Spring Security

@MapperScan
@SpringBootApplication
public class SpringSecurityApplication{
    public static void main(String[] args){
        SpringApplication.run(SpringSecurityApplication.class, args);
    }
}

SpringBootTest(classes = SpringSecurityApplication.class)
@RunWith(SpringJUnit4ClassRunner.class)
public class MyTest{
    @Test
    public void test(){
        PasswordEncoder encoder = new BCryptPasswordEncoder();
        String result = encoder.encode("pwd");
        System.out.println(result);
        boolean match = encode.matches("pwd", result);
        System.out.println(match);
    }
}

@Controller
public class DemoController{
    @RequestMapping("/");
    @ResponseBody
    public String demo(){
        return "demo";
    }
}

<!-- https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-security -->
<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>

public interface UserDetailService{
    UserDetails loadUserByUserName(String var1) throws UsernameNotFoundException;
}

@Service
public class UserDetailsServiceImpl implements UserDetailsService{
    @Autowired
    private PasswordEncoder passwordEncoder;

    @Overrride
    public UserDetails loadUserByUserName(String username) throws UsernameNotFoundException{
        if(!username.equals("admin")){
            throw new UsernameNotFoundException("用户不存在!");
        }
        // 从数据库中获取密码
        String password = "pwd";
        String encodePassword = PasswordEncoder.encode(password);
        UserDetails userDetails = new User(username, encodePassword, AuthorityUtils.commaSeparatedStringToAuthorityList("admin1, admin2"));
        return userDetails;
    }
}

@Configuration
public class SecurityConfig{
    @Bean
    protected PasswordEncoder passwrodEncoder(){
        return new BCryptPasswordEncoder();
    }    
}

public interface UserMapper{
    public User selectByUserName(String username);
}

spring:
    datasource:
        username: root
        password: root
        driver-class-name: com.mysql.jdbc.Driver
        url: jdbc:mysql://127.0.0.1:3306/test
mybatis:
    mapper-locations: classpath:mybatis/*.xml

<mapper namespace="com.test.mapper.UserMapper">
    <select id="selectByUsername" resultType="com.test.pojo.User">
        select id, username, password from t_user where username = #{param}
    </select>
</mapper>

@EnaleGlobalMethodSecurity(securedEnabled = true)

@Secured("ROLE_ADMIN")

.antMatchers("/demo").permitAll()

@EnaleGlobalMethodSecurity(prePostEnabled = true)

@PreAuthorize("hasAuthority(‘demo:update‘)")

<!-- https://mvnrepository.com/artifact/org.mybatis.spring.boot/mybatis-spring-boot-starter -->
<dependency>
    <groupId>org.mybatis.spring.boot</groupId>
    <artifactId>mybatis-spring-boot-starter</artifactId>
    <version>2.1.0</version>
</dependency>

<!-- https://mvnrepository.com/artifact/mysql/mysql-connector-java -->
<dependency>
    <groupId>mysql</groupId>
    <artifactId>mysql-connector-java</artifactId>
    <version>5.1.47</version>
</dependency>

spring:
    datasource:
        username: root
        password: root
        driver-class-name: com.mysql.jdbc.Driver
        url: jdbc:mysql://127.0.0.1:3306/test
mybatis:
    mapper-locations: classpath:mybatis/*.xml

@Configuration
public class RemeberMeConfig{
    @Autowired
    private Datasource dataSource;
    @Bean
    protected PersonTokenRepository persistentTokenRepository(){
        JdbcTokenRepositoryImpl jdbcTokenRepository = new JdbcToeknRepositoryImpl();
        jdbcTokenRepository.setCreateTableOnStartup(true);
        jdbcTokenRepository.setDataSource(dataSource);

        return jdbcTokenRepository;
    }
}

@Autowire
private PersistentTokenRepository persistentTokenRepository;

http.rememberMe()
     .userDetailsSevice(userDetailsService)// 登录逻辑对象
     .tokenValiditySeconds(10)// 设置有效时间
     .tokenRepository(persistentTokenRepository);// 持久层对象

<!-- https://mvnrepository.com/artifact/org.thymeleaf.extras/thymeleaf-extras-springsecurity5 -->
<dependency>
    <groupId>org.thymeleaf.extras</groupId>
    <artifactId>thymeleaf-extras-springsecurity5</artifactId>
    <version>3.0.4.RELEASE</version>
</dependency>

<!-- https://mvnrepository.com/artifact/org.springframework.boot/spring-boot-starter-thymeleaf -->
<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-thymeleaf</artifactId>
    <version>2.3.4.RELEASE</version>
</dependency>

http.logout()
      .logoutSuccessUrl("/showLogin")
      .logoutUrl("/test")
      .logoutSuccesshandler(new LogoutSuccessHandler(){
        @Override
        public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse httpServletResponse, Authentication authentication) throws Exception{}
    })

@SpringBootApplication
public class CsrfApplication{
    public static void main(STring[] args){
        SpringApplication.run(CsrfApplication.class, args);
    }
}

server:
    port: 8081