[스프링 인 액션5] Chapter4~6 내용 정리

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {


	//HTTP 보안 구성
    @Override
    protected void configure(HttpSecurity http) throws Exception{ 
        http
                .authorizeRequests()										// ExpressionInterceptUrlRegistry 객체 반환
                .antMatchers("/design", "/orders") 					// 이 부분은
                .access("hasRole('ROLE_USER')") 					// 인가 과정
                .antMatchers("/", "/**").access("permitAll") 		// 이 부분은 누구나 접속 가능
                .and()
                .httpBasic();
    }

	//사용자 인증 정보 구성
    @Override
    protected void configure(AuthenticationManager auth) throws Exception{
        auth.inMemoryAuthentication()
				...
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {


	...


    @Override
    protected void configure(AuthenticationManager auth) throws Exception{
        auth.inMemoryAuthentication()
                .withUser("user1")
                .password("{noop}password1") 		//{noop} 비밀번호 암호화X
                .authorities("ROLE_USER")
                .and()
                .withUser("user2")
                .password("{noop}password2")
                .authorities("ROLE_USER");
    }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {


	...


    @Override
    protected void configure(AuthenticationManager auth) throws Exception{
         auth
            .jdbcAuthentication()
            .dataSource(dataSource)
            // 스프링 시큐리티와 다른 데이터베이스(테이블이나 열의 이름이 다를 때)를 사용할 경우
            .usersByUsernameQuery("select username, password, enabled, from users where username=?")
            .authoritiesByUsernameQuery("select username, authority from authorities where username=?")
			.passwordEncoder(new BCryptPasswordEncoder());
	}
}

1
2
3

DEF_USERS_BY_USERNAME_QUERY = "select username ,password, enabled from users where username = ?"
DEF_AUTHORITIES_BY_USERNAME_QUERY = "select username, authority from authorities where username = ?"
DEF_GROUP_AUTHORITIES_BY_USERNAME_QUERY = "select g.id, g.group_name, ga.authority from authorities g, group_members gm, group_authorities ga where gm.username = ? and g.id = ga.group_id and g.id = gm.group_id";

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {


	...


    @Override
    protected void configure(AuthenticationManager auth) throws Exception{
			auth.ldapAuthentication()
				// .userSearchBase("ou=people") 					<- 이렇게 기준점 쿼리를 지정 가능(구성 단위)
    	   	 	.userSearchFilter("(uid={0})")
        		.groupSearchFilter("member={0}");
	}
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {


	...


    @Override
    protected void configure(AuthenticationManager auth) throws Exception{
			auth.ldapAuthentication()
    	   	 	.userSearchFilter("(uid={0})")
        		.groupSearchFilter("member={0}");
				.passwordCompare() 													// 비교하고
				.passwordEncoder(new BCryptPasswordEncoder()) 		//암호화하고
				.passwordAttribute("userPassword"); 							// password 대신 userPassword로 지정해놔서 그걸로 진행
	}
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {


	...


    @Override
    protected void configure(AuthenticationManager auth) throws Exception{
		...
        .passwordCompare()
        .passwordEncoder(new BCryptPasswordEncoder())
        .passwordAttribute("userPassword");
        .contextSource()
        .root("dc=tacocloud,dc=com")			//url도 가능
        .ldif("classpath:users.ldif")        			//LDAP 데이터를 나타내는 표준화된 방법. 자동으로 users.ldif 로드


	}
}

1
2
3
4

@Entity
public class User implements UserDetails {
	...
}

1
2
3

public interface UserDetailsService{
	UserDetails loadUserByUsername(String username) throws UsernameNotFoundException;
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

    http
            .authorizeRequests()
            .antMatchers("/design", "/orders")
            .access("hasRole('ROLE_USER')")
            .antMatchers("/", "/**").access("permitAll")
            .and()
            .formLogin()      								//이 부분 추가
            .loginPage("/login");
			.dafaultSuccessUrl("/design", true)		// 로그인 후 이동할 페이지
			.loginProcessingUrl("/authenticate")		//해당 요청으로 로그인 처리	
			.usernameParameter("user") 				//필요할 경우 이렇게 필드 이름도 설정 가능

1
2
3
4
5

    http.
			...
			.and()
			.logout()
			.logoutSuccessUrl("/");	

1
2
3
4
5
6
7
8

@PostMapping
public String processOrder(@Valid Order order, ...
        , @AuthenticationPrincipal User user 
) {
    order.setUser(user);

	...
}

1
2

Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
User user = (User) authentication.getPrincipal();

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

spring:
  datasource:
    url: jdbc:mysql://localhost/tacocloud
    username: tacodb
    password: tacopassword


	schema:
		- 내가 원하는 스키마 이름.sql
	data:
		- ingredients.sql

1
2
3
4
5
6

logging:
	path: /var/logs/
	file: TacoLogs.log
	level:
		root: WARN
		org.springframework.security: DEBUG

1
2
3
4
5
6

@GetMapping
public String ordersForUser(@AuthenticationPrincipal User user, Model model){
    Pageable pageable = PageRequest.of(0, 20);
    model.addAttribute("orders", orderRepo.findByUserOrderByPlacedAtDesc(user, pageable));
    return "orderList";
}

1
2
3
4
5
6

@ConfigurationProperties(prefix = "taco.orders")
public class OrderController {
    private int pageSize = 20;
    public void setPageSize(int pageSize){this.pageSize = pageSize;}
	...
}

1
2
3

taco:
  orders:
    pageSize:10

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

@Component
@ConfigurationProperties(prefix = "taco.orders")
@Data
@Validated
public class OrderProps {
    
    @Min(value=5, message="must be between 5 and 25")
    @Max(value=25, message="must be between 5 and 25")
    private int pageSize = 20;
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

@Controller
@RequestMapping("/orders")
@SessionAttributes("order")
public class OrderController {

    private OrderRepository orderRepo;
    private OrderProps props;

    public OrderController(OrderRepository orderRepo, OrderProps props) {
        this.orderRepo = orderRepo;
        this.props = props;
    }
	...
	@GetMapping
	public String ordersForUser(@AuthenticationPrincipal User user, Model model){
    	Pageable pageable = PageRequest.of(0, props.getPageSize());			// 하드코딩 X
		...
	}
}

1
2
3
4

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-configuration-processor</artifactId>
</dependency>

1
2
3
4
5
6
7
8

// additional-spring-configuration-metadata.json
{
  "properties": [{
    "name": "taco.orders.page-size",
    "type": "int",
    "description": "Sets the maximum number of orders to display in a list"
  }]
}

1
2
3

@Bean
@Profile({"dev", "qa})
public CommandLineRunner dataLoader(){ ... }