urls = roleMap.get(key);
+ if (CollectionUtil.isNotEmpty(urls)) {
+ String[] stringArray = new String[urls.size()];
+ roleArrayMap.put(key, urls.toArray(stringArray));
+ }
+ }
+ }
+ return roleArrayMap;
+ }
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/config/AuthenticationBeanConfig.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/config/AuthenticationBeanConfig.java
new file mode 100644
index 0000000..37d7da7
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/config/AuthenticationBeanConfig.java
@@ -0,0 +1,28 @@
+package com.ningdatech.pmapi.user.security.auth.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.core.session.SessionRegistry;
+import org.springframework.security.core.session.SessionRegistryImpl;
+import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
+import org.springframework.security.crypto.password.PasswordEncoder;
+
+/**
+ * @Author LiuXinXin
+ * @Date 2020/7/28 1:00 下午
+ * @Version 1.0
+ **/
+@Configuration
+public class AuthenticationBeanConfig {
+
+ @Bean
+ public PasswordEncoder passwordEncoder() {
+ return new BCryptPasswordEncoder();
+ }
+
+ @Bean
+ public SessionRegistry sessionRegistry() {
+ return new SessionRegistryImpl();
+ }
+
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/config/RedisSessionConfig.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/config/RedisSessionConfig.java
new file mode 100644
index 0000000..af60fcd
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/config/RedisSessionConfig.java
@@ -0,0 +1,49 @@
+//package com.ningdatech.pmapi.user.security.auth.config;
+//
+//import com.ningdatech.basic.util.StrPool;
+//import org.springframework.beans.factory.annotation.Value;
+//import org.springframework.context.annotation.Bean;
+//import org.springframework.context.annotation.Configuration;
+//
+///**
+// *
+// * 设置session的过期时间为一天
+// *
+// *
+// * @Author LiuXinXin
+// * @Date 2020/7/29 9:46 上午
+// * @Version 1.0
+// **/
+//@Configuration
+//@EnableRedisHttpSession(
+// maxInactiveIntervalInSeconds = RedisSessionConfig.SESSION_TIMEOUT,
+// redisNamespace = RedisSessionConfig.REDIS_NAMESPACE
+//)
+//public class RedisSessionConfig {
+//
+// static final int SESSION_TIMEOUT = 24 * 60 * 60 * 10;
+//
+// static final String REDIS_NAMESPACE = "#{redisSessionConfig.getRedisNamespace()}";
+//
+// @Value("${nd.cache.def.keyPrefix:}")
+// private String keyPrefix;
+//
+// public String getRedisNamespace() {
+// return (StrUtils.isBlank(keyPrefix) ? StrPool.EMPTY : keyPrefix + StrPool.COLON) + RedisIndexedSessionRepository.DEFAULT_NAMESPACE;
+// }
+//
+// @Bean
+// public CookieHttpSessionIdResolver sessionIdResolver() {
+// // 创建 CookieHttpSessionIdResolver 对象
+// CookieHttpSessionIdResolver sessionIdResolver = new CookieHttpSessionIdResolver();
+// // 创建 DefaultCookieSerializer 对象
+// DefaultCookieSerializer cookieSerializer = new DefaultCookieSerializer();
+//
+// // 设置到 sessionIdResolver 中
+// sessionIdResolver.setCookieSerializer(cookieSerializer);
+// cookieSerializer.setCookieName(BizConst.COOKIE_KEY);
+// cookieSerializer.setCookieMaxAge(SessionTimeConstant.SESSION_TIME_SECONDS);
+// return sessionIdResolver;
+// }
+//
+//}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/constants/AuthTypeEnum.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/constants/AuthTypeEnum.java
new file mode 100644
index 0000000..927b5bd
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/constants/AuthTypeEnum.java
@@ -0,0 +1,47 @@
+package com.ningdatech.pmapi.user.security.auth.constants;
+
+/**
+ * @author Liuxinxin
+ * @date 2021/7/30 下午2:10
+ */
+
+public enum AuthTypeEnum {
+
+ /**
+ * 手机 + 密码的认证方式
+ */
+ PHONE_PASSWORD("phone_password"),
+
+ /**
+ * 子账号 账号 + 密码的认证方式
+ */
+ ACCOUNT_PASSWORD("account_password");
+
+ private final String key;
+
+ AuthTypeEnum(String key) {
+ this.key = key;
+ }
+
+ public static boolean contains(String key) {
+ for (AuthTypeEnum value : AuthTypeEnum.values()) {
+ if (key.equals(value.getKey())) {
+ return true;
+ }
+ }
+ return false;
+ }
+
+ public String getKey() {
+ return key;
+ }
+
+ public static AuthTypeEnum of(String key) {
+ for (AuthTypeEnum value : AuthTypeEnum.values()) {
+ if (key.equals(value.getKey())) {
+ return value;
+ }
+ }
+ throw new RuntimeException(String.format("invalid AuthTypeEnum = %s", key));
+ }
