(九)、SpringBoot + Security RememberMe(记住我)功能

可以前往第一篇博客查看目录结构 --> 这里

一、修改application.properties文件，添加数据库配置

spring.datasource.driver-class-name=com.mysql.jdbc.Driver
spring.datasource.url=jdbc:mysql://127.0.0.1:3306/zeke-demo
spring.datasource.username=root
spring.datasource.password=

二、修改zeke-login.html，添加记住我勾选框

        
            记住我
        

三、在BrowserProperties类中添加 rememberMeSeconds属性和对应的getter、setter方法

    private int rememberMeSeconds = 3600;

四、修改BrowserSecurityConfig，注入一个Bean

    @Autowired
    private DataSource dataSource;

    /**
     * 记住我功能
     * @return
     */
    @Bean
    public PersistentTokenRepository persistentTokenRepository(){
        JdbcTokenRepositoryImpl jdbcTokenRepository = new JdbcTokenRepositoryImpl();
        jdbcTokenRepository.setDataSource(dataSource);
        //自动创建数据库表，使用一次后注释掉，不然会报错
//        jdbcTokenRepository.setCreateTableOnStartup(true);
        return jdbcTokenRepository;
    }

五、修改configure(HttpSecurity http)方法

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        ValidateCodeFilter validateCodeFilter = new ValidateCodeFilter();
        validateCodeFilter.setAuthenticationFailureHandler(zekeAuthenticationFailureHandler);
        validateCodeFilter.setSecurityProperties(securityProperties);
        validateCodeFilter.afterPropertiesSet();

        http.csrf().disable();
        http.addFilterBefore(validateCodeFilter, UsernamePasswordAuthenticationFilter.class);
        http.formLogin() //表单登录
                .loginPage("/authentication/require") //用户未登录时的处理地址
                .loginProcessingUrl("/authentication/form") //用户登录
                .successHandler(zekeAuthenticationSuccessHandler) //登录成功处理
                .failureHandler(zekeAuthenticationFailureHandler) //登录失败处理
                .and()
                .rememberMe()
                .tokenRepository(persistentTokenRepository())
                .tokenValiditySeconds(securityProperties.getBrowser().getRememberMeSeconds())
                .userDetailsService(userDetailsService)
                .and()
                .authorizeRequests()
                .antMatchers("/authentication/require",
                        securityProperties.getBrowser().getLoginPage(),
                        "/code/image") //不拦截的URL
                .permitAll()
                .anyRequest()
                .authenticated();
    }

六、启动服务，访问localhost/zeke-login.html，勾选记住我测试