acegi security实践教程—定制userDetailsService

  前面我们都是使用默认的UserDetailsService，无论是使用InMemoryDaoImpl还是JdbcDaoImpl这种形式。那这篇文章给大家讲解如何自定义userDetailsService，正如咱们前面写过自己的logoutFilter类。

  源码讲解

  UserDetailsService是个对用户信息操作的接口，其中只有一个方法UserDetails loadUserByUsername(String username)，若自定义userDetailsService则需要实现acegi中的userDetailsService接口，实现此方法即可。

package org.acegisecurity.userdetails;
import org.springframework.dao.DataAccessException;
public abstract interface UserDetailsService
{
public abstract UserDetails loadUserByUsername(String paramString)
throws UsernameNotFoundException, DataAccessException;
}

  另外，此方法返回的UserDetails也是接口，acegi中实现其接口的类是User，所以若自定义返回结果，也须实现acegi中的UserDetails接口。

package org.acegisecurity.userdetails;
import java.io.Serializable;
import org.acegisecurity.GrantedAuthority;
public abstract interface UserDetails extends Serializable
{
public abstract GrantedAuthority[] getAuthorities();
public abstract String getPassword();
public abstract String getUsername();
public abstract boolean isAccountNonExpired();
public abstract boolean isAccountNonLocked();
public abstract boolean isCredentialsNonExpired();
public abstract boolean isEnabled();
}

  开发步骤：

  开发环境：

MyEclispe10.7.1+tomcat6.0.37+acegi1.0.5+spring2.0+oracle10g+dbcp数据源

  项目目录如下：  

  其中readme主要用来记录本次验证目的

  代码关键：

  jdbcTemplate.queryForList返回的map类型的List，其中map的key值默认是数据库列名。
  实现UserDetail中的GrantedAuthority[] authorities 是个接口形式，主要存放权限信息。获取的list对象转化成数组对象如下：

for(int i=0;i<dbAuths.size();i++){
String auth=(String)dbAuths.get(i).get("AUTHS");
GrantedAuthorityImpl authority = new GrantedAuthorityImpl(auth);
listAuth.add(authority);
}
GrantedAuthority[] arrayAuths = (GrantedAuthority[]) listAuth.toArray(new GrantedAuthority[listAuth.size()]);

  另外注意：实现UserDetail类中方法，默认为false，根据实际情况而定，若不做处理，可以设置为true。

public boolean isAccountNonExpired() {
// TODO Auto-generated method stub
return true;
}
@Override
public boolean isAccountNonLocked() {
// TODO Auto-generated method stub
return true;
}
@Override
public boolean isCredentialsNonExpired() {
// TODO Auto-generated method stub
return true;
}
@Override
public boolean isEnabled() {
// TODO Auto-generated method stub
if("1".equals(enabled)){
return true;
}else{
return false;
}
}

  定制类：

package com.extend;

import java.util.ArrayList;
import java.util.List;
import java.util.Map;

import org.acegisecurity.GrantedAuthority;
import org.acegisecurity.GrantedAuthorityImpl;
import org.acegisecurity.userdetails.User;
import org.acegisecurity.userdetails.UserDetails;
import org.acegisecurity.userdetails.UserDetailsService;
import org.acegisecurity.userdetails.UsernameNotFoundException;
import org.springframework.dao.DataAccessException;
import org.springframework.jdbc.core.JdbcTemplate;

public class MyUserDetailService implements UserDetailsService {

private JdbcTemplate jdbcTemplate;
@Override
public UserDetails loadUserByUsername(String username)
throws UsernameNotFoundException, DataAccessException {
//根据用户名查询用户基本信息
String baseSql="select * from test_user t where t.user_name=?";
List<Map> list=this.jdbcTemplate.queryForList(baseSql,new Object[]{username});
if(list.size()==0){
throw new UsernameNotFoundException("User not Found");
}
Map pMap=(Map)list.get(0);
MyUser myUser=new MyUser();
myUser.setUsername((String)pMap.get("USER_NAME"));
myUser.setPassword((String)pMap.get("PWD"));
myUser.setEnabled((String)pMap.get("ENABLED"));
//根据用户名查询用户权限信息
String authSql="select AUTHS from test_auths t where t.user_name=?";
List<Map> dbAuths=this.jdbcTemplate.queryForList(authSql,new Object[]{username});
if(dbAuths.size()==0){
throw new UsernameNotFoundException("User has no GrantAuthority");
}
List listAuth=new ArrayList();
for(int i=0;i<dbAuths.size();i++){
String auth=(String)dbAuths.get(i).get("AUTHS");
GrantedAuthorityImpl authority = new GrantedAuthorityImpl(auth);
listAuth.add(authority);
}
GrantedAuthority[] arrayAuths = (GrantedAuthority[]) listAuth.toArray(new GrantedAuthority[listAuth.size()]);
myUser.setAuthorities(arrayAuths);
return myUser;
}
public JdbcTemplate getJdbcTemplate() {
return jdbcTemplate;
}
public void setJdbcTemplate(JdbcTemplate jdbcTemplate) {
this.jdbcTemplate = jdbcTemplate;
}

