姒傝堪

鐧诲綍閴存潈鏄繚闅滅綉绔欐垨搴旂敤瀹夊叏鐨勫叧閿幆鑺備箣涓€銆傚畠娑夊強鐢ㄦ埛韬唤楠岃瘉锛屾棬鍦ㄧ‘璁ょ敤鎴疯韩浠藉苟鎺у埗浠栦滑瀵圭郴缁熻祫婧愮殑璁块棶鏉冮檺銆傛湰璇剧▼鏃ㄥ湪涓轰綘鎻愪緵浠庡熀纭€鐞嗚鍒板疄璺垫渚嬬殑鍏ㄩ潰鎸囧锛屽府鍔╀綘瀹炵幇瀹夊叏銆侀珮鏁堢殑鐧诲綍閴存潈绯荤粺銆傛垜浠皢娣卞叆鎺㈣璁よ瘉鏂规硶銆佸紑鍙戠幆澧冧笌宸ュ叿閫夋嫨銆佸畨鍏ㄦ渶浣冲疄璺典互鍙婂父瑙侀棶棰樿В鍐崇瓥鐣ワ紝鍔╀綘鏋勫缓绋冲仴鐨勭敤鎴疯璇佷綋绯汇€?/p>涓€銆佽璇嗙櫥褰曢壌鏉?/h3>

鐧诲綍閴存潈浣滀负鐢ㄦ埛绠＄悊鐨勬牳蹇冿紝涓昏鐩爣鏄‘淇濆彧鏈夌粡杩囪韩浠介獙璇佺殑鐢ㄦ埛鎵嶈兘璁块棶鐗瑰畾璧勬簮銆傝繖绉嶆満鍒堕€氬父鍖呮嫭涓や釜鍏抽敭姝ラ锛氶獙璇佺敤鎴疯韩浠斤紝鏍规嵁鐢ㄦ埛瑙掕壊鎴栨潈闄愭帶鍒跺叾瀵硅祫婧愮殑璁块棶銆?/p>

锛堜竴锛夊父瑙佺殑璁よ瘉鏂规硶

鐢ㄦ埛鍚?瀵嗙爜璁よ瘉锛氫紶缁熺殑鐧诲綍鏂瑰紡锛岀敤鎴疯緭鍏ョ敤鎴峰悕鍜屽瘑鐮佸悗锛岀郴缁熼獙璇佽繖浜涗俊鎭槸鍚﹀尮閰嶆暟鎹簱涓殑璁板綍銆?/p>

OAuth锛氫竴绉嶅紑鏀炬巿鏉冨崗璁紝鍏佽鐢ㄦ埛鎺堟潈绗笁鏂瑰簲鐢ㄨ闂叾璧勬簮锛岃€屾棤闇€鐩存帴鍏变韩瀵嗙爜銆?/p>

JSON Web Tokens锛圝WT锛夛細涓€绉嶅姞瀵嗙殑浠ょ墝锛屽寘鍚敤鎴蜂俊鎭拰绛惧悕锛岀敤浜庡湪瀹㈡埛绔拰鏈嶅姟绔箣闂村畨鍏ㄥ湴浜ゆ崲璁よ瘉淇℃伅銆?/p>浜屻€佸疄鐜版楠や笌宸ュ叿閫夋嫨

锛堜竴锛夊紑鍙戠幆澧冧笌宸ュ叿閫夋嫨

閫夋嫨缂栫▼璇█锛氭牴鎹」鐩渶姹傚拰鍥㈤槦鎶€鑳介€夋嫨鍚堥€傜殑璇█锛屽Java銆丳ython銆丣avaScript绛夈€?/p>

妗嗘灦涓庡簱锛氶€夋嫨鎴愮啛鐨勬鏋朵互绠€鍖栧疄鐜拌繃绋嬶紝濡係pring Security銆丏jango銆丯ode.js锛堜娇鐢‥xpress銆丳assport.js绛夊簱锛夈€?/p>

锛堜簩锛夊疄鐜板熀鏈殑鐧诲綍鐣岄潰

寮€鍙戜竴涓寘鍚敤鎴峰悕杈撳叆妗嗐€佸瘑鐮佽緭鍏ユ鍜岀櫥褰曟寜閽殑鐧诲綍鐣岄潰锛屽苟鍔犲叆鈥滆浣忔垜鈥濇垨鈥滃繕璁板瘑鐮佲€濈瓑閾炬帴銆備娇鐢℉TML/CSS鍜孞avaScript杩涜鍓嶇璁捐銆?/p>涓夈€侀泦鎴愯韩浠介獙璇佺郴缁熷疄渚嬪睍绀?/h3>

