ajax登錄退出

使用ajax實(shí)現(xiàn)登錄退出那么就不要配置登錄成功或者失敗的url地址等等，只要使用successHandler或者failHandler配置處理器即可。

示列

  • 加入maven依賴
<dependencies>
        <dependency>
            <groupId>org.springframework</groupId>
            <artifactId>spring-webmvc</artifactId>
            <version>4.3.13.RELEASE</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-web</artifactId>
            <version>4.2.3.RELEASE</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-config</artifactId>
            <version>4.2.3.RELEASE</version>
        </dependency>
        <dependency>
            <groupId>javax.servlet</groupId>
            <artifactId>javax.servlet-api</artifactId>
            <version>3.1.0</version>
            <scope>provided</scope>
        </dependency>
        <dependency>
            <groupId>javax.servlet.jsp</groupId>
            <artifactId>jsp-api</artifactId>
            <version>2.2</version>
            <scope>provided</scope>
        </dependency>
        <dependency>
            <groupId>com.google.code.gson</groupId>
            <artifactId>gson</artifactId>
            <version>2.8.0</version>
        </dependency>
    </dependencies>


    <build>
        <finalName>secuity-ajax-login-out</finalName>
        <plugins>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-war-plugin</artifactId>
                <version>3.0.0</version>
                <configuration>
                    <failOnMissingWebXml>false</failOnMissingWebXml>
                </configuration>
            </plugin>
            <plugin>
                <groupId>org.eclipse.jetty</groupId>
                <artifactId>jetty-maven-plugin</artifactId>
                <version>9.4.3.v20170317</version>
                <configuration>
                    <httpConnector>
                        <port>8001</port>
                    </httpConnector>
                    <webApp>
                        <contextPath>/</contextPath>
                    </webApp>
                </configuration>
            </plugin>
        </plugins>
    </build>
  • 實(shí)體類

因?yàn)槲沂褂胊jax登錄退出，所以我登錄退出成功失敗都是分別返回一個(gè)LoginResp實(shí)體和LogoutResp實(shí)體，實(shí)體定義如下：

LoginResp

public class LoginResp {
    private Integer code;
    private String msg;
    public Integer getCode() {
        return code;
    }
    public void setCode(Integer code) {
        this.code = code;
    }
    public String getMsg() {
        return msg;
    }
    public void setMsg(String msg) {
        this.msg = msg;
    }

    public LoginResp(){}

    public LoginResp(Integer code, String msg) {
        this.code = code;
        this.msg = msg;
    }
}

LogoutResp

public class LogoutResp extends LoginResp {

}
  • 定義系統(tǒng)啟動(dòng)類
public class WebAppInitializer extends AbstractAnnotationConfigDispatcherServletInitializer {

    //系統(tǒng)啟動(dòng)的時(shí)候的根類
    @Override
    protected Class<?>[] getRootConfigClasses() {
        return new Class<?>[]{WebAppConfig.class};
    }

    @Override
    protected Class<?>[] getServletConfigClasses() {
        return null;
    }

    //設(shè)置成/*表示攔截靜態(tài)的文件
    @Override
    protected String[] getServletMappings() {
        return new String[]{"/"};
    }

}
  • web入口
/**
 * 入口類，啟動(dòng)spring mvc，啟動(dòng)spring secuity
 */
@EnableWebMvc
@EnableWebSecurity
@ComponentScan("com.zhihao.miao.secuity")
public class WebAppConfig extends WebMvcConfigurerAdapter {
    public void configureDefaultServletHandling(DefaultServletHandlerConfigurer configurer) {
        configurer.enable();
    }

     //配置視圖解析器
    public void configureViewResolvers(ViewResolverRegistry registry) {
        registry.jsp();
    }
}
  • spring security配置類
/**
 * 初始化spring security
 */
public class WebAppSecurityInitializer extends AbstractSecurityWebApplicationInitializer {

    protected String getDispatcherWebApplicationContextSuffix() {
        return AbstractDispatcherServletInitializer.DEFAULT_SERVLET_NAME;
    }
}
  • 具體的controller

HelloController：

@RestController
public class HelloController {

    @GetMapping("/hello")
    public String hello(){
        return "hello spring secuity";
    }

    @GetMapping("/home")
    public String home(){
        return "home spring security";
    }

    @GetMapping("/admin")
    public String admin(){
        return "admin spring secuity";
    }
}

LoginController：

@Controller
public class LoginController {

    @GetMapping("/sys/login")
    public String login(){
        return "/jsp/login";
    }


    @GetMapping("/sys/logout")
    public String logout(){
        return "/jsp/logout";
    }