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/constants/SessionTimeConstant.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/constants/SessionTimeConstant.java
new file mode 100644
index 0000000..a375263
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/constants/SessionTimeConstant.java
@@ -0,0 +1,12 @@
+package com.ningdatech.pmapi.user.security.auth.constants;
+
+/**
+ * @Author LiuXinXin
+ * @Date 2022/2/17 12:59 上午
+ * @Version 1.0
+ **/
+public class SessionTimeConstant {
+
+ public static final Integer SESSION_TIME_SECONDS = 24 * 60 * 60 * 10;
+
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/errorcode/AuthErrorCodeEnum.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/errorcode/AuthErrorCodeEnum.java
new file mode 100644
index 0000000..5812ab1
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/errorcode/AuthErrorCodeEnum.java
@@ -0,0 +1,34 @@
+package com.ningdatech.pmapi.user.security.auth.errorcode;
+
+
+import com.ningdatech.pmapi.common.errorcode.AppErrorCode;
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+
+/**
+ * @author LiuXinXin
+ * @date 2021/7/30 上午10:59
+ */
+
+@AllArgsConstructor
+@Getter
+public enum AuthErrorCodeEnum {
+
+ USERNAME_OR_PASSWORD_ERROR(AppErrorCode.AUTH.getCode() + "100000"
+ , "登陆时用户名或者密码错误"),
+
+ ACCOUNT_ALREADY_EXIST_WHEN_REGISTER(AppErrorCode.AUTH.getCode() + "100001"
+ , "账号已经存在"),
+
+ SESSION_EXPIRED(AppErrorCode.AUTH.getCode() + "100002"
+ , "用户session过期，登陆状态失效");
+
+
+ private final String code;
+
+ private final String msg;
+
+ public Integer getCode() {
+ return Integer.valueOf(code);
+ }
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultExpiredSessionStrategy.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultExpiredSessionStrategy.java
new file mode 100644
index 0000000..5024ae8
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultExpiredSessionStrategy.java
@@ -0,0 +1,41 @@
+package com.ningdatech.pmapi.user.security.auth.handler;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.ningdatech.basic.model.ApiResponse;
+import com.ningdatech.pmapi.user.security.auth.errorcode.AuthErrorCodeEnum;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.web.session.SessionInformationExpiredEvent;
+import org.springframework.security.web.session.SessionInformationExpiredStrategy;
+import org.springframework.stereotype.Component;
+
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+/**
+ * @Author LiuXinXin
+ * @Date 2020/8/20 11:15 上午
+ * @Version 1.0
+ **/
+@Component
+public class DefaultExpiredSessionStrategy implements SessionInformationExpiredStrategy {
+
+ public static final Logger LOG = LoggerFactory.getLogger(DefaultExpiredSessionStrategy.class);
+
+ @Autowired
+ private ObjectMapper objectMapper;
+
+ @Override
+ public void onExpiredSessionDetected(SessionInformationExpiredEvent sessionInformationExpiredEvent)
+ throws IOException, ServletException {
+ if (LOG.isInfoEnabled()) {
+ LOG.info("session is expired");
+ }
+ HttpServletResponse response = sessionInformationExpiredEvent.getResponse();
+ response.setContentType("application/json;charset=UTF-8");
+ response.getWriter().write(objectMapper.writeValueAsString(
+ ApiResponse.of(AuthErrorCodeEnum.SESSION_EXPIRED.getCode(), AuthErrorCodeEnum.SESSION_EXPIRED.getMsg(), null)));
+ }
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultLoginFailureHandler.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultLoginFailureHandler.java
new file mode 100644
index 0000000..cf1ebc7
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultLoginFailureHandler.java
@@ -0,0 +1,47 @@
+package com.ningdatech.pmapi.user.security.auth.handler;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.ningdatech.basic.model.ApiResponse;
+import com.ningdatech.pmapi.user.security.auth.errorcode.AuthErrorCodeEnum;
+import org.springframework.security.authentication.BadCredentialsException;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.security.web.authentication.SimpleUrlAuthenticationFailureHandler;
+import org.springframework.stereotype.Component;
+
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+/**
+ * @Author LiuXinXin
+ * @Date 2020/8/3 8:32 下午
+ * @Version 1.0
+ **/
+@Component("defaultLoginFailureHandler")
+public class DefaultLoginFailureHandler extends SimpleUrlAuthenticationFailureHandler {
+
+ private final ObjectMapper objectMapper = new ObjectMapper();
+
+ @Override
