/**
 * @author: coffee
 * @date: 2024/6/22 21:22
 * @description: 重寫springsecurity默認(rèn)組件：注入Bean的方式
 */
 @Configuration
public class ProjectConfig {

    /**
     * 重寫userDetailsService組件
     */
     @Bean
    public UserDetailsService userDetailsService () {
        // InMemoryUserDetailsManager實(shí)現(xiàn)并不適用生成環(huán)境，此處進(jìn)作為demo使用
        InMemoryUserDetailsManager userDetailsService = new InMemoryUserDetailsManager();

        // 使用指定用戶名、密碼和權(quán)限列表構(gòu)建用戶
        UserDetails user = User.withUsername("john").password("12345").authorities("read").build();

        // 添加該用戶以便讓UserDetailsService對(duì)其進(jìn)行管理
        userDetailsService.createUser(user);

        return userDetailsService;
    }

    /**
     * 重寫UserDetailsService組件也必須重寫PasswordEncoder組件，否則會(huì)報(bào)：
     *    java.lang.IllegalArgumentException: There is no PasswordEncoder mapped for the id "null"
     */
     @Bean
    public PasswordEncoder passwordEncoder () {
        // NoOpPasswordEncoder實(shí)例會(huì)將密碼視為普通文本，他不會(huì)對(duì)密碼進(jìn)行加密或者h(yuǎn)ash處理
        return NoOpPasswordEncoder.getInstance();
    }
}

/**
 * @author: coffee
 * @date: 2024/6/22 21:46
 * @description:
 */
@Configuration
public class ProjectConfig2 extends WebSecurityConfigurerAdapter {


    /**
     * 重寫端點(diǎn)授權(quán)配置，就需要擴(kuò)展WebSecurityConfigurerAdapter類，可以使用HttpSecurity對(duì)象的不同方法更改配置
     */
    @Override
    protected void configure (HttpSecurity httpSecurity) throws Exception {
        httpSecurity.httpBasic();

        // 所有請(qǐng)求都需要身份驗(yàn)證
        // httpSecurity.authorizeRequests().anyRequest().authenticated();

        // permitAll()方法修改授權(quán)配置，無需憑據(jù)(用戶名密碼)也可以直接調(diào)用接口。   curl http://localhost:8080/hello
        httpSecurity.authorizeRequests().anyRequest().permitAll();
    }

    /**
     * 重寫springsecurity默認(rèn)組件：繼承WebSecurityConfigurerAdapter的方式
     */
    @Override
    protected void configure (AuthenticationManagerBuilder auth) throws Exception {
        // InMemoryUserDetailsManager實(shí)現(xiàn)并不適用生成環(huán)境，此處進(jìn)作為demo使用
        InMemoryUserDetailsManager userDetailsService = new InMemoryUserDetailsManager();

        // 使用指定用戶名、密碼和權(quán)限列表構(gòu)建用戶
        UserDetails user = User.withUsername("john").password("12345").authorities("read").build();

        // 添加該用戶以便讓UserDetailsService對(duì)其進(jìn)行管理
        userDetailsService.createUser(user);

        // AuthenticationManagerBuilder調(diào)用userDetailsService()方法來注冊(cè)UserDetailsService實(shí)例
        // AuthenticationManagerBuilder調(diào)用passwordEncoder()方法來注冊(cè)NoOpPasswordEncoder實(shí)例
        auth.userDetailsService(userDetailsService).passwordEncoder(NoOpPasswordEncoder.getInstance());

    }
}

/**
 * @author: coffee
 * @date: 2024/6/22 21:46
 * @description:
 */
@Configuration
public class ProjectConfig2 extends WebSecurityConfigurerAdapter {


    /**
     * 重寫端點(diǎn)授權(quán)配置，就需要擴(kuò)展WebSecurityConfigurerAdapter類，可以使用HttpSecurity對(duì)象的不同方法更改配置
     */
    @Override
    protected void configure (HttpSecurity httpSecurity) throws Exception {
        httpSecurity.httpBasic();

        // 所有請(qǐng)求都需要身份驗(yàn)證
        // httpSecurity.authorizeRequests().anyRequest().authenticated();

        // permitAll()方法修改授權(quán)配置，無需憑據(jù)(用戶名密碼)也可以直接調(diào)用接口。   curl http://localhost:8080/hello
        httpSecurity.authorizeRequests().anyRequest().permitAll();
    }
}

/**
 * @author: coffee
 * @date: 2024/6/22 22:15
 * @description: ...
 */
@Component
public class CustomAuthenticationProvider implements AuthenticationProvider {

    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        String userName = authentication.getName();
        String password = String.valueOf(authentication.getCredentials());

        // 重寫身份驗(yàn)證提供者，用if else 替換 UserDetailsService和PasswordEncoder
        if ("john".equals(userName) && "12345".equals(password)) {
            return new UsernamePasswordAuthenticationToken(userName, password, Arrays.asList());
        } else {
            throw new AuthenticationCredentialsNotFoundException("ERROR");
        }
    }

    @Override
    public boolean supports(Class<?> authentication) {
        return UsernamePasswordAuthenticationToken.class.isAssignableFrom(authentication);
    }
}

/**
 * @author: coffee
 * @date: 2024/6/22 21:46
 * @description:
 */
@Configuration
public class ProjectConfig2 extends WebSecurityConfigurerAdapter {

    @Autowired
    private CustomAuthenticationProvider customAuthenticationProvider;

    /**
     * 重寫端點(diǎn)授權(quán)配置，就需要擴(kuò)展WebSecurityConfigurerAdapter類，可以使用HttpSecurity對(duì)象的不同方法更改配置
     */
    @Override
    protected void configure (HttpSecurity httpSecurity) throws Exception {
        httpSecurity.httpBasic();

        // 所有請(qǐng)求都需要身份驗(yàn)證
         httpSecurity.authorizeRequests().anyRequest().authenticated();

    }

    /**
     * 重寫身份驗(yàn)證提供者
     */
    @Override
    protected void configure (AuthenticationManagerBuilder auth) throws Exception {
       
        auth.authenticationProvider(customAuthenticationProvider);

    }
}