锛堜竴锛変娇鐢⊿pring Security杩涜鍚庣閰嶇疆

```java

@Configuration

@EnableWebSecurity

public class SecurityConfig extends WebSecurityConfigurerAdapter {

@Autowired

private UserDetailsService userDetailsService;

@Override

protected void configure(HttpSecurity http) throws Exception {

http.authorizeRequests()

.antMatchers("/admin/").hasRole("ADMIN")

.antMatchers("/user/").hasRole("USER")

.anyRequest().authenticated()

.and()

.formLogin()

---

娣卞叆閰嶇疆Spring Security锛氭瀯寤虹ǔ鍋ョ殑鐢ㄦ埛璁よ瘉绯荤粺

1. 閰嶇疆Spring Security鐨勫熀鐭?/p>

鍦⊿pring妗嗘灦涓紝涓轰簡纭繚缃戠珯鐨勫畨鍏ㄦ€э紝鎴戜滑闇€瑕佺簿蹇冮厤缃甋pring Security妯″潡銆備笅闈㈡槸涓€涓叧閿殑瀹夊叏閰嶇疆绫籤SecurityConfig`锛屽畠缁ф壙浜哷WebSecurityConfigurerAdapter`銆?/p>

```java

@Configuration

@EnableWebSecurity

public class SecurityConfig extends WebSecurityConfigurerAdapter {

@Autowired

private UserDetailsService userDetailsService;

@Override

protected void configure(HttpSecurity http) throws Exception {

http.authorizeRequests()

.antMatchers("/admin/").hasRole("ADMIN") // 涓虹鐞嗗憳瀹氫箟璁块棶鏉冮檺

.antMatchers("/user/").hasRole("USER") // 涓烘櫘閫氱敤鎴峰畾涔夎闂潈闄?/p>

.anyRequest().authenticated() // 鍏朵粬鎵€鏈夎姹傞兘闇€瑕佽璇?/p>

.and()

.formLogin() // 浣跨敤琛ㄥ崟鐧诲綍鏂瑰紡

.loginPage("/login").permitAll() // 鐧诲綍椤甸潰鍏佽鎵€鏈夌敤鎴疯闂?/p>

.and()

.logout().permitAll(); // 閫€鍑虹櫥褰曞悓鏍峰厑璁告墍鏈夌敤鎴锋搷浣?/p>

}

@Autowired

public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {

auth.userDetailsService(userDetailsService); // 閰嶇疆鐢ㄦ埛璇︽儏鏈嶅姟锛岀鐞嗙敤鎴蜂俊鎭獙璇佺瓑浠诲姟銆?/p>

