将 Bcrypt 编码添加到 Spring MVC 安全并限制登录尝试

Question

我有一个限制登录尝试的工作项目，我只需要添加 Bcrypt 密码加密。我有以下豆子：

<beans:bean id="customUserDetailsService"
        class="com.setelog.spring.service.CustomUserDetailsService">
        <beans:property name="usersByUsernameQuery" value="select * from users where username = ?"/>
        <beans:property name="authoritiesByUsernameQuery" value="select username, role from user_roles where username =?" />
        <beans:property name="dataSource" ref="dataSource" />
    </beans:bean>

    <beans:bean id="userDetailsDao" class="com.setelog.spring.dao.UserDetailsDaoImpl" >
        <beans:property name="dataSource" ref="dataSource" />
    </beans:bean>


    <beans:bean id="authenticationProvider"
        class="com.setelog.spring.handler.LimitLoginAuthenticationProvider">
        <beans:property name="userDetailsService" ref="customUserDetailsService" />
        <beans:property name="userDetailsDao" ref="userDetailsDao" />
    </beans:bean>

    <authentication-manager>
        <authentication-provider ref="authenticationProvider" />
    </authentication-manager>

我有一个项目，它有以下启用 Bcrypt 的项目：

<authentication-manager>
    <authentication-provider user-service-ref="myUserDetailsService" >
        <password-encoder hash="bcrypt" />    
    </authentication-provider>
</authentication-manager>

但我似乎无法让它以这种方式工作。可能是因为 "ref" 而不是 authentication-provider 中的 "user-service-ref"。

感谢任何帮助。

Answer 1

我设法解决了！我只需要将编码器 bean 添加到 authenticationProvider:

<beans:bean id="encoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder"/>


    <beans:bean id="authenticationProvider"
        class="com.setelog.spring.handler.LimitLoginAuthenticationProvider">
        <beans:property name="userDetailsService" ref="customUserDetailsService" />
        <beans:property name="userDetailsDao" ref="userDetailsDao" />
        <beans:property name="passwordEncoder" ref="encoder" />

    </beans:bean>

将 Bcrypt 编码添加到 Spring MVC 安全并限制登录尝试

Adding Bcrypt Encoding to Spring MVC Security with limit login attempts

java

spring

spring-mvc

spring-security

spring-bean