Spring MVC 4 + Spring Security 4 + Hibernate ＋JPA實戰
阿新 • • 發佈：2019-02-06
最近花了有三個星期把spring實戰學了遍，同時也把maven,git，Hibernate給用上了，確實比較鍛鍊手。登陸，註冊（我前端不是很好）是網上找得模版,（提前說下介面做的很挫，是用來練手的，還有很多寫的不是很好的程式碼，我會慢慢完善的，但功能是全的）
登陸之後
用來報名考試用的
之後
點了之後，就會扣除你的錢，你也會報名成功。如果不成功就會跳轉
第一步pom.xml
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 第二步配置檢視解析器
@Configuration
@EnableRedisRepositories("Repository")
public class ViewConfiguration {
@Bean
public ViewResolver viewResolver(){
InternalResourceViewResolver resolver = new InternalResourceViewResolver();
resolver.setPrefix("/WEB-INF/pages/");
resolver.setSuffix(".jsp");
resolver.setViewClass(org.springframework.web.servlet.view.JstlView.class);
return resolver;
}
}第三步配置spring安全
package Configuration;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.ComponentScan;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import service.UserLoginService;
import javax.sql.DataSource;
/**
* Created by wang on 16/12/5.
*/
@Configuration
@EnableWebSecurity
@ComponentScan(basePackageClasses = {UserLoginService.class,EntitymanagerFactoryBeanConfiguration.class})
public class SecurityConfiguration extends WebSecurityConfigurerAdapter{
@Autowired
DataSource dataSource;
@Autowired
private UserLoginService userLoginService;
@Override
protected void configure(HttpSecurity http) throws Exception {
http.csrf().disable();
http.authorizeRequests().regexMatchers("/login/\\S+").access("hasRole('ROLE_USER') or IS_AUTHENTICATED_REMEMBERED")
.regexMatchers("register/\\S+").access("hasRole('ROLE_USER') or IS_AUTHENTICATED_REMEMBERED")
.and().formLogin().loginPage("/login").usernameParameter("username").passwordParameter("password").defaultSuccessUrl("/login/success")
.and().logout().logoutSuccessUrl("/login");
}
@Autowired
public void configureGlobalSecurity(AuthenticationManagerBuilder auth)throws Exception{
System.out.println("cG");
/*這個Service會在後面重寫*/
auth.userDetailsService(userLoginService);
}
}
package Configuration;
import org.springframework.security.web.context.AbstractSecurityWebApplicationInitializer;
/**
* Created by wang on 16/12/5.
*/
public class SecurityWebApplicationInitializer extends AbstractSecurityWebApplicationInitializer{
}第五步繼續配置安全，不過是同過繼承UserDetails來封裝user的資訊，這段程式碼可以在看完user之後再看
package service;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.userdetails.UserDetails;
import java.util.Collection;
import java.util.List;
/**
* Created by wang on 16/12/7.
*/
public class UserRealDetails implements UserDetails{
private List<GrantedAuthority> authorityList;
private String Password;
private String Username;
private boolean isAccountNonExpired;
private boolean isAccountNonLocked;
private boolean isCredentialsNonExpired;
private String email;
private String firstName;
private String lastName;
private String phoneNumber;
private int remaingMoney;
private boolean enalbel;
private long id;
public UserRealDetails(List<GrantedAuthority> authorityList, boolean enalbel,String password, String username, boolean isAccountNonExpired, boolean isAccountNonLocked, boolean isCredentialsNonExpired, String email, String firstName, String lastName, String phoneNumber,int remaingMoney,long id) {
this.authorityList = authorityList;
Password = password;
Username = username;
this.isAccountNonExpired = isAccountNonExpired;
this.isAccountNonLocked = isAccountNonLocked;
this.isCredentialsNonExpired = isCredentialsNonExpired;
this.email = email;
this.firstName = firstName;
this.lastName = lastName;
this.phoneNumber = phoneNumber;
this.enalbel =enalbel;
this.remaingMoney = remaingMoney;
this.id=id;
}
public long getId() {
return id;
}
public int getRemaingMoney() {
return remaingMoney;
}
public String getEmail() {
return email;
}
public String getFirstName() {
return firstName;
}
public String getLastName() {
return lastName;
}
public String getPhoneNumber() {
return phoneNumber;
}
@Override
public Collection<? extends GrantedAuthority> getAuthorities() {
return authorityList;
}
@Override
public String getPassword() {
return Password;
}
@Override
public String getUsername() {
return Username;
}
@Override
public boolean isAccountNonExpired() {
return isAccountNonExpired;
}
@Override
public boolean isAccountNonLocked() {
return isAccountNonLocked;
}
@Override
public boolean isCredentialsNonExpired() {
return isCredentialsNonExpired;
}
@Override
public boolean isEnabled() {
return enalbel;
}
}這是之前提到的serviece,這是自定義的驗證的服務
package service;
import Dao.UserDao;
import Domin.User;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.cache.annotation.Cacheable;
import org.springframework.context.annotation.ComponentScan;
import org.springframework.context.annotation.EnableAspectJAutoProxy;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;
import java.util.ArrayList;
import java.util.List;
/**
* Created by wang on 16/12/6.