}

package com.extend;

import java.util.ArrayList;
import java.util.List;
import java.util.Map;

import org.acegisecurity.GrantedAuthority;
import org.acegisecurity.GrantedAuthorityImpl;
import org.acegisecurity.userdetails.User;
import org.acegisecurity.userdetails.UserDetails;
import org.acegisecurity.userdetails.UserDetailsService;
import org.acegisecurity.userdetails.UsernameNotFoundException;
import org.springframework.dao.DataAccessException;
import org.springframework.jdbc.core.JdbcTemplate;

public class MyUserDetailService implements UserDetailsService {

private JdbcTemplate jdbcTemplate;
@Override
public UserDetails loadUserByUsername(String username)
throws UsernameNotFoundException, DataAccessException {
//根据用户名查询用户基本信息
String baseSql="select * from test_user t where t.user_name=?";
List<Map> list=this.jdbcTemplate.queryForList(baseSql,new Object[]{username});
if(list.size()==0){
throw new UsernameNotFoundException("User not Found");
}
Map pMap=(Map)list.get(0);
MyUser myUser=new MyUser();
myUser.setUsername((String)pMap.get("USER_NAME"));
myUser.setPassword((String)pMap.get("PWD"));
myUser.setEnabled((String)pMap.get("ENABLED"));
//根据用户名查询用户权限信息
String authSql="select AUTHS from test_auths t where t.user_name=?";
List<Map> dbAuths=this.jdbcTemplate.queryForList(authSql,new Object[]{username});
if(dbAuths.size()==0){
throw new UsernameNotFoundException("User has no GrantAuthority");
}
List listAuth=new ArrayList();
for(int i=0;i<dbAuths.size();i++){
String auth=(String)dbAuths.get(i).get("AUTHS");
GrantedAuthorityImpl authority = new GrantedAuthorityImpl(auth);
listAuth.add(authority);
}
GrantedAuthority[] arrayAuths = (GrantedAuthority[]) listAuth.toArray(new GrantedAuthority[listAuth.size()]);
myUser.setAuthorities(arrayAuths);
return myUser;
}
public JdbcTemplate getJdbcTemplate() {
return jdbcTemplate;
}
public void setJdbcTemplate(JdbcTemplate jdbcTemplate) {
this.jdbcTemplate = jdbcTemplate;
}

}

  acegi配置文件：

>    <!-- 从数据库中读取用户信息验证身份 -->
<bean id="daoAuthenticationProvider"
class="org.acegisecurity.providers.dao.DaoAuthenticationProvider">
<property name="userDetailsService" ref="userDetailsService" />
</bean>

<!-- 把用户信息、权限信息放到数据库中-->
<bean id="userDetailsService"
class="com.extend.MyUserDetailService">
<property name="jdbcTemplate" ref="JdbcTemplate"> </property>
</bean>
<bean id="JdbcTemplate" class="org.springframework.jdbc.core.JdbcTemplate">
<property name="dataSource" ref="dataSource"></property>
</bean>
<!-- 数据源的绑定 -->
<bean id="dataSource" class="org.apache.commons.dbcp.BasicDataSource"
destroy-method="close">
<property name="driverClassName" value="oracle.jdbc.driver.OracleDriver" />
<property name="url" value="jdbc:oracle:thin:@127.0.0.1:1521:orclnew" />
<property name="username" value="drp"/>
<property name="password" value="drp" />
</bean>

  debug流程：

  上述带领大家进入debug调试，是为了通过分析源码进一步了解acegi的调用流程。

 项目下载：