Anchor-x/SpringDemo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add spring security's authentication

Browse Source
This commit is contained in:
myh 2023-12-03 23:49:24 +08:00
parent cc0c1359bd
commit 31505cf70b
1 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
src/main/java/com/example/springdemo/controller/UsersController.java
View File

@ -3,9 +3,10 @@ package com.example.springdemo.controller;
import com.example.springdemo.entities.Users; import com.example.springdemo.entities.Users;
import com.example.springdemo.entities.password.UsersPassword; import com.example.springdemo.entities.password.UsersPassword;
import com.example.springdemo.service.UsersService; import com.example.springdemo.service.UsersService;
import com.example.springdemo.utils.RoleVerificationAnnotation;
import jakarta.annotation.Resource; import jakarta.annotation.Resource;
import lombok.Data; import lombok.Data;
import org.jetbrains.annotations.NotNull;
import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.web.bind.annotation.*; import org.springframework.web.bind.annotation.*;
import java.util.List; import java.util.List;
@ -19,9 +20,9 @@ public class UsersController {
private UsersService usersService; private UsersService usersService;
//添加新用户 //添加新用户
@RoleVerificationAnnotation(UserIDList = {1}) @PreAuthorize("hasRole('管理员') or hasAuthority('添加用户')")
@PostMapping("/add") @PostMapping("/add")
public Users addUsers(@RequestBody wrapperUserAndPassword wrapperUserAndPassword) { public Users addUsers(@RequestBody @NotNull wrapperUserAndPassword wrapperUserAndPassword) {
return usersService.addUser( return usersService.addUser(
wrapperUserAndPassword.user, wrapperUserAndPassword.user,
wrapperUserAndPassword.userPassword); wrapperUserAndPassword.userPassword);
@ -34,49 +35,49 @@ public class UsersController {
} }
//通过ID删除用户 //通过ID删除用户
@RoleVerificationAnnotation(UserIDList = {1}) @PreAuthorize("hasRole('管理员') or hasAuthority('删除用户')")
@DeleteMapping("/delete/id") @DeleteMapping("/delete/id")
public void deleteUserById(@RequestParam(name = "id") Long userId) { public void deleteUserById(@RequestParam(name = "id") Long userId) {
usersService.deleteUserById(userId); usersService.deleteUserById(userId);
} }
//通过姓名删除用户 //通过姓名删除用户
@RoleVerificationAnnotation(UserIDList = {1}) @PreAuthorize("hasAnyRole('管理员','用户') or hasAuthority('删除用户')")
@DeleteMapping("/delete/name") @DeleteMapping("/delete/name")
public void deleteUserByName(@RequestParam(name = "name") String name) { public void deleteUserByName(@RequestParam(name = "name") String name) {
usersService.deleteUserByName(name); usersService.deleteUserByName(name);
} }
//更新用户信息 //更新用户信息
@RoleVerificationAnnotation(RoleIDList = {1, 3}, UserIDList = {1}) @PreAuthorize("hasAnyRole('管理员','用户') or hasAuthority('修改用户基本信息')")
@PutMapping("/update/info") @PutMapping("/update/info")
public Users updateUser(@RequestBody Users user) { public Users updateUser(@RequestBody Users user) {
return usersService.updateUser(user); return usersService.updateUser(user);
} }
//查找全部用户 //查找全部用户
@RoleVerificationAnnotation(UserIDList = {1}) @PreAuthorize("hasRole('管理员')")
@GetMapping("/find/all") @GetMapping("/find/all")
public List<Users> getUsers() { public List<Users> getUsers() {
return usersService.findAllUsers(); return usersService.findAllUsers();
} }
//根据姓名查找用户 //根据姓名查找用户
@RoleVerificationAnnotation(UserIDList = {1}) @PreAuthorize("hasRole('管理员')")
@GetMapping("/find/name") @GetMapping("/find/name")
public Optional<Users> getUsersByName(@RequestParam(name = "name") String name) { public Optional<Users> getUsersByName(@RequestParam(name = "name") String name) {
return usersService.findByName(name); return usersService.findByName(name);
} }
//根据ID查找用户 //根据ID查找用户
@RoleVerificationAnnotation(UserIDList = {1}) @PreAuthorize("hasRole('管理员')")
@GetMapping("/find/id") @GetMapping("/find/id")
public Optional<Users> getUsersById(@RequestParam(name = "id") Long userId) { public Optional<Users> getUsersById(@RequestParam(name = "id") Long userId) {
return usersService.findById(userId); return usersService.findById(userId);
} }
//更新用户密码 //更新用户密码
@RoleVerificationAnnotation(RoleIDList = {1, 3}, UserIDList = {1}) @PreAuthorize("hasAnyRole('管理员','用户') or hasAuthority('修改用户密码')")
@PutMapping("/update/password") @PutMapping("/update/password")
public int updatePassword(@RequestParam(name = "password") String password, public int updatePassword(@RequestParam(name = "password") String password,
@RequestParam(name = "userId") Long userId) { @RequestParam(name = "userId") Long userId) {