Spring Security（八）会话并发控制->内存用户

浅浅的花香味﹌ 2023-06-06 10:57 40阅读 0赞

**1.UserDetailsService配置**

@Bean(name="memoryUserDetailsService")
        public UserDetailsService userDetailsService() {
            InMemoryUserDetailsManager manager = new InMemoryUserDetailsManager();
            manager.createUser(User.withUsername("user").password("123").roles("USER").build());
            manager.createUser(User.withUsername("admin").password("123").roles("USER","ADMIN").build());
            return manager;
        }
    
        @Autowired
        @Qualifier("memoryUserDetailsService")
        UserDetailsService myUserDetailsService;

**2.configure->AuthenticationManagerBuilder**

@Override
        protected void configure(AuthenticationManagerBuilder auth) throws Exception{
            auth.userDetailsService(myUserDetailsService).passwordEncoder(new MyPasswordEncoder());
        }

**3.configure->HttpSecurity**

@Override
        protected void configure(HttpSecurity http) throws Exception{
            http.authorizeRequests()
                    .antMatchers("/admin/api/**").hasRole("ADMIN")
                    .antMatchers("/user/api/**").hasRole("USER")
                    .antMatchers("/app/api/**").permitAll()
                    .anyRequest().authenticated()
                    .and()
                    .formLogin()
                    .and()
                    .sessionManagement()
                    // 最大会话数设置
                    .maximumSessions(1)
                    // 阻止新会话登录
                    .maxSessionsPreventsLogin(true);
        }

**4.效果**

**![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3Rhb3Rhb19ndWl3YW5n_size_16_color_FFFFFF_t_70][]**

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3Rhb3Rhb19ndWl3YW5n_size_16_color_FFFFFF_t_70]: /images/20230601/202f5ed2bf6a4cb09969d975559d7a62.png