如何解决2个WebSecurityConfigurerAdapter类实现Spring Security
我正在编写一个带有2个WebSecurityConfigurerAdapter类的spring安全项目，以创建2个登录表单。当我分别实现这些类时，它们可以正常工作，但是当我将它们与“ order（）”配置结合使用以验证较低的顺序时，在上面唱歌时会将我定向到具有较高顺序的其他登录表单，而不是指向我的URL指定。这是我的代码：如果有人对丢失的内容有任何想法，欢迎发表评论。谢谢。
@Order(1)
@Configuration
@EnableWebSecurity
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
@Autowired
private UserService userService;
@Bean
public BCryptPasswordEncoder passwordEncoder() {
return new BCryptPasswordEncoder();
}
@Override
protected void configure(HttpSecurity http) throws Exception {
http
.authorizeRequests()
.antMatchers(
"/registration**","/js/**","/css/**","/img/**").permitAll()
// .antMatchers("/librarianlogin").hasRole("USER")
.anyRequest().authenticated()
.and()
.formLogin()
.loginPage("/login")
.successForwardUrl("/librarianlogin")
// .loginProcessingUrl("/")
.permitAll()
.and()
.logout()
.invalidateHttpSession(true)
.clearAuthentication(true)
.logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
.logoutSuccessUrl("/?logout")
.permitAll();
}
@Bean
public DaoAuthenticationProvider authenticationProvider() {
DaoAuthenticationProvider auth = new DaoAuthenticationProvider();
auth.setUserDetailsService(userService);
auth.setPasswordEncoder(passwordEncoder());
return auth;
}
@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
auth.authenticationProvider(authenticationProvider());
}
}
第二个：
@Order(2)
@Configuration
@EnableWebSecurity
public class SecurityConfigurationAdmin extends WebSecurityConfigurerAdapter {
@Override
protected void configure(HttpSecurity http) throws Exception {
http
.authorizeRequests()
.antMatchers(
"/registration**","/img/**").permitAll()
// .antMatchers("/adminlogin").hasRole("USER2")
.anyRequest().authenticated()
.and()
.formLogin()
.loginPage("/login2")
.usernameParameter("username2")
.passwordParameter("password2")
.successForwardUrl("/adminlogin")
// .loginProcessingUrl("/adminlogin")
.permitAll()
.and()
.logout()
.invalidateHttpSession(true)
.clearAuthentication(true)
.logoutRequestMatcher(new AntPathRequestMatcher("/logout"))
.logoutSuccessUrl("/?logout")
.permitAll();
}
@Override
public void configure(AuthenticationManagerBuilder auth) throws Exception {
auth.inMemoryAuthentication()
.withUser("admin").password("{noop}admin").roles("USER2");
}
}
控制器类：
@Controller
public class MainController {
@GetMapping("/login")
public String login() {
return "index2";
}
@RequestMapping(value = "/login2",method = RequestMethod.GET)
public String viewHomePage() {
return "index";
}
}
用于管理员登录的HTML代码：
<div class="row">
<div class="col">
<article class="main">
<h2 class="page-heading">Admin Login
</h2>
<div id="form">
<form th:action="@{/login2}" method="post">
<fieldset>
<div th:if="${param.error}" class="alert alert-danger">
Invalid username and password.
</div>
<div th:if="${param.logout}" class="alert alert-info">
You have been logged out.
</div>
<p>
<label class="row margin-bot" for="username">email</label>
<input type="text" id="username" name="username2" placeholder="email" autofocus="autofocus">
</p>
<p>
<label class="row margin-bot" for="password">pass</label>
<input type="password" id="password" name="password2" placeholder="subject">
</p>
<p>
<input id="submit" type="submit" name="message" value="sign in">
</p>
</fieldset>
</form>
</div>
</article>
</div>
图书管理员登录的html代码：
</div>
<div class="col">
<article class="main">
<h2 class="page-heading">Librarian Login
</h2>
<div id="form">
<form th:action="@{/login}" method="post">
<fieldset>
<div th:if="${param.error}" class="alert alert-danger">
Invalid username and password.
</div>
<div th:if="${param.logout}" class="alert alert-info">
You have been logged out.
</div>
<p>
<label class="row margin-bot" for="username">email</label>
<input type="text" id="username" name="username" placeholder="email" autofocus="autofocus">
</p>
<p>
<label class="row margin-bot" for="password">pass</label>
<input type="password" id="password" name="password" placeholder="subject">
</p>
<p>
<input id="submit" type="submit" name="message" value="sign in">
</p>
</fieldset>
</form>
</div>
</article>
</div>
版权声明：本文内容由互联网用户自发贡献，该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容， 请发送邮件至 dio@foxmail.com 举报，一经查实，本站将立刻删除。