+ public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response,
+ AuthenticationException exception) throws IOException, ServletException {
+ response.setContentType("application/json;charset=UTF-8");
+ int errorCode;
+ String errorMsg;
+ // 所有的认证异常都可以在这里添加，目前只支持用户名密码错误异常
+
+ if (exception instanceof BadCredentialsException || exception instanceof UsernameNotFoundException) {
+ errorCode = AuthErrorCodeEnum.USERNAME_OR_PASSWORD_ERROR.getCode();
+ errorMsg = exception.getMessage();
+ } else {
+ errorCode = ApiResponse.ERROR_CODE;
+ errorMsg = ApiResponse.ERROR_MSG;
+ }
+ response.setStatus(400);
+ response.getWriter()
+ .write(objectMapper.writeValueAsString(ApiResponse.of(errorCode, errorMsg, null)));
+ }
+
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultLoginSuccessHandler.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultLoginSuccessHandler.java
new file mode 100644
index 0000000..d0c5ca9
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultLoginSuccessHandler.java
@@ -0,0 +1,35 @@
+package com.ningdatech.pmapi.user.security.auth.handler;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.ningdatech.basic.model.ApiResponse;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.context.annotation.Primary;
+import org.springframework.http.MediaType;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler;
+import org.springframework.stereotype.Component;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+/**
+ * @Author LiuXinXin
+ * @Date 2020/8/3 8:32 下午
+ * @Version 1.0
+ **/
+@Component("defaultLoginSuccessHandler")
+@Primary
+public class DefaultLoginSuccessHandler extends SavedRequestAwareAuthenticationSuccessHandler {
+
+ @Autowired
+ private ObjectMapper objectMapper;
+
+ @Override
+ public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response,
+ Authentication authentication) throws IOException {
+ response.setContentType(MediaType.APPLICATION_JSON_VALUE);
+ response.getWriter().write(objectMapper.writeValueAsString(ApiResponse.ofSuccess()));
+ }
+
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultLogoutSuccessHandler.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultLogoutSuccessHandler.java
new file mode 100644
index 0000000..b7e3a45
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/handler/DefaultLogoutSuccessHandler.java
@@ -0,0 +1,28 @@
+package com.ningdatech.pmapi.user.security.auth.handler;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.ningdatech.basic.model.ApiResponse;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.web.authentication.logout.LogoutSuccessHandler;
+import org.springframework.stereotype.Component;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.IOException;
+
+/**
+ * 默认的退出成功处理器
+ */
+@Component("defaultLogoutSuccessHandler")
+public class DefaultLogoutSuccessHandler implements LogoutSuccessHandler {
+
+ private final ObjectMapper objectMapper = new ObjectMapper();
+
+ @Override
+ public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication)
+ throws IOException {
+ // 退出成功后返回 和前端约定的Json
+ response.setContentType("application/json;charset=UTF-8");
+ response.getWriter().write(objectMapper.writeValueAsString(ApiResponse.ofSuccess()));
+ }
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/model/UserInfoDetails.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/model/UserInfoDetails.java
new file mode 100644
index 0000000..b497f95
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/model/UserInfoDetails.java
@@ -0,0 +1,81 @@
+package com.ningdatech.pmapi.user.security.auth.model;
+
+import cn.hutool.core.collection.CollectionUtil;
+import com.ningdatech.basic.auth.AbstractLoginUser;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
+import org.springframework.security.core.userdetails.UserDetails;
+
+import java.util.Collection;
+import java.util.List;
+
+/**
+ * @author LiuXinXin
+ * @date 2022/8/1 下午3:32
+ */
+@Data
+@EqualsAndHashCode(callSuper = true)
+public class UserInfoDetails extends AbstractLoginUser implements UserDetails {
+
+ private String realName;
+
+ private String password;
+
+ private String role;
+
+ /**
+ * 区域code
+ */
+ private Long regionCode;
+
+ private Long companyId;
+
+ /**
+ * 所负责公司id列表
+ */
+ private List responsibleCompanyIdList;
+
+ /**
+ * 获取用户权限
+ *
+ * @return
+ */
+ @Override
+ public Collection getAuthorities() {
