springboot 集成 springsecurity 调用外部URL进行用户登录验证 登录后生成token 存储到redis中

首先，需要在Spring Security中配置一个自定义的认证提供者，用于调用外部URL进行用户登录验证。可以实现`AuthenticationProvider`接口，重写`authenticate()`方法，用于验证用户身份。具体实现可以参考以下代码示例：

@Component
public class CustomAuthenticationProvider implements AuthenticationProvider {

    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        String username = authentication.getName();
        String password = authentication.getCredentials().toString();

        // 调用外部URL进行用户登录验证
        if (externalUrlAuth(username, password)) {
            List<GrantedAuthority> authorities = new ArrayList<>();
            authorities.add(new SimpleGrantedAuthority("ROLE_USER"));
            return new UsernamePasswordAuthenticationToken(username, password, authorities);
        } else {
            throw new BadCredentialsException("External authentication failed.");
        }
    }

    private boolean externalUrlAuth(String username, String password) {
        // 调用外部URL进行用户登录验证的具体实现
        // ...
        return true; // 验证成功返回true，失败返回false
    }

    @Override
    public boolean supports(Class<?> aClass) {
        return aClass.equals(UsernamePasswordAuthenticationToken.class);
    }
}

然后，在Spring Security的配置类中将自定义的认证提供者加入认证管理器中：

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Autowired
    private CustomAuthenticationProvider authenticationProvider;

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.authenticationProvider(authenticationProvider);
    }

    // 其他配置...
}

接下来，需要在用户登录成功后生成token，并将token存储到Redis中。可以在`CustomAuthenticationProvider`中重写`successfulAuthentication()`方法，用于生成token和存储到Redis中。具体实现可以参考以下代码示例：

@Component
public class CustomAuthenticationProvider extends AbstractUserDetailsAuthenticationProvider {

    @Autowired
    private RedisTemplate<String, Object> redisTemplate;

    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        // 验证用户身份的具体实现...
        // ...

        // 验证成功后生成token
        String token = generateToken(username);

        // 将token存储到Redis中
        redisTemplate.opsForValue().set(token, userDetails, 30, TimeUnit.MINUTES);

        return new UsernamePasswordAuthenticationToken(username, password, authorities);
    }

    private String generateToken(String username) {
        // 生成token的具体实现...
        // ...
        return token;
    }

    @Override
    protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response,
                                            FilterChain chain, Authentication authResult) throws IOException, ServletException {
        // 用户登录成功后生成token并存储到Redis中
        String username = authResult.getName();
        UserDetails userDetails = (UserDetails) authResult.getPrincipal();
        String token = generateToken(username);
        redisTemplate.opsForValue().set(token, userDetails, 30, TimeUnit.MINUTES);

        // 将token放入响应头中
        response.setHeader("Authorization", token);
    }
}

需要注意的是，需要在Spring Boot中配置Redis的连接信息和序列化方式。可以参考以下配置：

spring:
  redis:
    host: localhost
    port: 6379
    password:
    database: 0
  redis:
    template:
      defaultSerializer: org.springframework.data.redis.serializer.GenericJackson2JsonRedisSerializer