115 lines
5.0 KiB
Java
115 lines
5.0 KiB
Java
package com.youlai.boot.config;
|
|
|
|
import cn.hutool.captcha.generator.CodeGenerator;
|
|
import cn.hutool.core.collection.CollectionUtil;
|
|
import com.youlai.boot.common.constant.SecurityConstants;
|
|
import com.youlai.boot.config.property.SecurityProperties;
|
|
import com.youlai.boot.core.filter.RateLimiterFilter;
|
|
import com.youlai.boot.core.security.exception.MyAccessDeniedHandler;
|
|
import com.youlai.boot.core.security.exception.MyAuthenticationEntryPoint;
|
|
import com.youlai.boot.core.security.filter.JwtValidationFilter;
|
|
import com.youlai.boot.core.security.filter.CaptchaValidationFilter;
|
|
import com.youlai.boot.shared.auth.service.impl.JwtTokenService;
|
|
import com.youlai.boot.system.service.ConfigService;
|
|
import lombok.RequiredArgsConstructor;
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.context.annotation.Configuration;
|
|
import org.springframework.data.redis.core.RedisTemplate;
|
|
import org.springframework.security.authentication.AuthenticationManager;
|
|
import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
|
|
import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
|
|
import org.springframework.security.config.annotation.web.configurers.AbstractHttpConfigurer;
|
|
import org.springframework.security.config.annotation.web.configurers.HeadersConfigurer;
|
|
import org.springframework.security.config.http.SessionCreationPolicy;
|
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
|
import org.springframework.security.crypto.password.PasswordEncoder;
|
|
import org.springframework.security.web.SecurityFilterChain;
|
|
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
|
|
|
|
/**
|
|
* Spring Security 权限配置
|
|
*
|
|
* @author Ray
|
|
* @since 2023/2/17
|
|
*/
|
|
@Configuration
|
|
@EnableWebSecurity
|
|
@EnableMethodSecurity
|
|
@RequiredArgsConstructor
|
|
public class SecurityConfig {
|
|
|
|
private final MyAuthenticationEntryPoint authenticationEntryPoint;
|
|
private final MyAccessDeniedHandler accessDeniedHandler;
|
|
private final RedisTemplate<String, Object> redisTemplate;
|
|
private final CodeGenerator codeGenerator;
|
|
private final SecurityProperties securityProperties;
|
|
private final ConfigService configService;
|
|
private final JwtTokenService jwtTokenService;
|
|
|
|
@Bean
|
|
public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
|
|
http
|
|
|
|
.authorizeHttpRequests(requestMatcherRegistry ->
|
|
requestMatcherRegistry
|
|
.requestMatchers(
|
|
SecurityConstants.LOGIN_PATH,
|
|
SecurityConstants.WECHAT_LOGIN_PATH)
|
|
.permitAll()
|
|
.anyRequest().authenticated()
|
|
)
|
|
.exceptionHandling(httpSecurityExceptionHandlingConfigurer ->
|
|
httpSecurityExceptionHandlingConfigurer
|
|
.authenticationEntryPoint(authenticationEntryPoint)
|
|
.accessDeniedHandler(accessDeniedHandler)
|
|
)
|
|
.sessionManagement(configurer -> configurer.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
|
|
.csrf(AbstractHttpConfigurer::disable)
|
|
.headers(headers -> headers.frameOptions(HeadersConfigurer.FrameOptionsConfig::disable))
|
|
|
|
;
|
|
// 限流过滤器
|
|
http.addFilterBefore(new RateLimiterFilter(redisTemplate, configService), UsernamePasswordAuthenticationFilter.class);
|
|
// 验证码校验过滤器
|
|
http.addFilterBefore(new CaptchaValidationFilter(redisTemplate, codeGenerator), UsernamePasswordAuthenticationFilter.class);
|
|
// JWT 校验过滤器
|
|
http.addFilterBefore(new JwtValidationFilter(jwtTokenService), UsernamePasswordAuthenticationFilter.class);
|
|
|
|
return http.build();
|
|
}
|
|
|
|
/**
|
|
* 不走过滤器链的放行配置
|
|
*/
|
|
@Bean
|
|
public WebSecurityCustomizer webSecurityCustomizer() {
|
|
return (web) -> {
|
|
if (CollectionUtil.isNotEmpty(securityProperties.getIgnoreUrls())) {
|
|
web.ignoring().requestMatchers(securityProperties.getIgnoreUrls().toArray(new String[0]));
|
|
}
|
|
};
|
|
}
|
|
|
|
/**
|
|
* 密码编码器
|
|
*/
|
|
@Bean
|
|
public PasswordEncoder passwordEncoder() {
|
|
return new BCryptPasswordEncoder();
|
|
}
|
|
|
|
/**
|
|
* AuthenticationManager 手动注入
|
|
*
|
|
* @param authenticationConfiguration 认证配置
|
|
*/
|
|
@Bean
|
|
public AuthenticationManager authenticationManager(AuthenticationConfiguration authenticationConfiguration) throws Exception {
|
|
return authenticationConfiguration.getAuthenticationManager();
|
|
}
|
|
|
|
}
|