Spring security 配置文件(自用)

            
                org.springframework.security
                spring-security-web
                5.0.5.RELEASE}
            
            
                org.springframework.security
                spring-security-config
                5.0.5.RELEASE
            
            
                org.springframework.security
                spring-security-taglibs
                5.0.5.RELEASE
            

 @PreAuthorize("hasAnyAuthority('数据库中存储的对应权限字段')")

自定义的登录方法需要实现security框架提供的UserDetailsService 接口,同时要和上面配置的认证提供者能够对应的上

@Component
public class SpringSecurityUserService implements UserDetailsService {

    @Reference
    private UserService userService;

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        //调用方法从后台查询账号数据
        User user = userService.findUserByUsername(username);
        if (user == null) {
            return null;
        }
        List list = new ArrayList<>();
        //把用户具有的权限加入到list集合
        for (Role role : user.getRoles()) {
            list.add(new SimpleGrantedAuthority(role.getKeyword()));
            for (Permission permission : role.getPermissions()) {
                list.add(new SimpleGrantedAuthority(permission.getKeyword()));
            }
        }
        //把数据传入到security 判断
        org.springframework.security.core.userdetails.User securityUser =
                new org.springframework.security.core.userdetails.User(username, user.getPassword(), list);
        return securityUser;
    }

}