spring-security 如何使用用户名或邮箱登录

其他文章是介绍使用邮箱以及验证码登录的方式，如果变成如下这种通过用户名或者邮箱的登录方式呢？ https://gitee.com/pmh905001/moikiitos/

 

spring-security只实现用了用户名+密码登录，没有邮箱+密码登录的方式该怎么进行扩展呢？ 

翻了下源代码，做法如下：在spring-security.xml添加一个能够支持邮箱登录的bean,并且注入到：authentication-manager 下的 authentication-provider 

    <beans:bean id="userDetailsManager" class="com.hyxc.moikiitos.services.UserDetailsServiceImpl">
        <beans:property name="dataSource" ref="dataSource" />
    </beans:bean>
    
    <beans:bean id="encoder" class="org.springframework.security.crypto.password.StandardPasswordEncoder"/>
  
    <authentication-manager>
        <authentication-provider user-service-ref="userDetailsManager">
            <password-encoder ref="encoder" />
        </authentication-provider>
    </authentication-manager>

 

剩下的事情就是扩展 JdbcUserDetailsManager，只需要覆盖 loadUsersByUsername(String username)方法，让email字段也能作为查询条件即可。代码如下：

package com.hyxc.moikiitos.services;

import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.List;

import org.springframework.jdbc.core.RowMapper;
import org.springframework.security.core.authority.AuthorityUtils;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.provisioning.JdbcUserDetailsManager;

public class UserDetailsServiceImpl extends JdbcUserDetailsManager {
    @Override
    protected List<UserDetails> loadUsersByUsername(String username) {
        return getJdbcTemplate().query("select username,password,enabled from users where username = ? or email = ?",
                new String[] { username, username }, new RowMapper<UserDetails>() {
                    public UserDetails mapRow(ResultSet rs, int rowNum) throws SQLException {
                        String username = rs.getString(1);
                        String password = rs.getString(2);
                        boolean enabled = rs.getBoolean(3);
                        return new User(username, password, enabled, true, true, true, AuthorityUtils.NO_AUTHORITIES);
                    }

                });

    }

}