}

}

```

璁╂垜浠繁鍏ヤ簡瑙ｅ叾宸ヤ綔鍘熺悊骞惰繘涓€姝ヤ紭鍖栭厤缃紝浠ョ‘淇濈郴缁熷畨鍏ㄣ€傞櫎姝や箣澶栵紝杩樻湁璇稿瀹夊叏瀹炶返闇€瑕侀伒寰€?鎺ヤ笅鏉ユ垜浠皢浠嬬粛涓€浜涘叧閿殑瀹夊叏鏈€浣冲疄璺点€?/p>

2. 瀹夊叏鏈€浣冲疄璺碉細鏋勫缓鍧氫笉鍙懅鐨勭敤鎴疯璇佺郴缁?馃敀 馃捈 馃攼 馃敡 馃洝锔?馃敀 馃攱 馃敆 馃攽 馃敀绛夊浘鏍囨爣蹇楃敤浠ュ姞寮鸿鏄庯細鍏抽敭淇濋殰鍦ㄤ簬闃茶寖鍚勭瀹夊叏闅愭偅鍜屽寮轰唬鐮佺殑鍙淮鎶ゆ€с€傝鍋氬埌杩欎簺锛屽彲鍙傝€冧互涓嬪嚑鐐瑰畨鍏ㄦ渶浣冲疄璺碉細鈥?/p>

鈥?鈥嬧€?馃憤 闃叉SQL娉ㄥ叆鏀诲嚮鈥嬧€? 馃憠 浣跨敤棰勭紪璇戠殑SQL璇彞鎴朞RM妗嗘灦锛堝JPA銆丮yBatis锛夛紝杩欐槸闃叉SQL娉ㄥ叆鐨勬渶浣虫柟娉曘€傝繖鍙互澶уぇ闄嶄綆娼滃湪鐨勫畨鍏ㄩ闄╋紝淇濇姢鏁版嵁搴撳厤鍙楁敾鍑汇€傗€? 鈥嬧€嬸煈?寮哄瘑鐮佺瓥鐣ヤ笌浜屾楠岃瘉鈥嬧€? 馃憠 瀹炴柦瀵嗙爜澶嶆潅鎬ц鍒欙紝鍖呮嫭闀垮害瑕佹眰銆佺壒娈婂瓧绗︺€佹暟瀛楀拰澶у啓瀛楁瘝绛夈€傞泦鎴愰偖浠舵垨鐭俊浜屾楠岃瘉鍔熻兘浠ュ鍔犲畨鍏ㄦ€с€傝繖浜涙帾鏂藉彲浠ュぇ澶ф彁楂樿处鎴风殑瀹夊叏鎬э紝闃叉鏈粡鎺堟潈鐨勮闂€傗€? 鈥嬧€嬸煂?甯歌闂涓庤В鍐虫柟妗堚€?褰撻潰涓村父瑙佺殑楠岃瘉澶辫触绛夐棶棰樻椂锛屽彲浠ヨ繖鏍疯В鍐筹細鈥?妫€鏌ョ敤鎴峰悕鍜屽瘑鐮佲€嬧€? 馃憠 纭繚杈撳叆鐨勭敤鎴峰悕鍜屽瘑鐮佸瓨鍦ㄤ簬鏁版嵁搴撲腑銆傛鏌ョ櫥褰曢€昏緫鏄惁姝ｇ‘澶勭悊澶辫触鎯呭喌锛岀‘淇濋敊璇秷鎭兘澶熸纭繑鍥炵粰鐢ㄦ埛銆傚浜庣Щ鍔ㄥ簲鐢ㄧ殑璁よ瘉闇€姹傗€嬧€?锛岃鑰冭檻鍝嶅簲寮忚璁″苟纭繚鐧诲綍鐣岄潰鍦ㄤ笉鍚岃澶囦笂鍏锋湁鑹ソ鐨勭敤鎴蜂綋楠岋紱鍚屾椂鑰冭檻浣跨敤瀹夊叏鐨勬湰鍦板瓨鍌ㄦ妧鏈潵瀛樺偍鐢ㄦ埛浼氳瘽淇℃伅銆傚崟鐐圭櫥褰曪紙SSO锛夌殑瀹炵幇鈥?闆嗘垚绗笁鏂硅韩浠介獙璇佹湇鍔″OAuth 2.0锛屽疄鐜拌法搴旂敤鐨勫叡浜璇佹祦绋嬪彲浠ュぇ澶х畝鍖栫敤鎴风殑鐧诲綍娴佺▼骞舵彁楂樼郴缁熺殑瀹夊叏鎬с€傗€? 鈥嬫渶鍚庨€氳繃璇剧▼鐨勫涔犲拰瀹炶返閮ㄥ垎鎻愪緵鐨凷pring Security鍜孌jango绀轰緥浠ｇ爜鐨勫涔犱笌瀹炶返浣犲皢鑳藉鐔熺粌鎺屾彙浠庣悊璁哄埌瀹炶返鐨勭櫥褰曢壌鏉冨疄鐜版柟娉曚负浣犵殑椤圭洰鎻愪緵瀹夊叏鍙潬鐨勭敤鎴疯璇佺郴缁熷悓鏃舵垜浠己璋冨畨鍏ㄦ渶浣冲疄璺靛拰甯歌闂鐨勮В鍐崇瓥鐣ョ‘淇濅綘鐨勭櫥褰曢壌鏉冪郴缁熻兘澶熸姷寰″父瑙佹敾鍑诲苟鎻愪緵鑹ソ鐨勭敤鎴蜂綋楠屻€傗€? 鈥嬬患涓婃墍杩伴€氳繃娣卞叆瀛︿範鍜屽疄璺典綘灏嗚兘澶熸瀯寤哄嚭瀹夊叏绋冲畾鐨勭敤鎴疯璇佺郴缁熶负浣犵殑椤圭洰淇濋┚鎶よ埅锛佲€嬧€?鈥嬧€嬸煂?鈥嬧€嬸煂?鈥嬧€嬸煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂燄煂熸€荤粨鏉ヨ閫氳繃鏈绋嬬殑瀛︿範浣犲皢鎺屾彙鏈€鍓嶆部鐨勭敤鎴疯璇佹妧鏈负浣犵殑椤圭洰淇濋┚鎶よ埅锛佽绋嬪唴瀹瑰寘鎷悊璁鸿瑙ｅ拰瀹炶返鎿嶄綔甯姪浣犲揩閫熶笂鎵嬪苟搴旂敤鎵€瀛︾煡璇嗙‘淇濅綘鐨勯」鐩畨鍏ㄦ棤蹇э紒璧跺揩鍔犲叆鎴戜滑鍚э紒涓€璧锋瀯寤哄畨鍏ㄧ殑鏁板瓧涓栫晫锛?/p>