add qq login demo

Author: AnoyiX

security-oauth2-qq/pom.xml

@@ -0,0 +1,84 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <groupId>com.spring4all.anoy</groupId>
+    <artifactId>security-oauth2-qq</artifactId>
+    <version>1.0-SNAPSHOT</version>
+
+    <description>Spring Security 基础 DEMO （ QQ 登录 ）- 来源于 SpringForAll 社区（http://spring4all.com）</description>
+
+    <parent>
+        <groupId>org.springframework.boot</groupId>
+        <artifactId>spring-boot-starter-parent</artifactId>
+        <version>2.0.0.M1</version>
+    </parent>
+
+    <dependencies>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-web</artifactId>
+        </dependency>
+
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-thymeleaf</artifactId>
+        </dependency>
+
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-security</artifactId>
+        </dependency>
+
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-configuration-processor</artifactId>
+            <optional>true</optional>
+        </dependency>
+
+        <dependency>
+            <groupId>org.jsoup</groupId>
+            <artifactId>jsoup</artifactId>
+            <version>1.10.2</version>
+        </dependency>
+
+        <dependency>
+            <groupId>com.alibaba</groupId>
+            <artifactId>fastjson</artifactId>
+            <version>1.2.32</version>
+        </dependency>
+
+    </dependencies>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>org.springframework.boot</groupId>
+                <artifactId>spring-boot-maven-plugin</artifactId>
+                <version>1.5.3.RELEASE</version>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>repackage</goal>
+                        </goals>
+                    </execution>
+                </executions>
+            </plugin>
+        </plugins>
+    </build>
+
+    <repositories>
+        <repository>
+            <id>spring-milestones</id>
+            <name>Spring Milestones</name>
+            <url>https://repo.spring.io/libs-milestone</url>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </repository>
+    </repositories>
+
+
+</project>

security-oauth2-qq/src/main/java/com/spring4all/Application.java

@@ -0,0 +1,13 @@
+package com.spring4all;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+
+@SpringBootApplication
+public class Application {
+
+    public static void main(String[] args) {
+        SpringApplication.run(Application.class, args);
+    }
+
+}

security-oauth2-qq/src/main/java/com/spring4all/config/WebSecurityConfig.java

@@ -0,0 +1,45 @@
+package com.spring4all.config;
+
+import com.spring4all.filter.qq.QQAuthenticationFilter;
+import com.spring4all.filter.qq.QQAuthenticationManager;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
+import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
+import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+
+@EnableWebSecurity
+public class WebSecurityConfig extends WebSecurityConfigurerAdapter{
+
+    /**
+     * 匹配 "/" 路径，不需要权限即可访问
+     * 匹配 "/user" 及其以下所有路径，都需要 "USER" 权限
+     * 登录地址为 "/login"，登录成功默认跳转到页面 "/user"
+     * 退出登录的地址为 "/logout"，退出成功后跳转到页面 "/login"
+     * 默认启用 CSRF
+     */
+    @Override
+    protected void configure(HttpSecurity http) throws Exception {
+        http
+                .authorizeRequests()
+                .antMatchers("/").permitAll()
+                .antMatchers("/user/**").hasRole("USER")
+                .and()
+                .formLogin().loginPage("/login").defaultSuccessUrl("/user")
+                .and()
+                .logout().logoutUrl("/logout").logoutSuccessUrl("/login");
+
+        // 在 UsernamePasswordAuthenticationFilter 前添加 QQAuthenticationFilter
+        http.addFilterAt(qqAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class);
+
+    }
+
+    /**
+     * 自定义 QQ登录 过滤器
+     */
+    private QQAuthenticationFilter qqAuthenticationFilter(){
+        QQAuthenticationFilter authenticationFilter = new QQAuthenticationFilter("/login/qq");
+        authenticationFilter.setAuthenticationManager(new QQAuthenticationManager());
+        return authenticationFilter;
+    }
+
+}

security-oauth2-qq/src/main/java/com/spring4all/controller/HomeController.java

@@ -0,0 +1,19 @@
+package com.spring4all.controller;
+
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.GetMapping;
+
+@Controller
+public class HomeController {
+
+    @GetMapping({"/", "/index", "/home"})
+    public String root(){
+        return "index";
+    }
+
+    @GetMapping("/login")
+    public String login(){
+        return "login";
+    }
+
+}

security-oauth2-qq/src/main/java/com/spring4all/controller/UserController.java

@@ -0,0 +1,21 @@
+package com.spring4all.controller;
+
+import com.spring4all.domain.QQUser;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+
+@Controller
+public class UserController {
+
+    @GetMapping("/user")
+    public String user(@AuthenticationPrincipal UsernamePasswordAuthenticationToken userAuthentication, Model model){
+        QQUser user = (QQUser) userAuthentication.getPrincipal();
+        model.addAttribute("username", user.getNickname());
+        model.addAttribute("avatar", user.getAvatar());
+        return "user/user";
+    }
+
+}

security-oauth2-qq/src/main/java/com/spring4all/domain/QQUser.java

@@ -0,0 +1,69 @@
+package com.spring4all.domain;
+
+public class QQUser {
+
+    /**
+     * 昵称
+     */
+    private String nickname;
+
+    /**
+     * 性别
+     */
+    private String gender;
+
+    /**
+     * 省份
+     */
+    private String province;
+
+    /**
+     * 出生年
+     */
+    private String year;
+
+    /**
+     * 头像
+     */
+    private String avatar;
+
+    public String getNickname() {
+        return nickname;
+    }
+
+    public void setNickname(String nickname) {
+        this.nickname = nickname;
+    }
+
+    public String getGender() {
+        return gender;
+    }
+
+    public void setGender(String gender) {
+        this.gender = gender;
+    }
+
+    public String getProvince() {
+        return province;
+    }
+
+    public void setProvince(String province) {
+        this.province = province;
+    }
+
+    public String getYear() {
+        return year;
+    }
+
+    public void setYear(String year) {
+        this.year = year;
+    }
+
+    public String getAvatar() {
+        return avatar;
+    }
+
+    public void setAvatar(String avatar) {
+        this.avatar = avatar;
+    }
+}