Spring Security授权_编写查询权限方法

在认证后进行授权需要根据用户id查询到用户的权限，写法如下：

编写用户、角色、权限实体类

//用户类
/**
 * @Author yqq
 * @Date 2022/05/17 22:47
 * @Version 1.0
 */
@Data
public class Users {
    private Integer uid;
    private String username;
    private String password;
    private String phone;
}
//角色类
@Data
public class Role {
    private Integer rid;
    private String rolename;
    private String roledesc;
}
//权限类
@Data
public class Permission {
    private Integer pid;
    private String permissionname;
    private String url;

编写UserMapper接口

public interface UsersMapper extends BaseMapper<Users> {
    List<Permission> findPermissionByUserName(String username);
}

在resources目录中编写UsersMapper的映射文件

<select id="findPermissionByUserName" resultType="com.neu.model.Permission">
    SELECT
     p.pid,p.permissionName,p.url
    FROM
     users u
    LEFT JOIN users_role ur ON u.uid = ur.uid
    LEFT JOIN role r ON ur.rid = r.rid
    LEFT JOIN role_permission rp ON r.rid = rp.rid
    LEFT JOIN permission p ON rp.pid = p.pid
    WHERE username = #{username}
  </select>

测试

@SpringBootTest
public class MapperTest {
    @Autowired
    private UsersMapper usersMapper;
    @Test
    public void test(){
        List<Permission> permissions = usersMapper.findPermissionByUserName("yqq");
        permissions.forEach(System.out::println);
    }
}

认证成功后把权限封装GrantedAuthority类

@Service
public class MyUserDetailService implements UserDetailsService {

    @Autowired
    private UsersMapper usersMapper;

    //自定义认证逻辑
    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        //1 构造查询条件
        QueryWrapper<Users> wrapper = new QueryWrapper<Users>().eq("username", username);
        //2 查询用户
        Users users = usersMapper.selectOne(wrapper);
        if (users == null)
            return null;
        //3 查询用户权限
        List<Permission> permissions = usersMapper.findPermissionByUserName(username);
        //4 将自定义权限集合转换为Security的权限类型集合
        List<GrantedAuthority> grantedAuthorities = new ArrayList<>();
        permissions.forEach(e -> {
            grantedAuthorities.add(new SimpleGrantedAuthority(e.getUrl()));
        });
        //5 封装为UserDetails对象
        UserDetails userDetails = User.withUsername(users.getUsername())
                .password(users.getPassword())
                .authorities(grantedAuthorities)
                .build();
        //6 返回封装好的userDetails对象
        return userDetails;
    }
}