Spring boot 如何在加载配置文件之前在spring容器中注册类
这是我在webapp模块中的websecurity类Spring boot 如何在加载配置文件之前在spring容器中注册类,spring-boot,spring-security,Spring Boot,Spring Security,这是我在webapp模块中的websecurity类 package com.ioyota.shareitnamchi.security; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Bean; import org.springframework.context.annotation.ComponentScan;
package com.ioyota.shareitnamchi.security;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.ComponentScan;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Import;
import org.springframework.data.jpa.repository.config.EnableJpaRepositories;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import com.ioyota.core.util.AppConstants;
@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
@EnableJpaRepositories(basePackages="com.ioyota")
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
@Autowired
private com.ioyota.user.security.**CustomAuthenticationProvider** CustomAuthenticationProvider;
@Bean
public BCryptPasswordEncoder bCryptPasswordEncoder() {
return new BCryptPasswordEncoder();
}
@Override
protected void configure(HttpSecurity http) throws Exception {
/*http.authorizeRequests().antMatchers("/resources/**", "/registration","/greeting","/ignore/**","/*").permitAll()
.antMatchers("/admin/**")
.authenticated().and().formLogin().loginPage("/login").permitAll().and().logout().permitAll();
http.csrf().disable();*/
// Page with login form is served as /login.html and does a POST on /login
http.formLogin().loginPage("/login").loginProcessingUrl("/login").permitAll();
// The UI does a POST on /logout on logout
http.logout().logoutUrl("/logout");
// The ui currently doesn't support csrf
http.csrf().disable();
http.authorizeRequests().antMatchers(AppConstants.NAMCHI_ADMIN_URL+"/**").authenticated();
// Requests for the login page and the static assets are allowed
http.authorizeRequests()
.antMatchers("/resources/**", "/registration","/greeting","/ignore/**","/**")
.permitAll();
}
@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
auth.authenticationProvider(this.CustomAuthenticationProvider);
}
}
package com.ioyota.user.security;
import java.util.HashSet;
import java.util.List;
import java.util.Set;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.DependsOn;
import org.springframework.core.Ordered;
import org.springframework.core.annotation.Order;
import org.springframework.security.authentication.AuthenticationProvider;
import org.springframework.security.authentication.BadCredentialsException;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.stereotype.Component;
import com.ioyota.core.dto.UserDTO;
import com.ioyota.core.entity.RolePermission;
import com.ioyota.user.repository.RolePermissionRepository;
import com.ioyota.user.service.UserService;
@Component
@DependsOn("repoConf")
public class CustomAuthenticationProvider implements AuthenticationProvider {
@Autowired
private UserService userService;
@Autowired
private RolePermissionRepository rolePermissionRepository;
@Autowired
private BCryptPasswordEncoder bCryptPasswordEncoder;
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
String userName = authentication.getName().trim();
UserDTO user = null;
try {
user = userService.findByUsername(userName);
} catch (Exception e) {
}
if (user == null) {
throw new UsernameNotFoundException("Username or password is not correct");
}
if (!bCryptPasswordEncoder.matches(authentication.getCredentials().toString().trim(), user.getPassword())) {
throw new BadCredentialsException("Username or password is not correct");
}
// Authenticate the user based on your custom logic
List<RolePermission> rolePermissionsList = rolePermissionRepository.findByRoleId(user.getRole().getRoleId());
Set<GrantedAuthority> authList = new HashSet<GrantedAuthority>();
for (RolePermission rolePermission : rolePermissionsList) {
SimpleGrantedAuthority simpleGrantedAuthority = new SimpleGrantedAuthority(
rolePermission.getPermissionId() + "");
authList.add(simpleGrantedAuthority);
}
return new UsernamePasswordAuthenticationToken(user, authentication.getCredentials().toString(), authList);
}
@Override
public boolean supports(Class<? extends Object> authentication) {
return (UsernamePasswordAuthenticationToken.class.isAssignableFrom(authentication));
}
}