    @PostMapping("/sys/loginFail")
    public String fail(HttpServletRequest req){
        AuthenticationException exp = (AuthenticationException)req.getAttribute(WebAttributes.AUTHENTICATION_EXCEPTION);
        if(exp instanceof BadCredentialsException){
            req.setAttribute("error_msg", "用戶名或密碼錯(cuò)誤");
        } else if(exp instanceof AccountExpiredException){
            req.setAttribute("error_msg", "賬戶過(guò)期");
        } else if(exp instanceof LockedException){
            req.setAttribute("error_msg", "賬戶已被鎖");
        }else{
            //其他錯(cuò)誤打印這些信息
            System.out.println(exp.getMessage());
        }
        return "/jsp/login";
    }
}
  • 權(quán)限相關(guān)配置類

登錄成功失敗后返回一個(gè)LoginResp對(duì)象的JSON類型到頁(yè)面上，退出成功失敗后返回一個(gè)LogoutResp對(duì)象的JSON類型到頁(yè)面上，

@Configuration
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.inMemoryAuthentication().withUser("zhangsan").password("123456").roles("GUEST");
        auth.inMemoryAuthentication().withUser("zhihao.miao").password("123456").roles("USER");
        auth.inMemoryAuthentication().withUser("lisi").password("12345678").roles("USER", "ADMIN");
    }

    protected void configure(HttpSecurity http) throws Exception {

        http.authorizeRequests().antMatchers("/hello").hasRole("GUEST");
        http.authorizeRequests().antMatchers("/home").hasRole("USER");
        http.authorizeRequests().antMatchers("/admin").hasRole("ADMIN");

        //登錄的跳轉(zhuǎn)頁(yè)面，和登錄的動(dòng)作url不應(yīng)該有權(quán)限認(rèn)證。
        http.authorizeRequests().antMatchers("/sys/login").permitAll();
        //配置登出頁(yè)面的跳轉(zhuǎn)url地址也有權(quán)限訪問(wèn)，不去跳轉(zhuǎn)到登錄頁(yè)面
        http.authorizeRequests().antMatchers("/sys/logout").permitAll();
        http.authorizeRequests().antMatchers("/**/*.html").permitAll();
        http.authorizeRequests().antMatchers("/**/*.css").permitAll();
        http.authorizeRequests().antMatchers("/**/*.js").permitAll();
        http.authorizeRequests().antMatchers("/**/*.png").access("permitAll");

        http.authorizeRequests().anyRequest().authenticated();

        http.formLogin()
                .loginPage("/sys/login")
                .loginProcessingUrl("/sys/doLogin")  //登錄的按鈕執(zhí)行的動(dòng)作
                .successHandler((req, resp, auth) -> {
                    LoginResp lr = new LoginResp(1, "用戶登陸成功");
                    String json = new Gson().toJson(lr);

                    resp.setContentType("application/json");
                    resp.getWriter().write(json);
                })
                .failureHandler((req, resp, excp) -> {
                    LoginResp lr = new LoginResp();
                    lr.setCode(0);

                    if(excp instanceof BadCredentialsException){
                        lr.setMsg("用戶名或密碼錯(cuò)誤");
                    } else if(excp instanceof AccountExpiredException){
                        lr.setMsg("賬戶過(guò)期");
                    } else if(excp instanceof LockedException){
                        lr.setMsg("賬戶已被鎖");
                    } else {
                        lr.setMsg("用戶登陸失敗");
                    }

                    String json = new Gson().toJson(lr);

                    resp.setContentType("application/json");
                    resp.getWriter().write(json);
                })
                .permitAll();

        http.logout()
                .logoutRequestMatcher(new AntPathRequestMatcher("/sys/doLogout", "GET")) //支持定制退出url以及httpmethod
                .logoutSuccessHandler((req, resp, auth) -> {
                    LogoutResp lr = new LogoutResp();
                    lr.setCode(1);
                    lr.setMsg("用戶退出成功");
                    String json = new Gson().toJson(lr);

                    resp.setContentType("application/json");
                    resp.getWriter().write(json);
                })
                .clearAuthentication(true)
                .invalidateHttpSession(true);
    }
}
  • 登錄頁(yè)面login.jsp 
<div class="login">
    <h1>Login</h1>
    <form method="post" action="/doLogin">
        <input type="hidden" name="${ _csrf.parameterName}" value="${ _csrf.token}" />
        <input type="text" name="username" placeholder="用戶名" />
        <input type="password" name="password" placeholder="密碼"/>
        <button type="button" onclick="doLogin()" class="btn btn-primary btn-block btn-large">登錄</button>
    </form>
    <div class="login-bottom" style="color:red;">${error_msg}</div>
</div>

