多重身份验证使用jdbcAuthentification和AD身份验证

huangapple
未分类评论41阅读模式
英文:

Multiple Authentification using jdbcAuthentification and AD authentification

问题

我再次需要您的帮助。我需要通过JDBC或AD对我的应用进行身份验证，但它必须同时适用于两种方式。例如，当我尝试使用JDBC用户进行身份验证时，我的程序必须与数据库中的用户连接，但当我使用AD登录时，它必须与AD用户连接。

以下是我的代码，但是当我按照下面的顺序(1)连接到JDBC时，我只能连接到JDBC，而当我有代码来创建authentificationProvider时，我只能在使用AD登录时登录。

  1. @Configuration
  2. @EnableWebSecurity
  3. public class OAuth2SecurityConfiguration extends WebSecurityConfigurerAdapter {
  5. 	@Autowired
  6. 	private ClientDetailsService clientDetailsService;
  8. 	@Autowired
  9. 	private DataSource primaryDataSource;
  11. 	// @Autowired
  12. 	// private AuthenticationProvider authenticationProvider;
  14. 	// @Autowired
  15. 	// private AuthenticationProvider authenticationProviderAD;
  17. 	@Value("${security.authentication.provider}")
  18. 	private String authProvider;
  20. 	@Value("${ad.domain:#{null}}")
  21. 	private String adDomain;
  23. 	// TODO 将系统类似的配置转移到Java中，并且不再使用系统类似的配置，使其变为可选
  24. 	@Value("${ad.url:#{null}}")
  25. 	private String adUrl;
  27. 	@Override
  28. 	@Order(1)
  29. 	protected void configure(AuthenticationManagerBuilder auth) throws Exception {
  30. 		RecursiveAdProvider adProvider = new RecursiveAdProvider(adDomain, adUrl);
  31. 		adProvider.setConvertSubErrorCodesToExceptions(true);
  32. 		adProvider.setUseAuthenticationRequestCredentials(true);
  33. 		auth.authenticationProvider(adProvider);
  34. 		auth.eraseCredentials(false);
  35. 	}
  37. 	@Order(2)
  38. 	protected void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
  39. 		auth.jdbcAuthentication().dataSource(primaryDataSource)
  40. 				.usersByUsernameQuery("select username, password, enabled from users where username=?")
  41. 				.authoritiesByUsernameQuery(
  42. 						"select username, authority from user_authority JOIN authorities ON user_authority.authority_id = authorities.id where username=?")
  43. 				.passwordEncoder(new BCryptPasswordEncoder());
  44. 	}
  46. 	@Override
  47. 	protected void configure(HttpSecurity http) throws Exception {
  48. 		http.csrf().disable().anonymous().disable().authorizeRequests().antMatchers("/oauth/token").permitAll();
  49. 	}
  51. 	@Override
  52. 	@Bean
  53. 	public AuthenticationManager authenticationManagerBean() throws Exception {
  54. 		return super.authenticationManagerBean();
  55. 	}
  57. 	@Bean
  58. 	public TokenStore tokenStore() {
  59. 		return new InMemoryTokenStore();
  60. 	}
  62. 	@Bean
  63. 	@Autowired
  64. 	public TokenStoreUserApprovalHandler userApprovalHandler(TokenStore tokenStore) {
  65. 		TokenStoreUserApprovalHandler handler = new TokenStoreUserApprovalHandler();
  66. 		handler.setTokenStore(tokenStore);
  67. 		handler.setRequestFactory(new DefaultOAuth2RequestFactory(clientDetailsService));
  68. 		handler.setClientDetailsService(clientDetailsService);
  69. 		return handler;
  70. 	}
  72. 	@Bean
  73. 	@Autowired
  74. 	public ApprovalStore approvalStore(TokenStore tokenStore) throws Exception {
  75. 		TokenApprovalStore store = new TokenApprovalStore();
  76. 		store.setTokenStore(tokenStore);
  77. 		return store;
  78. 	}
  79. }

您能帮助我吗？

英文:

I need your help again. I need to authentificate to my app by JDBC or AD, but it must work all. For example, when I try to authentificate using JDBC user, my program has to connect with user from database, but when i put there AD login, it has to connect with AD user.