+ SimpleGrantedAuthority simpleGrantedAuthority = new SimpleGrantedAuthority(this.role);
+ return CollectionUtil.toList(simpleGrantedAuthority);
+ }
+
+ @Override
+ public String getPassword() {
+ return password;
+ }
+
+ @Override
+ public String getUsername() {
+ return getIdentifier();
+ }
+
+ @Override
+ public boolean isAccountNonExpired() {
+ return true;
+ }
+
+ @Override
+ public boolean isAccountNonLocked() {
+ return true;
+ }
+
+ @Override
+ public boolean isCredentialsNonExpired() {
+ return true;
+ }
+
+ @Override
+ public boolean isEnabled() {
+ return true;
+ }
+
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/PasswordLoginUserDetailService.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/PasswordLoginUserDetailService.java
new file mode 100644
index 0000000..6dbe98e
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/PasswordLoginUserDetailService.java
@@ -0,0 +1,41 @@
+package com.ningdatech.pmapi.user.security.auth.password;
+
+
+import com.ningdatech.pmapi.user.manage.UserAuthLoginManage;
+import com.ningdatech.pmapi.user.security.auth.model.UserInfoDetails;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.stereotype.Service;
+
+/**
+ * @author LiuXinXin
+ * @date 2022/9/30 上午9:49
+ */
+
+@Service("passwordLoginUserDetailService")
+@RequiredArgsConstructor
+public class PasswordLoginUserDetailService implements UserDetailsService {
+
+ private final UserAuthLoginManage userAuthLoginManage;
+
+ @Override
+ public UserInfoDetails loadUserByUsername(String username) throws UsernameNotFoundException {
+// UserFullInfoDTO userFullInfoDTO = userAuthLoginFacade.queryUserInfoInPasswordAuth(username);
+// if (Objects.isNull(userFullInfoDTO)) {
+// throw new UsernameNotFoundException(String.format("%s user not exist", username));
+// }
+// UserInfoDetails userInfoDetails = new UserInfoDetails();
+// userInfoDetails.setUserId(userFullInfoDTO.getUserId());
+// userInfoDetails.setUsername(userFullInfoDTO.getUsername());
+// userInfoDetails.setRealName(userFullInfoDTO.getRealName());
+// userInfoDetails.setRole(userFullInfoDTO.getRole());
+// userInfoDetails.setRegionCode(userFullInfoDTO.getRegionCode());
+// userInfoDetails.setCompanyId(userFullInfoDTO.getCompanyId());
+// userInfoDetails.setResponsibleCompanyIdList(userFullInfoDTO.getResponsibleCompanyIdList());
+// userInfoDetails.setIdentifier(userFullInfoDTO.getIdentifier());
+// userInfoDetails.setPassword(userFullInfoDTO.getCredential());
+// return userInfoDetails;
+ return null;
+ }
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthFilter.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthFilter.java
new file mode 100644
index 0000000..d790723
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthFilter.java
@@ -0,0 +1,71 @@
+package com.ningdatech.pmapi.user.security.auth.password;
+
+import com.ningdatech.basic.exception.BizException;
+import org.apache.commons.lang3.StringUtils;
+import org.springframework.http.HttpMethod;
+import org.springframework.security.authentication.AuthenticationServiceException;
+import org.springframework.security.authentication.BadCredentialsException;
+import org.springframework.security.authentication.InternalAuthenticationServiceException;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;
+import org.springframework.security.web.util.matcher.AntPathRequestMatcher;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+/**
+ * @Author LiuXinXin
+ * @Date 2020/8/3 8:46 下午
+ * @Version 1.0
+ **/
+public class UsernamePasswordAuthFilter extends AbstractAuthenticationProcessingFilter {
+
+ private boolean postOnly = true;
+
+ private static final String USERNAME_PARAMETER = "username";
+ private static final String PASSWORD_PARAMETER = "password";
+
+
+ // ~ Constructors
+ // ===================================================================================================
+
+ public UsernamePasswordAuthFilter(String processingUrl) {
+ super(new AntPathRequestMatcher(processingUrl, HttpMethod.POST.name()));
+ }
+
+ // ~ Methods
+ // ========================================================================================================
+
+ @Override
+ public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response)
+ throws AuthenticationException {
+ if (postOnly && !request.getMethod().equals(HttpMethod.POST.name())) {
+ throw new AuthenticationServiceException("请求方法错误");
+ }
