Acegi預設的是通過JdbcDaoImpl訪問數(shù)據(jù)庫進行身份驗證，我們首先來看下配置文件
<!-- 數(shù)據(jù)庫驗證身份采用內(nèi)存DAO -->
<bean id="daoAuthenticationProvider" class="org.acegisecurity.providers.dao.DaoAuthenticationProvider">
<property name="userDetailsService">
<ref bean="jdbcDaoImpl"/>
</property>
<property name="userCache">
<ref bean="userCache"/>
</property>
</bean>
<bean id="jdbcDaoImpl" class="org.acegisecurity.userdetails.jdbc.JdbcDaoImpl">
<property name="dataSource">
<ref bean="dataSource"/>
</property>
<property name="usersByUsernameQuery">
<value>
SELECT username,password,enabled FROM user WHERE username=?
</value>
</property>
<property name="authoritiesByUsernameQuery">
<value>
SELECT username, rolename
FROM user u, role r, user_role ur
WHERE u.id = ur.user_id
and r.id = ur.role_id
and u.username = ?
</value>
</property>
</bean>
從配置及源碼可以看出JdbcDaoImpl都是實現(xiàn)了UserDetailsService接口, 而這個接口里只定義了一個方法:UserDetails loadUserByUsername(String username) 就是根據(jù)用戶名加載UserDetails對象。要獲取更多的用戶信息可以通過擴展JdbcDaoImpl，重寫UsersByUsernameMapping方法來封裝UserDetails對象。首先需要擴展UserDetails接口, 并擴展org.acegisecurity.userdetails.User
public interface IUserDetails extends UserDetails {
public void setUsername_cn(String username_cn);
public String getUsername_cn();
public String getUsername();
public void setUsername(String username);
public GrantedAuthority[] getAuthorities();
public void setAuthorities(GrantedAuthority[] authorities);
}
public class UserDetailsImpl extends User implements IUserDetails {
private String username_cn;
private String username;
private GrantedAuthority[] authorities;
public UserDetailsImpl(String username, String password, boolean enabled,
boolean accountNonExpired, boolean credentialsNonExpired,
boolean accountNonLocked, GrantedAuthority[] authorities)
throws IllegalArgumentException {
super(username, password, enabled, accountNonExpired, credentialsNonExpired,
accountNonLocked, authorities);
setUsername(username);
setAuthorities(authorities);
}
public UserDetailsImpl(String username_cn, String username, String password, boolean enabled,
boolean accountNonExpired, boolean credentialsNonExpired,
boolean accountNonLocked, GrantedAuthority[] authorities)
throws IllegalArgumentException {
super(username, password, enabled, accountNonExpired, credentialsNonExpired,
accountNonLocked, authorities);
this.username_cn = username_cn;
setUsername(username);
setAuthorities(authorities);
}
public GrantedAuthority[] getAuthorities() {
return authorities;
}
public void setAuthorities(GrantedAuthority[] authorities) {
this.authorities = authorities;
}
public String getUsername() {
return username;
}
public void setUsername(String username) {
this.username = username;
}
public String getUsername_cn() {
return username_cn;
}
public void setUsername_cn(String username_cn) {
this.username_cn = username_cn;
}
}
接著通過擴展JdbcDaoImpl，重寫IUserDetails loadUserByUsername(String username)返回我們所擴展的UserDetail對象
public class AcegiJdbcDaoImpl extends JdbcDaoImpl {
.
public IUserDetails loadUserByUsername(String username)
throws UsernameNotFoundException, DataAccessException {
List users = usersByNameMapping.execute(username);
if (users.size() == 0) {
throw new UsernameNotFoundException("User not found");
}
IUserDetails user = (IUserDetails) users.get(0); // contains no GrantedAuthority[]
List dbAuths = rolesByUsernameMapping.execute(user.getUsername());
addCustomAuthorities(user.getUsername(), dbAuths);
if (dbAuths.size() == 0) {
throw new UsernameNotFoundException("User has no GrantedAuthority");
}
GrantedAuthority[] arrayAuths = (GrantedAuthority[]) dbAuths.toArray(new GrantedAuthority[dbAuths.size()]);
user.setAuthorities(arrayAuths);
if (!usernameBasedPrimaryKey) {
user.setUsername(username);
}
return user;
}
protected class UsersByUsernameMapping extends MappingSqlQuery {
protected UsersByUsernameMapping(DataSource ds) {
super(ds, usersByUsernameQuery);
declareParameter(new SqlParameter(Types.VARCHAR));
compile();
}
protected Object mapRow(ResultSet rs, int rownum)
throws SQLException {
String username = rs.getString("username");
String username_cn = rs.getString("username_cn");
String password = rs.getString(3);
boolean enabled = rs.getBoolean("enabled");
IUserDetails user = new UserDetailsImpl(username, password, enabled, true, true, true,
new GrantedAuthority[] {new GrantedAuthorityImpl("HOLDER")});
user.setUsername_cn(username_cn);
return user;
}
}
}
相應的配置文件更改為
AcegiJdbcDaoImpl bean
<bean id="daoAuthenticationProvider"
class="org.acegisecurity.providers.dao.DaoAuthenticationProvider">
<property name="userDetailsService" ref="userDetailsService" />
</bean>
<bean id="userDetailsService"
class="com.emms.security.acegi.AcegiJdbcDaoImpl">
<property name="dataSource">
<ref bean="dataSource" />
</property>
<property name="usersByUsernameQuery">
<value>
SELECT distinct(u.username), u.username_cn, password, enabled from emms_role r, user_role ur, emms_user u
where r.id = ur.role_id and ur.user_id = u.username and u.username = ?
</value>
</property>
<property name="authoritiesByUsernameQuery">
<value>
SELECT u.username, r.rolename FROM user_role ur, emms_user u, emms_role r
WHERE ur.user_id = u.username and ur.role_id = r.id and u.username = ?
</value>
</property>
</bean>
posted on 2008-03-11 09:29
扭曲的鉛筆 閱讀(1532)
評論(1) 編輯 收藏 所屬分類:
Spring