Here is my code, but when I have below order(1) code to connect to JDBC , I Can connect ONLY with JDBC and when i have there code to create authentificationProvider i can sign in just when i am using AD login.

  1. @Configuration
  2. @EnableWebSecurity
  3. public class OAuth2SecurityConfiguration extends WebSecurityConfigurerAdapter {
  5. 	@Autowired
  6. 	private ClientDetailsService clientDetailsService;
  8. 	@Autowired
  9. 	private DataSource primaryDataSource;
  11. 	// @Autowired
  12. 	// private AuthenticationProvider authenticationProvider;
  14. 	// @Autowired
  15. 	// private AuthenticationProvider authenticationProviderAD;
  17. 	@Value("${security.authentication.provider}")
  18. 	private String authProvider;
  20. 	@Value("${ad.domain:#{null}}")
  21. 	private String adDomain;
  23. 	// TODO shift system like configuration into java, and no system like
  24. 	// configuration make it optional
  25. 	@Value("${ad.url:#{null}}")
  26. 	private String adUrl;
  28. 	@Override
  29. 	@Order(1)
  30. 	protected void configure(AuthenticationManagerBuilder auth) throws Exception {
  31.    RecursiveAdProvider adProvider = new RecursiveAdProvider(adDomain, adUrl);
  32. 	adProvider.setConvertSubErrorCodesToExceptions(true);
  33. 	adProvider.setUseAuthenticationRequestCredentials(true);
  34. 	auth.authenticationProvider(adProvider);
  35. 	auth.eraseCredentials(false);
  36. 	}
  38. 	@Order(2)
  39. 	protected void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
  40. 		auth.jdbcAuthentication().dataSource(primaryDataSource)
  41. 				.usersByUsernameQuery("select username, password, enabled from users where username=?")
  42. 				.authoritiesByUsernameQuery(
  43. 						"select username, authority from user_authority JOIN authorities ON user_authority.authority_id = authorities.id where username=?")
  44. 				.passwordEncoder(new BCryptPasswordEncoder());
  45. 	}
  49. 	@Override
  50. 	protected void configure(HttpSecurity http) throws Exception {
  51. 		http.csrf().disable().anonymous().disable().authorizeRequests().antMatchers("/oauth/token").permitAll();
  52. 	}
  54. 	@Override
  55. 	@Bean
  56. 	public AuthenticationManager authenticationManagerBean() throws Exception {
  57. 		return super.authenticationManagerBean();
  58. 	}
  60. 	@Bean
  61. 	public TokenStore tokenStore() {
  62. 		return new InMemoryTokenStore();
  63. 	}
  65. 	@Bean
  66. 	@Autowired
  67. 	public TokenStoreUserApprovalHandler userApprovalHandler(TokenStore tokenStore) {
  68. 		TokenStoreUserApprovalHandler handler = new TokenStoreUserApprovalHandler();
  69. 		handler.setTokenStore(tokenStore);
  70. 		handler.setRequestFactory(new DefaultOAuth2RequestFactory(clientDetailsService));
  71. 		handler.setClientDetailsService(clientDetailsService);
  72. 		return handler;
  73. 	}
  75. 	@Bean
  76. 	@Autowired
  77. 	public ApprovalStore approvalStore(TokenStore tokenStore) throws Exception {
  78. 		TokenApprovalStore store = new TokenApprovalStore();
  79. 		store.setTokenStore(tokenStore);
  80. 		return store;
  81. 	}}

Can you help me?

huangapple
  • 本文由 发表于 2020年7月24日 19:41:00
  • 转载请务必保留本文链接：https://java.coder-hub.com/63072827.html
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定