Spring Boot + Security + Thymeleaf + JPA 实现注册登录功能

# User
public interface UserRepository extends JpaRepository<User,Long> {

    User findByNameOrEmail(String name,String email);
    User findByEmail(String email);
    User findByName(String name);
}

# Role
public interface RoleRepository extends JpaRepository<Role,Long> {
    Role findByName(String name);
}

public interface IUserService {

    User save(User user);
    User findByEmail(String email);
    User findByName(String name);
    boolean checkUserByName(String name);
    boolean checkUserByEmail(String email);
    

@Service
public class UserService implements IUserService {

    @Autowired
    private UserRepository userRepository;

    @Autowired
    private RoleRepository roleRepository;

    @Autowired
    private BCryptPasswordEncoder passwordEncoder;

    @Transactional
    @Override
    public User save(User user) {
        return userRepository.save(user);
    }

    @Override
    public User findByEmail(String email) {
        return userRepository.findByEmail(email);
    }

    @Override
    public User findByName(String name) {
        return userRepository.findByName(name);
    }

    @Override
    public boolean checkUserByName(String name) {
        User user = findByName(name);
        return user != null;
    }

    @Override
    public boolean checkUserByEmail(String email) {
        User user = findByEmail(email);
        return user != null;
    }
    /**
     * 创建一个新的user,角色为ROLE_USER
     * @param userDto
     * @return
     */ 
    public User registerNewAccount(UserDto userDto) {
        User user = new User();
        user.setEmail(userDto.getEmail());
        user.setName(userDto.getName());
        user.setPassWd(passwordEncoder.encode(userDto.getPassWd()));
        user.setRoles(Arrays.asList(roleRepository.findByName("ROLE_USER")));
        user.setCreateTime(new Date().getTime());
        user.setLastModifyTime(new Date().getTime());
        return save(user);
    }
}

@Controller
public class IndexController {
    @GetMapping("/")
    public String index(){
        return "index";
    }
    
    @GetMapping("/register")
    public String createUser(Model model){
        model.addAttribute("user",new UserDto());
        return "register";
    }
    
    @GetMapping("/login")
    public String login(Model model){
        model.addAttribute("user",new UserDto());
        return "login";
    }
    
    @GetMapping("/login?error")
    public String loginError(Model model){
        model.addAttribute("loginError",true);
        return "login";
    }

@Controller
public class UserController {

    private final Logger logger = LoggerFactory.getLogger(this.getClass().getName());

    @Autowired
    private UserService userService;

    @PostMapping("/register")
    public String createUser(@ModelAttribute("user") @Valid UserDto userDto, BindingResult result, Model model) {

        if (result.hasErrors()) {

            return "register";
        }
        //check name 是否已使用
        if (userService.checkUserByName(userDto.getName())) {
            result.rejectValue("name", "error.user", "name已使用");
            logger.info("name已存在！");
            return "register";
        }
        //check email 是否已注册。
        if (userService.checkUserByEmail(userDto.getEmail())) {
            result.rejectValue("email", "error.user", "Email已注册");
            logger.info("email已注册！");
            return "register";
        }
        //check password equal
        if (!checkPassWordUniform(userDto.getPassWd(),userDto.getMatchPassWd())){
            result.rejectValue("passWd","error.user","两次输入密码不一致");
            return "register";
        }

        try {
            createUserAccount(userDto);
        } catch (DataIntegrityViolationException e) {
            result.rejectValue("email", "error.user","Email already exists.");
            result.rejectValue("name", "error.user","Name already exists");
        }
        return "redirect:/userInfo";
    }
    @GetMapping("/userInfo")
    public String userInfo(Model model) {
        UserDetails userDetails = (UserDetails) SecurityContextHolder.getContext().getAuthentication().getPrincipal();
        String name = userDetails.getUsername();

        String date = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss").format(new Date());

        model.addAttribute("name", name);
        model.addAttribute("date", date);
        return "userInfo";
    }

    private User createUserAccount(UserDto userDto) {
        User registered = null;

        registered = userService.registerNewAccount(userDto);
        return registered;
    }

    private boolean checkPassWordUniform(String passWd,String matchPassWd){
        return passWd.equals(matchPassWd);
    }