<div style="text-align:center;">
</div>

</body>

<script type="text/javascript" src="http://apps.bdimg.com/libs/jquery/2.1.1/jquery.min.js"></script>
<script type="text/javascript">
    function doLogin(){
        var _csrf = $('input[name=_csrf]').val();
        var username = $('input[name=username]').val();
        var password = $('input[name=password]').val();
        var data = {_csrf:_csrf,username:username,password:password};
        //登錄提交的url，在WebSecurityConfig配置類中配置了，登錄成功之后跳轉(zhuǎn)到/html/show.html頁(yè)面，此頁(yè)面也是登出頁(yè)面
        $.post('/sys/doLogin', data, function(resp){
            if(resp.code == 1){
                alert('登陸成功');
                window.location.href = "/html/show.html";
            } else {
                alert(resp.msg);
            }
        });
    }
</script>
  • 登出頁(yè)面show.html 
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Insert title here</title>
</head>
<body>
<h1>登陸成功</h1>
<hr />
<a href="#" onclick="doLogout()">logout</a>
</body>
<script type="text/javascript" src="http://apps.bdimg.com/libs/jquery/2.1.1/jquery.min.js"></script>
<script type="text/javascript">
    function doLogout(){
        var data = {};
        //配置的登出的url，
        $.get('/sys/doLogout', data, function(resp){
            if(resp.code == 1){
                alert('退出成功');
                window.location.href = "/hello";
            } else {
                alert(resp.msg);
            }
        });
    }
</script>
</html>
  • 啟動(dòng)服務(wù)，測(cè)試一下

訪問(wèn)http://localhost:8001/hello，跳轉(zhuǎn)到登錄頁(yè)面http://localhost:8001/sys/login，輸入正確的用戶名密碼之后頁(yè)面彈出登陸成功，點(diǎn)擊確認(rèn)之后跳轉(zhuǎn)到http://localhost:8001/html/show.html（也就是我們的退出頁(yè)面）

驗(yàn)證用戶名密碼成功之后，頁(yè)面彈出登錄成功
登錄成功之后點(diǎn)擊確認(rèn)跳轉(zhuǎn)的接口，點(diǎn)擊logout退出，

退出成功之后頁(yè)面彈出退出成功，點(diǎn)擊確認(rèn)之后跳轉(zhuǎn)到登錄頁(yè)面


退出成功之后頁(yè)面彈出退出成功，點(diǎn)擊確認(rèn)之后跳轉(zhuǎn)到登錄頁(yè)面

參考代碼

secuity-ajax-login-out

參考資料

官方文檔
Spring Security 從入門到進(jìn)階系列教程

?著作權(quán)歸作者所有,轉(zhuǎn)載或內(nèi)容合作請(qǐng)聯(lián)系作者
【社區(qū)內(nèi)容提示】社區(qū)部分內(nèi)容疑似由AI輔助生成，瀏覽時(shí)請(qǐng)結(jié)合常識(shí)與多方信息審慎甄別。
平臺(tái)聲明：文章內(nèi)容（如有圖片或視頻亦包括在內(nèi)）由作者上傳并發(fā)布，文章內(nèi)容僅代表作者本人觀點(diǎn)，簡(jiǎn)書系信息發(fā)布平臺(tái)，僅提供信息存儲(chǔ)服務(wù)。

相關(guān)閱讀更多精彩內(nèi)容

  • 我們查看源碼 從默認(rèn)的退出api入口， 進(jìn)入logout方法， 我們查看LogoutConfigurer類，默認(rèn)的...
    二月_春風(fēng)閱讀 5,701評(píng)論 0贊 0
  • Spring Cloud為開(kāi)發(fā)人員提供了快速構(gòu)建分布式系統(tǒng)中一些常見(jiàn)模式的工具（例如配置管理，服務(wù)發(fā)現(xiàn)，斷路器，智...
    卡卡羅2017閱讀 136,618評(píng)論 19贊 139
  • 22年12月更新：個(gè)人網(wǎng)站關(guān)停，如果仍舊對(duì)舊教程有興趣參考 Github 的markdown內(nèi)容[https://...
    tangyefei閱讀 35,417評(píng)論 22贊 257
  • 8.6 Spring Boot集成Spring Security 開(kāi)發(fā)Web應(yīng)用，對(duì)頁(yè)面的安全控制通常是必須的。比...
    光劍書架上的書閱讀 76,414評(píng)論 5贊 146
  • 被“誤”用的道歉：一封以道歉名義發(fā)表的求愛(ài)書 “……映霞，我真真對(duì)你不起了，因?yàn)槲覑?ài)你的熱度愈高，使你所受的困惑也...
    腦洞大叔閱讀 3,648評(píng)論 2贊 11

友情鏈接更多精彩內(nèi)容