AuthenticationProviderConfig.java
3.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
package com.objecteye.config;
import com.objecteye.pojo.AuthenticationToken;
import org.springframework.security.authentication.*;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.crypto.password.PasswordEncoder;
public class AuthenticationProviderConfig implements AuthenticationProvider {
private UserDetailsService userDetailsService;
private PasswordEncoder passwordEncoder;
public void setUserDetailsService(UserDetailsService userDetailsService) {
this.userDetailsService = userDetailsService;
}
public void setPasswordEncoder(PasswordEncoder passwordEncoder) {
this.passwordEncoder = passwordEncoder;
}
/**
* 用户默认检查,用户是否锁定过期等
*/
private void defaultCheck(UserDetails user) {
if (!user.isAccountNonLocked()) {
throw new LockedException("User account is locked");
}
if (!user.isEnabled()) {
throw new DisabledException("User is disabled");
}
if (!user.isAccountNonExpired()) {
throw new AccountExpiredException("User account has expired");
}
}
/**
* (附加检查项)检查密码是否正确
*/
private void additionalAuthenticationChecks(UserDetails userDetails,
AuthenticationToken authenticationToken) throws AuthenticationException {
if (authenticationToken.getCredentials() == null) {
throw new BadCredentialsException("username or password is wrong!");
}
String presentedPassword = authenticationToken.getCredentials().toString();
if (!passwordEncoder.matches(presentedPassword, userDetails.getPassword())) {
throw new BadCredentialsException("username or password is wrong!");
}
}
/**
* 创建一个认证成功的Authentication对象,传入的是一个还没有认证的Authentication对象
*
* @param authentication 未认证的
* @return
* @throws AuthenticationException
* @see AuthenticationToken#AuthenticationToken(Object, Object)
*/
@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
String userName = authentication.getName();
UserDetails userDetails = userDetailsService.loadUserByUsername(userName);
AuthenticationToken checkToken = (AuthenticationToken) authentication;
defaultCheck(userDetails);
additionalAuthenticationChecks(userDetails, checkToken);
AuthenticationToken authenticationToken = new AuthenticationToken(userDetails, checkToken.getCredentials(), userDetails.getAuthorities());
authenticationToken.setDetails(checkToken.getDetails());
return authenticationToken;
}
/**
* 判断token是否是该类型
*
* @param aClass
* @return
*/
@Override
public boolean supports(Class<?> aClass) {
return AuthenticationToken.class.isAssignableFrom(aClass);
}
}