Spring Security and Angular : spring-session

spring-session

Spring Security and Angular https://spring.io/guides/tutorials/spring-security-and-angular-js/ A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.

一个关于如何使用Spring Security与一个具有不同后端架构的单页应用程序的教程，从简单的单服务器到具有OAuth2认证的API网关。

spring-session

CMD运行程序命令：

1、mvn spring-boot:run 

2、mvn package 

3、cd target 

4、java -jar spring-session-ui-0.0.1-SNAPSHOT.jar

STS运行方式:

1、Run as -> Maven clean 

2、Run as -> Maven install 

3、UiApplication.java Java Application

注意： 

1、修改/spring-session-ui/pom.xml文件 

UiApplication.java文件在STS中以Java Application方式运行时， 

生成的\ui\target\classes\static文件夹又被删掉了， 

原因不明，但注释掉以下代码，可以解决此问题：

<-- -->
<-- npm-test -->
<-- -->
<-- npm -->
<-- -->
<-- -->
<-- run-script e2e -->
<-- -->
<-- test -->

<-- -->

 

http://localhost:8080/home 

http://localhost:8080/login 

用户名：user 密码：password

修改代码，支持POST等方式：

1、修改/spring-session-ui/src/app/home.component.ts 增加 localStorage.setItem('token', token);

把http.get('http://localhost:9000', {headers : new HttpHeaders().set('X-Auth-Token', token)}) 

改为：http.post('http://localhost:9000', {headers : new HttpHeaders().set('X-Auth-Token', token)})

2、增加/spring-session-ui/src/app/authentication.interceptor.ts文件

3、修改/spring-session-ui/src/app/app.module.ts 增加import {AuthenticationInterceptor} from './authentication.interceptor'; 

增加{ provide: HTTP_INTERCEPTORS, useClass: XhrInterceptor, multi: true }, [{provide: HTTP_INTERCEPTORS, useClass: AuthenticationInterceptor, multi: true}] 到providers中

4、修改/spring-session-resource/src/main/java/demo/ResourceApplication.java 

把@RequestMapping("/") 改为：@PostMapping("/")

把 http.cors().and().authorizeRequests().anyRequest().authenticated(); 

改为 http.cors().and().csrf().disable().authorizeRequests().anyRequest().authenticated();

增加 

@Bean CorsConfigurationSource corsConfigurationSource() { 

CorsConfiguration configuration = new CorsConfiguration(); configuration.setAllowedOrigins(Arrays.asList("http://localhost:8080")); 

configuration.setAllowedMethods(Arrays.asList("GET", "POST", "OPTIONS", "PUT", "DELETE")); configuration.setAllowedHeaders(Arrays.asList("x-auth-token", "x-requested-with", "authorization", "Content-Type")); configuration.setMaxAge((long) 3600); 

UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource(); source.registerCorsConfiguration("/**", configuration); 

return source; 

}

源码下载：https://github.com/daqiang123/spring-session