创建我自己的用户实体

Question

我希望让我自己的'用户'实体登录到应用程序中。

我想知道的是，如果有可能，如果可能的话，我应该在哪里采取预防措施，应该考虑哪些要点以及哪些文件需要修改？

Answer 1

您需要通过实现UserDetailsS​​ervice来创建一个用户类，如

@Transactional 
@Override 
public UserDetails loadUserByUsername(String username) 
    throws UsernameNotFoundException { 

    MyUser details = userDao.getUser(username); 
    Collection<simplegrantedauthority> authorities = new ArrayList<simplegrantedauthority>(); 
    SimpleGrantedAuthority userAuthority = new SimpleGrantedAuthority(
    "ROLE_USER"); 
    SimpleGrantedAuthority adminAuthority = new SimpleGrantedAuthority(
    "ROLE_ADMIN"); 
    if (details.getRole().equals("user")) 
    authorities.add(userAuthority); 
    else if (details.getRole().equals("admin")) { 
    authorities.add(userAuthority); 
    authorities.add(adminAuthority); 
    } 
    UserDetails user = new User(details.getUsername(), 
    details.getPassword(), true, true, true, true, authorities); 
    return user; 
} 
} 

的再配置Spring使用您的customuser对象......像

<authentication-manager> 
    <authentication-provider user-service-ref="authService"> 
    </authentication-provider> 
</authentication-manager> 

全部例如可以在Spring Custom User with DAO and Entity

找到

Answer 2

您可以创建一个扩展UserDetailsS​​ervice的用户服务，然后创建UserDetail对象。

这与此类似。

创建你的用户等级：

public class MyUserDetails implements UserDetails { 

    private UserEntity user; 
    private List<GrantedAuthority> authorities; 

    /** 
    * Constructor 
    */ 
    public MyUserDetails(UserEntity user) { 
     this.user = user; 
     this.authorities = Arrays.asList(new SimpleGrantedAuthority(user.getRole().name())); 
    } 

    /* (non-Javadoc) 
    * @see org.springframework.security.core.userdetails.UserDetails#getAuthorities() 
    */ 
    @Override 
    public Collection<? extends GrantedAuthority> getAuthorities() { 
     return authorities; 
    } 

    /* (non-Javadoc) 
    * @see org.springframework.security.core.userdetails.UserDetails#getPassword() 
    */ 
    @Override 
    public String getPassword() { 
     return user.getPassword(); 
    } 

    /* (non-Javadoc) 
    * @see org.springframework.security.core.userdetails.UserDetails#getUsername() 
    */ 
    @Override 
    public String getUsername() { 
     return user.getEmail(); 
    } 

    /* (non-Javadoc) 
    * @see org.springframework.security.core.userdetails.UserDetails#isAccountNonExpired() 
    */ 
    @Override 
    public boolean isAccountNonExpired() { 
     return true; 
    } 

    /* (non-Javadoc) 
    * @see org.springframework.security.core.userdetails.UserDetails#isAccountNonLocked() 
    */ 
    @Override 
    public boolean isAccountNonLocked() { 
     return !user.isLocked(); 
    } 

    /* (non-Javadoc) 
    * @see org.springframework.security.core.userdetails.UserDetails#isCredentialsNonExpired() 
    */ 
    @Override 
    public boolean isCredentialsNonExpired() { 
     return !user.isExpired(); 
    } 

    /* (non-Javadoc) 
    * @see org.springframework.security.core.userdetails.UserDetails#isEnabled() 
    */ 
    @Override 
    public boolean isEnabled() { 
     return user.isEnabled(); 
    } 

    /** 
    * @return the user 
    */ 
    public UserEntity getUser() { 
     return user; 
    } 

    /** 
    * @param user the user to set 
    */ 
    public void setUser(UserEntity user) { 
     this.user = user; 
    } 
} 

那么你应该创建你的UserDetailsS​​ervice：

@Service 
public class MyUserDetailsService implements UserDetailsService { 

    @Autowired 
    private UserRepository userRepo; 

    /* 
    * (non-Javadoc) 
    * @see org.springframework.security.core.userdetails.UserDetailsService#loadUserByUsername(java.lang.String) 
    */ 
    @Override 
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException { 
     UserEntity user = userDao.findByEmail(username); 

     if (user == null) { 
       LOGGER.warn("User {} does not exist in our database", username); 
       throw new UsernameNotFoundException("User not found."); 
     } 

     return new MyUserDetails(user); 
    } 
} 

最后，你应该添加配置春季安全使用你的服务：

@Configuration 
@EnableWebSecurity 
public class SecurityConfig extends WebSecurityConfigurerAdapter { 

    @Autowired 
    private MyUserDetailsService userDetailsService; 

    @Override 
    public void configure(AuthenticationManagerBuilder auth) throws Exception { 
     auth.userDetailsService(userDetailsService).passwordEncoder(new Md5PasswordEncoder()); 
    } 
}