+ String username = request.getParameter(USERNAME_PARAMETER);
+ String password = request.getParameter(PASSWORD_PARAMETER);
+ if (StringUtils.isBlank(username) || StringUtils.isBlank(password)) {
+ throw new UsernameNotFoundException("用户名或密码不能为空");
+ }
+ username = username.trim();
+ password = password.trim();
+ try {
+ UsernamePasswordAuthToken authRequest = new UsernamePasswordAuthToken(username, password);
+ // Allow subclasses to set the "details" property
+ setDetails(request, authRequest);
+ return this.getAuthenticationManager().authenticate(authRequest);
+ } catch (AuthenticationException e) {
+ throw new BadCredentialsException("账号或密码错误");
+ } catch (BizException e) {
+ throw new BadCredentialsException(e.getMessage());
+ } catch (Exception e) {
+ throw new InternalAuthenticationServiceException("授权失败：", e);
+ }
+ }
+
+ protected void setDetails(HttpServletRequest request, UsernamePasswordAuthToken authRequest) {
+ authRequest.setDetails(authenticationDetailsSource.buildDetails(request));
+ }
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthProvider.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthProvider.java
new file mode 100644
index 0000000..8c7adae
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthProvider.java
@@ -0,0 +1,64 @@
+package com.ningdatech.pmapi.user.security.auth.password;
+
+import org.springframework.security.authentication.AuthenticationProvider;
+import org.springframework.security.authentication.BadCredentialsException;
+import org.springframework.security.authentication.InternalAuthenticationServiceException;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.AuthenticationException;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.crypto.password.PasswordEncoder;
+
+/**
+ * @Author LiuXinXin
+ * @Date 2020/8/3 8:55 下午
+ * @Version 1.0
+ **/
+public class UsernamePasswordAuthProvider implements AuthenticationProvider {
+
+ private UserDetailsService userDetailsService;
+
+ private PasswordEncoder passwordEncoder;
+
+ @Override
+ public Authentication authenticate(Authentication authentication) throws AuthenticationException {
+ if (!(authentication instanceof UsernamePasswordAuthToken)) {
+ throw new RuntimeException("CustomAuthProvider 只支持 CustomAuthToken");
+ }
+ UsernamePasswordAuthToken authenticationToken = (UsernamePasswordAuthToken) authentication;
+
+ UserDetails user = userDetailsService.loadUserByUsername((String) authenticationToken.getPrincipal());
+ if (user == null) {
+ throw new InternalAuthenticationServiceException("can not get user info!");
+ }
+ additionalAuthenticationChecks(user, authenticationToken);
+ // 校验用户是否有当前端的登陆权限
+ // 将用户定义的user放入token中，这样可以在session中查询到所有自定义的用户信息
+ return new UsernamePasswordAuthToken(user, user.getPassword(), user.getAuthorities());
+ }
+
+ protected void additionalAuthenticationChecks(UserDetails userDetails, UsernamePasswordAuthToken authentication)
+ throws AuthenticationException {
+ if (authentication.getCredentials() == null) {
+ throw new BadCredentialsException("login fail! password is null");
+ }
+ String presentedPassword = authentication.getCredentials().toString();
+ if (!passwordEncoder.matches(presentedPassword, userDetails.getPassword())) {
+ throw new BadCredentialsException("login fail! password is error");
+ }
+ }
+
+ @Override
+ public boolean supports(Class authentication) {
+ return UsernamePasswordAuthToken.class.isAssignableFrom(authentication);
+ }
+
+ public void setUserDetailsService(UserDetailsService userDetailsService) {
+ this.userDetailsService = userDetailsService;
+ }
+
+ public void setPasswordEncoder(PasswordEncoder passwordEncoder) {
+ this.passwordEncoder = passwordEncoder;
+ }
+
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthSecurityConfig.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthSecurityConfig.java
new file mode 100644
index 0000000..da48c8d
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthSecurityConfig.java
@@ -0,0 +1,64 @@
+package com.ningdatech.pmapi.user.security.auth.password;
+
+import com.ningdatech.pmapi.user.security.auth.config.AuthProperties;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Qualifier;
+import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.SecurityConfigurerAdapter;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.DefaultSecurityFilterChain;
+import org.springframework.security.web.authentication.AuthenticationFailureHandler;
