程序包 io.github.mangocrisp.spring.taybct.auth.security.config

类 AuthSecurityConfig

java.lang.Object
io.github.mangocrisp.spring.taybct.auth.security.config.AuthSecurityConfig
@AutoConfiguration @EnableWebSecurity @EnableConfigurationProperties(LoginPageConfig.class) public class AuthSecurityConfig extends Object

  • 构造器概要

    构造器
    构造器
    说明
    AuthSecurityConfig()
     

  • 方法概要

    修饰符和类型
    方法
    说明
    org.springframework.security.authorization.AuthorizationManager<org.springframework.security.web.access.intercept.RequestAuthorizationContext>
    authorizationManager(org.springframework.data.redis.core.RedisTemplate<Object,Object> redisTemplate, io.github.mangocrisp.spring.taybct.tool.core.constant.ISysParamsObtainService sysParamsObtainService, SecureProp secureProp)
     
    IAuthorizeRedirectUrlCreator
    authorizeRedirectUrlCreator(LoginPageConfig loginPageConfig)
     
    private static void
    configResponseHandler(org.springframework.security.config.annotation.web.builders.HttpSecurity http, ResponseHandler responseHandler)
    配置结果处理器
    ICustomizeUserDetailsService
    customizeUserDetailsService(org.springframework.security.crypto.password.PasswordEncoder passwordEncoder, IUserDetailsHandle userDetailsHandle)
    自定义的用户查询
    org.springframework.security.web.SecurityFilterChain
    formLoginFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http, SecureProp secureProp, org.springframework.security.oauth2.jwt.JwtDecoder jwtDecoder, org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter jwtAuthenticationConverter, org.springframework.security.authorization.AuthorizationManager<org.springframework.security.web.access.intercept.RequestAuthorizationContext> authorizationManager, org.springframework.data.redis.core.RedisTemplate<Object,Object> redisTemplate, io.github.mangocrisp.spring.taybct.tool.core.constant.ISysParamsObtainService sysParamsObtainService, KeyPair keyPair, ResponseHandler responseHandler, IUserDetailsHandle userDetailsHandle)
    A Spring Security filter chain for authentication.
    这个也是个Spring Security的过滤器链，用于Spring Security的身份认证。
    static org.springframework.security.core.context.SecurityContextHolderStrategy
    getSecurityContextHolderStrategy(org.springframework.security.config.annotation.web.builders.HttpSecurity http)
     
    ResponseHandler
    responseHandler(io.github.mangocrisp.spring.taybct.tool.core.exception.handler.IGlobalExceptionReporter globalExceptionReporter, io.github.mangocrisp.spring.taybct.tool.core.exception.handler.IGlobalPrinter globalPrinter)
     
    IUserDetailsHandle
    userDetailsHandle(UserConfig userConfig)
    用户操作处理类
    org.springframework.security.core.userdetails.UserDetailsService
    userDetailsService(org.springframework.security.crypto.password.PasswordEncoder passwordEncoder, IUserDetailsHandle userDetailsHandle)
    An instance of UserDetailsService for retrieving users to authenticate.
    配置用户信息，或者配置用户数据来源，主要用于用户的检索。

    从类继承的方法 java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • 构造器详细资料

    • AuthSecurityConfig

      public AuthSecurityConfig()

  • 方法详细资料

    • formLoginFilterChain

      @Bean @Order(3) public org.springframework.security.web.SecurityFilterChain formLoginFilterChain(org.springframework.security.config.annotation.web.builders.HttpSecurity http, SecureProp secureProp, org.springframework.security.oauth2.jwt.JwtDecoder jwtDecoder, org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter jwtAuthenticationConverter, org.springframework.security.authorization.AuthorizationManager<org.springframework.security.web.access.intercept.RequestAuthorizationContext> authorizationManager, org.springframework.data.redis.core.RedisTemplate<Object,Object> redisTemplate, io.github.mangocrisp.spring.taybct.tool.core.constant.ISysParamsObtainService sysParamsObtainService, KeyPair keyPair, ResponseHandler responseHandler, IUserDetailsHandle userDetailsHandle) throws Exception
      A Spring Security filter chain for authentication.
      这个也是个Spring Security的过滤器链，用于Spring Security的身份认证。
      参数:
      http - HttpSecurity
      返回:
      SecurityFilterChain
      抛出:
      Exception - Exception

    • responseHandler

      @Bean public ResponseHandler responseHandler(io.github.mangocrisp.spring.taybct.tool.core.exception.handler.IGlobalExceptionReporter globalExceptionReporter, io.github.mangocrisp.spring.taybct.tool.core.exception.handler.IGlobalPrinter globalPrinter)

    • authorizeRedirectUrlCreator

      @Bean public IAuthorizeRedirectUrlCreator authorizeRedirectUrlCreator(LoginPageConfig loginPageConfig)

    • configResponseHandler

      private static void configResponseHandler(org.springframework.security.config.annotation.web.builders.HttpSecurity http, ResponseHandler responseHandler)
      配置结果处理器
      参数:
      http - 配置好的过滤器
      responseHandler - 结果处理器

    • getSecurityContextHolderStrategy

      public static org.springframework.security.core.context.SecurityContextHolderStrategy getSecurityContextHolderStrategy(org.springframework.security.config.annotation.web.builders.HttpSecurity http)

    • authorizationManager

      @Bean @ConditionalOnMissingBean(org.springframework.security.authorization.AuthorizationManager.class) public org.springframework.security.authorization.AuthorizationManager<org.springframework.security.web.access.intercept.RequestAuthorizationContext> authorizationManager(org.springframework.data.redis.core.RedisTemplate<Object,Object> redisTemplate, io.github.mangocrisp.spring.taybct.tool.core.constant.ISysParamsObtainService sysParamsObtainService, SecureProp secureProp)

    • userDetailsHandle

      @Bean @ConditionalOnMissingBean(IUserDetailsHandle.class) public IUserDetailsHandle userDetailsHandle(UserConfig userConfig)
      用户操作处理类
      参数:
      userConfig - 用户配置
      返回:
      IUserDetailsHandle

    • userDetailsService

      @Bean @ConditionalOnMissingBean(org.springframework.security.core.userdetails.UserDetailsService.class) public org.springframework.security.core.userdetails.UserDetailsService userDetailsService(org.springframework.security.crypto.password.PasswordEncoder passwordEncoder, IUserDetailsHandle userDetailsHandle)
      An instance of UserDetailsService for retrieving users to authenticate.
      配置用户信息，或者配置用户数据来源，主要用于用户的检索。
      这个方法是要给 oauth2.1 的默认方法去调用使用用户名获取用户信息的，那做为一个喜欢自定义的程序员，怎么可能只满足于使用用户名查询用户信息呢？哈哈
      返回:
      UserDetailsService

    • customizeUserDetailsService

      @Bean @ConditionalOnMissingBean(ICustomizeUserDetailsService.class) public ICustomizeUserDetailsService customizeUserDetailsService(org.springframework.security.crypto.password.PasswordEncoder passwordEncoder, IUserDetailsHandle userDetailsHandle)
      自定义的用户查询
      参数:
      passwordEncoder - 加密器
      userDetailsHandle - 用户查询处理器
      返回:
      ICustomUserDetailsService