Spring Security學(xué)習(xí)之rememberMe自動(dòng)登錄如何實(shí)現(xiàn)

 @Override
 protected void configure(HttpSecurity http) throws Exception {
  http.authorizeRequests()
    .antMatchers("/api/user/**").hasRole("user") //user 角色訪問(wèn)/api/user/開(kāi)頭的路由
    .antMatchers("/api/admin/**").hasRole("admin") //admin 角色訪問(wèn)/api/admin/開(kāi)頭的路由
    .antMatchers("/api/public/**").permitAll()     //允許所有可以訪問(wèn)/api/public/開(kāi)頭的路由
    .and()
    .formLogin()
    .and()
    .rememberMe().userDetailsService(userDetailsService());  //記住密碼
 }

public class PersistentRememberMeToken {
  private final String username;
  private final String series;
  private final String tokenValue;
  private final Date date;

  public PersistentRememberMeToken(String username, String series, String tokenValue, Date date) {
    this.username = username;
    this.series = series;
    this.tokenValue = tokenValue;
    this.date = date;
  }

  public String getUsername() {
    return this.username;
  }

  public String getSeries() {
    return this.series;
  }

  public String getTokenValue() {
    return this.tokenValue;
  }

  public Date getDate() {
    return this.date;
  }
}

@Service
public class MyPersistentTokenRepositoryImpl implements PersistentTokenRepository {

  @Autowired
  private JPAPersistentTokenRepository repository;

  @Override
  public void createNewToken(PersistentRememberMeToken persistentRememberMeToken) {
    MyPersistentToken myPersistentToken = new MyPersistentToken();
    myPersistentToken.setSeries(persistentRememberMeToken.getSeries());
    myPersistentToken.setUsername(persistentRememberMeToken.getUsername());
    myPersistentToken.setTokenValue(persistentRememberMeToken.getTokenValue());
    myPersistentToken.setUser_last(persistentRememberMeToken.getDate());
    repository.save(myPersistentToken);
  }

  @Override
  public void updateToken(String series, String tokenValue, Date lastUsed) {
    MyPersistentToken myPersistentToken = repository.findBySeries(series);
    myPersistentToken.setUser_last(lastUsed);
    myPersistentToken.setTokenValue(tokenValue);
    repository.save(myPersistentToken);
  }

  @Override
  public PersistentRememberMeToken getTokenForSeries(String series) {
    MyPersistentToken myPersistentToken = repository.findBySeries(series);
    PersistentRememberMeToken persistentRememberMeToken = new PersistentRememberMeToken(myPersistentToken.getUsername(), myPersistentToken.getSeries(), myPersistentToken.getTokenValue(), myPersistentToken.getUser_last());
    return persistentRememberMeToken;
  }

  @Override
  @Transactional
  public void removeUserTokens(String username) {
    repository.deleteByUsername(username);
  }
}

public interface JPAPersistentTokenRepository extends JpaRepository<MyPersistentToken,Long> {
  MyPersistentToken findBySeries(String series);
  void deleteByUsername(String username);
}

@Entity
@Table(name = "persistent_token")
public class MyPersistentToken {
  @Id
  @GeneratedValue(strategy = GenerationType.SEQUENCE)
  private Long id;
  private String username;
  @Column(unique = true)
  private String series;
  private String tokenValue;
  private Date user_last;

  public Long getId() {
    return id;
  }

  public void setId(Long id) {
    this.id = id;
  }

  public String getUsername() {
    return username;
  }

  public void setUsername(String username) {
    this.username = username;
  }

  public String getSeries() {
    return series;
  }

  public void setSeries(String series) {
    this.series = series;
  }

  public String getTokenValue() {
    return tokenValue;
  }

  public void setTokenValue(String tokenValue) {
    this.tokenValue = tokenValue;
  }

  public Date getUser_last() {
    return user_last;
  }

  public void setUser_last(Date user_last) {
    this.user_last = user_last;
  }
}