*/
@Service
@EnableAspectJAutoProxy(proxyTargetClass = true)
@ComponentScan({"Dao","Configuration"})
public class UserLoginService implements UserDetailsService{
@Autowired
private UserDao userDao;
@Cacheable("User")
@Override
public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
User user = userDao.findByUserName(username);
System.out.println("User"+user);
if (user==null){
System.out.println("User not found");
throw new UsernameNotFoundException("UserName not found");
}
return new UserRealDetails(getGrantedAuthorities(user),user.getEnable().equals("true"),user.getPassWord(),user.getUserName(),
true,true,true,user.getEmail(),user.getFirstName(),
user.getLastName(),user.getPhoneNumber(),user.getRemainingMoney(),user.getId());
}
private List<GrantedAuthority> getGrantedAuthorities(User user){
List<GrantedAuthority> authorities = new ArrayList<GrantedAuthority>();
authorities.add(new SimpleGrantedAuthority(user.getAuthorityTable().getUserAuth()));
return authorities;
}
}第六步用來，建立表單，這裡可以學一對一，一對多，多對多的例子（樓主表單名字沒起好，學生成績的表單和專門放科目的表單名字不易區分，後期維護肯定難）
@Entity
@Table(name = "user")
public class User implements Serializable {
@Id
@GeneratedValue(strategy = GenerationType.IDENTITY)
private long id;
@NotNull
@Column(name = "userName", nullable = true, unique = true, length = 30)
private String userName;
@NotNull
@Column(name = "passWord", nullable = true, length = 30)
private String passWord;
@Column
private int RemainingMoney;
@NotNull
@Column(name = "phoneNumber", nullable = true, length = 20)
private String phoneNumber;
@OneToMany(cascade = CascadeType.ALL)
@JoinColumn(name = "studentId")
private List<Studentscore> scoreTable;
@NotNull
@Column(name = "email", nullable = true, unique = true, length = 50)
private String email;
@NotNull
@Column(name = "lastName", nullable = true, length = 20)
private String lastName;
@NotNull
@Column(name = "firstName", nullable = true, length = 20)
private String firstName;
@ManyToMany(cascade = CascadeType.ALL, fetch = FetchType.EAGER)
@JoinTable(name = "User_Table", joinColumns = {@JoinColumn(name = "id")},
inverseJoinColumns = {@JoinColumn(name = "TABLE_ID")})
private List<scoreTable> table;
@Column(name = "enable")
private String enable;
@OneToOne(cascade = CascadeType.ALL)
@JoinColumn(name = "authId")
private AuthorityTable authorityTable;
public AuthorityTable getAuthorityTable() {
return authorityTable;
}
public void setAuthorityTable(AuthorityTable authorityTable) {
this.authorityTable = authorityTable;
}
public List<Studentscore> getScoreTable() {
return scoreTable;
}
public void setScoreTable(List<Studentscore> scoreTable) {
this.scoreTable = scoreTable;
}
@Override
public int hashCode() {
return new HashCodeBuilder(17, 37).append(id).toHashCode();
}
public String getEnable() {
return enable;
}
public void setEnable(String enable) {
this.enable = enable;
}
@Override
public boolean equals(Object obj) {
if (obj == null) {
return false;
}
i