabled` BOOLEAN NOT NULL -- 是否啟用
);

CREATE UNIQUE INDEX `user_username_uindex` ON `user`(`username`); 

-- 插入用戶數(shù)據(jù)(密碼是 "password" )
INSERT INTO `user` (`username`, `password`, `enabled`) VALUES
('admin', '{bcrypt}$2a$10$GRLdNijSQMUvl/au9ofL.eDwmoohzzS7.rmNSJZ.0FxO/BTk76klW', TRUE),
('xiezhr', '{bcrypt}$2a$10$GRLdNijSQMUvl/au9ofL.eDwmoohzzS7.rmNSJZ.0FxO/BTk76klW', TRUE),
('xiaofan', '{bcrypt}$2a$10$GRLdNijSQMUvl/au9ofL.eDwmoohzzS7.rmNSJZ.0FxO/BTk76klW', TRUE);

<dependency>
    <groupId>org.projectlombok</groupId>
    <artifactId>lombok</artifactId>
    <version>1.18.32</version>
</dependency>

<dependency>
    <groupId>com.baomidou</groupId>
    <artifactId>mybatis-plus-spring-boot3-starter</artifactId>
    <version>3.5.5</version>
</dependency>

<dependency>
    <groupId>mysql</groupId>
    <artifactId>mysql-connector-java</artifactId>
    <version>8.0.33</version>
</dependency>

<dependencies>
    <!-- web依賴-->
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>
    <!--SpringSecurity 依賴-->
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
        <version>3.2.10</version>
    </dependency>
    <!--lombok依賴-->
    <dependency>
        <groupId>org.projectlombok</groupId>
        <artifactId>lombok</artifactId>
        <version>1.18.32</version>
    </dependency>
    <!--SpringBoot3整合mybatis-plus 依賴-->
    <dependency>
        <groupId>com.baomidou</groupId>
        <artifactId>mybatis-plus-spring-boot3-starter</artifactId>
        <version>3.5.5</version>
    </dependency>
    <!--junit依賴-->
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-test</artifactId>
        <scope>test</scope>
    </dependency>
    <!--MySQL依賴-->
    <dependency>
        <groupId>mysql</groupId>
        <artifactId>mysql-connector-java</artifactId>
        <version>8.0.33</version>
    </dependency>
</dependencies>

# MySQL數(shù)據(jù)源
spring:
  datasource:
    driver-class-name: com.mysql.cj.jdbc.Driver
    url: jdbc:mysql://localhost:3308/security-demo
    username: root
    password: 123456
# MySQL日志
mybatis-plus:
  configuration:
    log-impl: org.apache.ibatis.logging.stdout.StdOutImpl

package com.xiezhr.securityindbuser.entity;
@TableName("user")
@Data
public class User {
    @TableId(value = "id", type = IdType.AUTO)
    private Integer id;
    @TableField(value = "username")
    private String username;
    @TableField(value = "password")
    private String password;
    @TableField(value = "enabled")
    private Boolean enabled;
}

package com.xiezhr.securityindbuser.mapper;
@Mapper
public interface UserMapper extends BaseMapper<User> {
}

package com.xiezhr.securityindbuser.service;
public interface UserService extends IService<User> {
}

package com.xiezhr.securityindbuser.service.impl;
@Service
public class UserServiceImpl extends ServiceImpl<UserMapper, User> implements UserService {
}

package com.xiezhr.securityindbuser.controller;
@RestController
@RequestMapping("/user")
public class UserController {
    @Autowired
    private UserService userService;
    @GetMapping("/list")
    public List<User> getUserList(){
        return userService.list();
    }
}

package com.xiezhr.securityindbuser.service.impl;
public class DBUserDetailsManager implements UserDetailsService {
    @Resource
    private UserMapper userMapper;
    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        QueryWrapper<User> queryWrapper = new QueryWrapper<User>();
        //使用username構(gòu)造查詢條件
        QueryWrapper<User> wrapper = queryWrapper.eq("username", username);
		//由于用戶名不能重復(fù)，所以我們使用selectOne查詢用戶信息即可
        User user = userMapper.selectOne(wrapper);
        if (user == null) {
            //用戶不存在，拋出異常
            throw new UsernameNotFoundException(username);
        } else {
            //由于現(xiàn)在還沒有權(quán)限信息，所以我們構(gòu)造一個(gè)空的權(quán)限信息
            Collection< GrantedAuthority> authorities = new ArrayList<>();
            return new org.springframework.security.core.userdetails.User(
                    user.getUsername(),  //
                    user.getPassword(),
                    user.getEnabled(),
                    true,  //用戶賬戶是否沒過期
                    true, //用戶憑證是否沒過期
                    true, //用戶是否未被鎖定
                    authorities //用戶權(quán)限信息
            );
        }
    }
}

package com.xiezhr.securityindbuser.config;
@Configuration  //標(biāo)明這個(gè)類為配置類，spring應(yīng)用程序一啟動(dòng)，類中的been 就會(huì)被初始化在spring容器中
@EnableWebSecurity  //開啟spring security 自定義配置
public class WebSecurityConfig {
    @Bean
    public UserDetailsService userDetailsService(){
        //創(chuàng)建基于數(shù)據(jù)庫的用戶管理器
        DBUserDetailsManager dbUserDetailsManager = new DBUserDetailsManager();
        return dbUserDetailsManager;
    }
}