//記住我秒數(shù)配置
private int rememberMeSeconds = 10;齊活
package com.imooc.s@Configuration //這是一個(gè)配置
public class BrowserSecurityConfig extends WebSecurityConfigurerAdapter{
  //讀取用戶(hù)配置的登錄頁(yè)配置
  @Autowired
  private SecurityProperties securityProperties;
  //自定義的登錄成功后的處理器
  @Autowired
  private AuthenticationSuccessHandler imoocAuthenticationSuccessHandler;
  //自定義的認(rèn)證失敗后的處理器
  @Autowired
  private AuthenticationFailureHandler imoocAuthenticationFailureHandler;
  //數(shù)據(jù)源
  @Autowired
  private DataSource dataSource;
  @Autowired
  private UserDetailsService userDetailsService;
  //注意是org.springframework.security.crypto.password.PasswordEncoder
  @Bean
  public PasswordEncoder passwordencoder(){
    //BCryptPasswordEncoder implements PasswordEncoder
    return new BCryptPasswordEncoder();
  }
  /**
   * 記住我TokenRepository配置，在登錄成功后執(zhí)行
   * 登錄成功后往數(shù)據(jù)庫(kù)存token的
   * @Description: 記住我TokenRepository配置
   * @param @return  JdbcTokenRepositoryImpl
   * @return PersistentTokenRepository 
   * @throws
   * @author lihaoyang
   * @date 2018年3月5日
   */
  @Bean
  public PersistentTokenRepository persistentTokenRepository(){
    JdbcTokenRepositoryImpl jdbcTokenRepository = new JdbcTokenRepositoryImpl();
    jdbcTokenRepository.setDataSource(dataSource);
    //啟動(dòng)時(shí)自動(dòng)生成相應(yīng)表，可以在JdbcTokenRepositoryImpl里自己執(zhí)行CREATE_TABLE_SQL腳本生成表
    jdbcTokenRepository.setCreateTableOnStartup(true);
    return jdbcTokenRepository;
  }
  //版本二：可配置的登錄頁(yè)
  @Override
  protected void configure(HttpSecurity http) throws Exception {
    //驗(yàn)證碼過(guò)濾器
    ValidateCodeFilter validateCodeFilter = new ValidateCodeFilter();
    //驗(yàn)證碼過(guò)濾器中使用自己的錯(cuò)誤處理
    validateCodeFilter.setAuthenticationFailureHandler(imoocAuthenticationFailureHandler);
    //配置的驗(yàn)證碼過(guò)濾url
    validateCodeFilter.setSecurityProperties(securityProperties);
    validateCodeFilter.afterPropertiesSet();
    //實(shí)現(xiàn)需要認(rèn)證的接口跳轉(zhuǎn)表單登錄,安全=認(rèn)證+授權(quán)
    //http.httpBasic() //這個(gè)就是默認(rèn)的彈框認(rèn)證
    //
    http //把驗(yàn)證碼過(guò)濾器加載登錄過(guò)濾器前邊
      .addFilterBefore(validateCodeFilter, UsernamePasswordAuthenticationFilter.class)
      //表單認(rèn)證相關(guān)配置
      .formLogin() 
        .loginPage("/authentication/require") //處理用戶(hù)認(rèn)證BrowserSecurityController
        //登錄過(guò)濾器UsernamePasswordAuthenticationFilter默認(rèn)登錄的url是"/login"，在這能改
        .loginProcessingUrl("/authentication/form") 
        .successHandler(imoocAuthenticationSuccessHandler)//自定義的認(rèn)證后處理器
        .failureHandler(imoocAuthenticationFailureHandler) //登錄失敗后的處理
      .and()
      //記住我相關(guān)配置  
      .rememberMe()
        .tokenRepository(persistentTokenRepository())//TokenRepository，登錄成功后往數(shù)據(jù)庫(kù)存token的
        .tokenValiditySeconds(securityProperties.getBrowser().getRememberMeSeconds())//記住我秒數(shù)
        .userDetailsService(userDetailsService) //記住我成功后，調(diào)用userDetailsService查詢(xún)用戶(hù)信息
      .and()
      //授權(quán)相關(guān)的配置 
      .authorizeRequests() 
        // /authentication/require：處理登錄，securityProperties.getBrowser().getLoginPage():用戶(hù)配置的登錄頁(yè)
        .antMatchers("/authentication/require",
        securityProperties.getBrowser().getLoginPage(),//放過(guò)登錄頁(yè)不過(guò)濾，否則報(bào)錯(cuò)
        "/verifycode/image").permitAll() //驗(yàn)證碼
        .anyRequest()    //任何請(qǐng)求
        .authenticated()  //都需要身份認(rèn)證
      .and()
        .csrf().disable() //關(guān)閉csrf防護(hù)
      ;  
  }
}ecurity.browser;

spring.datasource.driver-class-name=com.mysql.jdbc.Driver
spring.datasource.url=jdbc:mysql://127.0.0.1:3306/imooc-demo
spring.datasource.username=root
spring.datasource.password=root