@Configuration
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
	@Autowired
    private DataSource dataSource;

    @Autowired
    private CustomUserDetailService userDetailService;

    /**
     * 密码加密
     * @return
     */
    @Bean
    public BCryptPasswordEncoder passwordEncoder(){
        return new BCryptPasswordEncoder();
    }

    /**
     * auth的方式
     * @param auth
     * @throws Exception
     */
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userDetailService).passwordEncoder(passwordEncoder());
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
                .csrf().disable()  //csrf不可用
                .authorizeRequests()
                .antMatchers("/static/**","/css/**").permitAll() //访问允许静态文件
                .antMatchers("/","/register").permitAll() //允许访问首页和注册页
                .anyRequest().authenticated()
                .and()
                .formLogin().loginPage("/login").failureUrl("/login?error")//指定登录页和登录失败页
                .defaultSuccessUrl("/userInfo") //登录成功跳转页
                .usernameParameter("name")
                .passwordParameter("passWd")
                .and()
                .logout().logoutSuccessUrl("/login").permitAll() //退出登录跳转页
                .and()
                .rememberMe() //remember me
                .tokenRepository(tokenRepository()) //存储
                .userDetailsService(userDetailService)
                .tokenValiditySeconds(24*60*60);//token有效期24h 
    }



    public PersistentTokenRepository tokenRepository(){
        JdbcTokenRepositoryImpl db = new JdbcTokenRepositoryImpl();
        db.setDataSource(this.dataSource);
        return db;
    }

@Service
public class CustomUserDetailService implements UserDetailsService {
    private final static Logger logger = LogManager.getLogger(CustomUserDetailService.class);

    @Autowired
    private UserRepository userRepository;

    @Override
    public UserDetails loadUserByUsername(String name) throws UsernameNotFoundException {
        User user = userRepository.findByName(name);

        if (user==null){
            logger.error("Not Found name "+ name);
            throw new UsernameNotFoundException("Not Found name "+ name);

        }

        return new org.springframework.security.core.userdetails.User(
            user.getName(),
                user.getPassWd(),
                getAuthorities(user.getRoles()));
    }
    private static List<GrantedAuthority> getAuthorities (List<Role> roles) {

        List<GrantedAuthority> authorities = new ArrayList<>();
        for (Role role:roles){
            authorities.add(new SimpleGrantedAuthority(role.getName()));
        }
        return authorities;
    }
}

UserDetails userDetails = (UserDetails) SecurityContextHolder.getContext().getAuthentication().getPrincipal();
String name = userDetails.getUsername();

<div>
    <p>登录的用户名 : <strong class="reg" sec:authentication="name"></strong>
    </p>
    登录成功的用户角色 :
    <em class="reg" sec:authentication="principal.authorities"></em>
</div>

  public PersistentTokenRepository tokenRepository(){
        //存储内存，不推荐
//        InMemoryTokenRepositoryImpl memory =new InMemoryTokenRepositoryImpl();
//        return memory;
        /** 存档到数据库中 **/
        JdbcTokenRepositoryImpl db = new JdbcTokenRepositoryImpl();
        db.setDataSource(this.dataSource);
        return db;
    }

DROP TABLE IF EXISTS `persistent_logins`;
CREATE TABLE `persistent_logins` (
  `username` varchar(64) NOT NULL,
  `series` varchar(64) NOT NULL,
  `token` varchar(64) NOT NULL,
  `last_used` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
  PRIMARY KEY (`series`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;
SET FOREIGN_KEY_CHECKS=1;

@Override
   protected void configure(HttpSecurity http) throws Exception {
       http
          ...........
               .formLogin().loginPage("/login").failureUrl("/login?error")
               .defaultSuccessUrl("/userInfo")
              .usernameParameter("name") 
               .passwordParameter("passWd")

<dependency>
	    <groupId>org.thymeleaf.extras</groupId>
		<artifactId>thymeleaf-extras-springsecurity5</artifactId>
</dependency>