+import org.springframework.security.web.authentication.AuthenticationSuccessHandler;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+import org.springframework.stereotype.Component;
+
+/**
+ * 账号密码登陆的认证配置
+ */
+@Component
+public class UsernamePasswordAuthSecurityConfig
+ extends SecurityConfigurerAdapter {
+
+ @Autowired
+ @Qualifier(value = "defaultLoginSuccessHandler")
+ protected AuthenticationSuccessHandler defaultLoginSuccessHandler;
+
+ @Autowired
+ @Qualifier(value = "defaultLoginFailureHandler")
+ protected AuthenticationFailureHandler defaultLoginFailureHandler;
+
+ @Autowired
+ @Qualifier(value = "passwordLoginUserDetailService")
+ private UserDetailsService passwordLoginUserDetailService;
+
+ @Autowired
+ private PasswordEncoder passwordEncoder;
+
+ @Autowired
+ private AuthProperties authProperties;
+
+ private AuthenticationManager authenticationManager;
+
+ @Override
+ public void configure(HttpSecurity http) throws Exception {
+ UsernamePasswordAuthFilter usernamePasswordAuthFilter =
+ new UsernamePasswordAuthFilter(authProperties.getPasswordLoginUrl());
+ authenticationManager = http.getSharedObject(AuthenticationManager.class);
+ usernamePasswordAuthFilter.setAuthenticationManager(authenticationManager);
+ usernamePasswordAuthFilter.setAuthenticationSuccessHandler(defaultLoginSuccessHandler);
+ usernamePasswordAuthFilter.setAuthenticationFailureHandler(defaultLoginFailureHandler);
+
+ UsernamePasswordAuthProvider authenticationProvider = new UsernamePasswordAuthProvider();
+ authenticationProvider.setUserDetailsService(passwordLoginUserDetailService);
+ // 确保对密码进行加密的encoder和解密的encoder相同
+ authenticationProvider.setPasswordEncoder(passwordEncoder);
+ http.authenticationProvider(authenticationProvider).addFilterAfter(usernamePasswordAuthFilter,
+ UsernamePasswordAuthenticationFilter.class);
+ }
+
+ public AuthenticationManager getAuthenticationManager() {
+ return authenticationManager;
+ }
+}
diff --git a/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthToken.java b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthToken.java
new file mode 100644
index 0000000..7be34c1
--- /dev/null
+++ b/pmapi/src/main/java/com/ningdatech/pmapi/user/security/auth/password/UsernamePasswordAuthToken.java
@@ -0,0 +1,76 @@
+package com.ningdatech.pmapi.user.security.auth.password;
+
+import org.springframework.security.authentication.AbstractAuthenticationToken;
+import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.SpringSecurityCoreVersion;
+
+import java.util.Collection;
+
+/**
+ * @Author LiuXinXin
+ * @Date 2020/8/3 8:52 下午
+ * @Version 1.0
+ **/
+public class UsernamePasswordAuthToken extends AbstractAuthenticationToken {
+
+ private static final long serialVersionUID = SpringSecurityCoreVersion.SERIAL_VERSION_UID;
+
+ private final Object principal;
+
+ private final Object credentials;
+
+
+ /**
+ * This constructor can be safely used by any code that wishes to create a
+ * UsernamePasswordAuthenticationToken, as the {@link #isAuthenticated()} will return
+ * false.
+ */
+ public UsernamePasswordAuthToken(String principal, String credentials) {
+ super(null);
+ this.principal = principal;
+ this.credentials = credentials;
+ setAuthenticated(false);
+ }
+
+ /**
+ * This constructor should only be used by AuthenticationManager or AuthenticationProvider
+ * implementations that are satisfied with producing a trusted (i.e. {@link #isAuthenticated()} = true)
+ * authentication token.
+ *
+ * @param principal
+ * @param authorities
+ */
+ public UsernamePasswordAuthToken(Object principal, Object credentials,
+ Collection authorities) {
+ super(authorities);
+ this.principal = principal;
+ this.credentials = credentials;
+ // must use super, as we override
+ super.setAuthenticated(true);
+ }
+
+ @Override
+ public Object getCredentials() {
+ return this.credentials;
+ }
+
+ @Override
+ public Object getPrincipal() {
+ return this.principal;
+ }
+
+ @Override
+ public void setAuthenticated(boolean isAuthenticated) throws IllegalArgumentException {
+ if (isAuthenticated) {
+ throw new IllegalArgumentException(
+ "Cannot set this token to trusted - use constructor which takes a GrantedAuthority list instead");
+ }
+ super.setAuthenticated(false);
+ }
+
+ @Override
+ public void eraseCredentials() {
+ super.eraseCredentials();
+ }
+
+}