Spring Boot集成LDAP身份認(rèn)證

發(fā)布時間：2024-11-15 12:58:04 來源：億速云閱讀：78 作者：小樊欄目：編程語言

要在Spring Boot應(yīng)用程序中集成LDAP身份認(rèn)證，您需要遵循以下步驟：

添加依賴

在pom.xml文件中添加Spring Security LDAP依賴：

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
    <groupId>org.springframework.ldap</groupId>
    <artifactId>spring-ldap-core</artifactId>
</dependency>

配置LDAP

在application.properties或application.yml文件中配置LDAP連接屬性：

# application.properties
spring.ldap.urls=ldap://your-ldap-server:389
spring.ldap.base=ou=users,dc=example,dc=com
spring.ldap.username=your-ldap-username
spring.ldap.password=your-ldap-password

或

# application.yml
spring:
  ldap:
    urls: ldap://your-ldap-server:389
    base: ou=users,dc=example,dc=com
    username: your-ldap-username
    password: your-ldap-password

配置Spring Security

創(chuàng)建一個配置類，繼承WebSecurityConfigurerAdapter，并重寫configure方法以配置LDAP身份認(rèn)證：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.core.userdetails.ldap.LdapUserDetailsManager;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.ldap.authentication.LdapAuthenticationProvider;
import org.springframework.security.ldap.userdetails.LdapUserDetailsServiceImpl;

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .loginPage("/login")
                .permitAll()
                .and()
            .logout()
                .permitAll();
    }

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        LdapAuthenticationProvider ldapAuthenticationProvider = new LdapAuthenticationProvider(
            ldapUserDetailsManager(),
            new BCryptPasswordEncoder()
        );
        auth.authenticationProvider(ldapAuthenticationProvider);
    }

    @Bean
    public LdapUserDetailsManager ldapUserDetailsManager() throws Exception {
        LdapUserDetailsServiceImpl userDetailsService = new LdapUserDetailsServiceImpl();
        userDetailsService.setLdapTemplate(ldapTemplate());
        return userDetailsService;
    }

    @Bean
    public LdapTemplate ldapTemplate() throws Exception {
        return new LdapTemplate(contextSource());
    }

    @Bean
    public LdapContextSource contextSource() throws Exception {
        LdapContextSource contextSource = new LdapContextSource();
        contextSource.setUrl("ldap://your-ldap-server:389");
        contextSource.setBase("ou=users,dc=example,dc=com");
        contextSource.setUsername("your-ldap-username");
        contextSource.setPassword("your-ldap-password");
        return contextSource;
    }
}

創(chuàng)建登錄頁面

在src/main/resources/templates目錄下創(chuàng)建一個名為login.html的文件，添加登錄頁面的HTML代碼。

<!DOCTYPE html>
<html xmlns:th="http://www.thymeleaf.org">
<head>
    <title>Login</title>
</head>
<body>
    <h1>Login</h1>
    <form action="/login" method="post">
        <label for="username">Username:</label>
        <input type="text" id="username" name="username" required /><br/>
        <label for="password">Password:</label>
        <input type="password" id="password" name="password" required /><br/>
        <button type="submit">Login</button>
    </form>
</body>
</html>

現(xiàn)在，當(dāng)用戶嘗試訪問受保護(hù)的資源時，他們將被重定向到登錄頁面。在成功登錄后，用戶將被重定向回他們原本請求的資源。

向AI問一下細(xì)節(jié)

Spring Boot集成LDAP身份認(rèn)證

猜你喜歡

最新資訊

相關(guān)推薦

相關(guān)標(biāo)簽