Spring Boot中自定義Spring Security的UserDetailsService

在Spring Boot中，自定義Spring Security的UserDetailsService可以讓你實(shí)現(xiàn)自己的用戶認(rèn)證和授權(quán)邏輯。以下是如何創(chuàng)建一個(gè)自定義UserDetailsService的步驟：

1. 創(chuàng)建一個(gè)實(shí)現(xiàn)UserDetailsService接口的類：

import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UserDetailsService;
import org.springframework.security.core.userdetails.UsernameNotFoundException;

public class CustomUserDetailsService implements UserDetailsService {

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        // 在這里實(shí)現(xiàn)你的用戶認(rèn)證邏輯
        // 例如，從數(shù)據(jù)庫(kù)或其他存儲(chǔ)系統(tǒng)中獲取用戶信息
        // 如果用戶不存在，拋出UsernameNotFoundException異常

        // 示例：從內(nèi)存中加載用戶信息
        if ("admin".equals(username)) {
            return new User("admin", "password", new ArrayList<>());
        } else {
            throw new UsernameNotFoundException("User not found");
        }
    }
}

2. 在Spring Security配置類中注冊(cè)自定義UserDetailsService：

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;

@Configuration
@EnableWebSecurity
public class SecurityConfig {

    @Bean
    public CustomUserDetailsService customUserDetailsService() {
        return new CustomUserDetailsService();
    }

    @Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(customUserDetailsService())
                .passwordEncoder(passwordEncoder());
    }

    // 其他Spring Security配置...
}

現(xiàn)在，你已經(jīng)成功創(chuàng)建了一個(gè)自定義的UserDetailsService，它將在Spring Security進(jìn)行用戶認(rèn)證時(shí)調(diào)用。你可以根據(jù)需要修改loadUserByUsername方法以實(shí)現(xiàn)自己的認(rèn)證邏輯。