Shulou(Shulou.com)06/01 Report--

This article introduces how SpringBoot2 integrates SpringSecurity framework to achieve user rights security management, the content is very detailed, interested friends can refer to, hope to be helpful to you.

1. Introduction to Security 1. Basic concepts

Spring Security is a security framework that can provide declarative secure access control solutions for Spring-based enterprise applications. It provides a set of Bean that can be configured in the Spring application context, makes full use of the IOC,DI,AOP (aspect-oriented programming) function of Spring, provides declarative security access control for the application system, and reduces the work of writing a lot of repetitive code for security control.

2. Interpretation of Core API

1), SecurityContextHolder

The most basic object holds the current session user authentication, permissions, authentication and other core data. By default, SecurityContextHolder uses the ThreadLocal policy to store authentication information, which is bound to the thread. When the user exits, the authentication information of the current thread is automatically cleared. To understand the springcloud architecture, please add: three, six, two, four, seven, two, 59

Initialize the source code: obviously use ThreadLocal threads.

Private static void initialize () {if (! StringUtils.hasText (strategyName)) {strategyName = "MODE_THREADLOCAL";} if (strategyName.equals ("MODE_THREADLOCAL")) {strategy = new ThreadLocalSecurityContextHolderStrategy ();} else if (strategyName.equals ("MODE_INHERITABLETHREADLOCAL")) {strategy = new InheritableThreadLocalSecurityContextHolderStrategy ();} else if (strategyName.equals ("MODE_GLOBAL")) {strategy = new GlobalSecurityContextHolderStrategy () } else {try {Class clazz = Class.forName (strategyName); Constructor customStrategy = clazz.getConstructor (); strategy = (SecurityContextHolderStrategy) customStrategy.newInstance ();} catch (Exception var2) {ReflectionUtils.handleReflectionException (var2);}} + + initializeCount;}

2), Authentication

source code

Public interface Authentication extends Principal, Serializable {Collection

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.