SSM综合案例之角色管理实战

Posted 2022-10-24

一、课程目标

1. 【掌握】角色管理功能
2. 【掌握】用户管理功能

二、角色管理

2.1 查询角色

编写RoleMapper接口

//查询所有角色
    @Select("select * from role")
    public List<Role> selectAll();

编写RoleService

public interface RoleService 
    //查询所有角色
    public List<Role> findAll();

@Service("roleService")
public class RoleServiceImpl implements RoleService 
    @Autowired
    RoleMapper roleMapper;
    @Override
    public List<Role> findAll() 
        return roleMapper.selectAll();
    

编写RoleController

@Controller
@RequestMapping("/role")
public class RoleController 
    @Autowired
    RoleService roleService;

    /*
    * 查询所有数据
    * param request page limit
    * */
    @RequestMapping("/findAll")
    public String findAll(HttpServletRequest request, @RequestParam(value = "page",required = false,defaultValue = "1") int page, @RequestParam(value = "limit",required = false,defaultValue = "5")int limit)
        PageHelper.startPage(page,limit);
        List<Role> all = roleService.findAll();
        PageInfo<Role> pageInfo=new PageInfo<>(all);
        request.setAttribute("pageInfo",pageInfo);
        return "/role/role-list";
    

测试

2.2 角色添加

编写RoleMapper接口

//添加角色信息
    @Insert("insert into role(roleName,roleDesc)values(#roleName,#roleDesc)")
    public int insert(Role role);

编写RoleService

//添加角色信息
    public int add(Role role);

@Override
    public int add(Role role) 
        return roleMapper.insert(role);
    

编写RoleController

@RequestMapping(value = "/add",method = RequestMethod.GET)
    public String toAdd()
        return "/role/role-add";
    
    @RequestMapping(value = "/add",method = RequestMethod.POST)
    public String add(Role role)
        roleService.add(role);
        return "redirect:/role/findAll";
    

测试

2.3 角色修改

编写RoleMapper接口

//根据角色id查询角色信息
    @Select("select * from role where id=#id")
    public Role selectById(int id);

    //修改角色信息
    @Update("update role set roleName=#roleName,roleDesc=#roleDesc where id=#id")
    public int update(Role role);

    //查询角色权限管理表中当前角色拥有的权限id集合
    @Select("select permissionId from role_permission where roleId=#rid")
    public List<Integer> selectAllPermissionId(int rid);


    //删除关联表中当前账号信息
    @Delete("delete from role_permission where roleId=#rid")
    public int deletePermissionByRId(int rid);

    //添加关联数据
    public int addPermissionByList(@Param("rid") Integer rid, @Param("ids") List<Integer> ids);

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE mapper
        PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN"
        "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
<mapper namespace="com.yunhe.mapper.RoleMapper">
    <insert id="addPermissionByList" >
        insert into role_permission (roleId,permissionId) values
        <foreach collection="ids" item="pid" separator=",">
        (#rid,#pid)
        </foreach>
    </insert>
</mapper>

编写RoleService

//根据角色id查询角色信息
    public Role findById(int id);

    //修改角色信息
    public int edit(Role role);

    //查询指定角色响应的权限信息
    public List<Integer> findPermissionByRid(int rid);


    //为指定角色添加权限信息
    public void permissionAdd(Integer rid,List<Integer> ids);

@Override
    public Role findById(int id) 
        return roleMapper.selectById(id);
    

    @Override
    public int edit(Role role) 
        return roleMapper.update(role);
    

    @Override
    public List<Integer> findPermissionByRid(int rid) 
        return roleMapper.selectAllPermissionId(rid);
    

    @Override
    @Transactional
    public void permissionAdd(Integer rid, List<Integer> ids) 
        //先删除关联表中当前角色对应的所有权限
        roleMapper.deletePermissionByRId(rid);
        //使用集合在权限管理表中添加数据
        roleMapper.addPermissionByList(rid,ids);

    

编写RoleController

@RequestMapping(value = "/edit",method = RequestMethod.GET)
    public String findById(HttpServletRequest request,int id)
        Role role = roleService.findById(id);
        request.setAttribute("role",role);
        return "/role/role-edit";
    

    @RequestMapping(value = "/edit",method = RequestMethod.POST)
    public String edit(Role role)
        roleService.edit(role);
        return "redirect:/role/findAll";
    

    @RequestMapping(value = "/permissionAdd",method = RequestMethod.GET)
    public String toPermissionsAdd(HttpServletRequest request,int id)
        //先查询当前角色拥有的权限
        List<Integer> permissionIdList = roleService.findPermissionByRid(id);
        //将当前角色拥有的权限发送
        request.setAttribute("permissionIdList",permissionIdList);
        //查询所有权限数据
        List<Permission> permissionList = permissionService.findAll();
        //将所有权限发送
        request.setAttribute("permissionList",permissionList);

        request.setAttribute("roleId",id);

        return "/role/role-edit-permission";
    

    @RequestMapping(value = "/permissionAdd",method = RequestMethod.POST)
    @ResponseBody
    public String toPermissionsAdd(@RequestBody Role_Pid ids)
        roleService.permissionAdd(ids.getRid(),ids.getIds());
        return "/role/findAll";
    

测试

2.4 角色详情

编写RoleMapper接口

//查询指定角色与权限信息
    public Role selectRole(int rid);

<resultMap id="u_r" type="com.yunhe.javabean.Role" autoMapping="true">
        <id column="id" property="id"></id>
        <collection property="permissions" autoMapping="true" ofType="com.yunhe.javabean.Permission">
            <id column="pid" property="id"></id>

        </collection>
    </resultMap>
    
    <select id="selectRole" resultMap="u_r">
        select r.*,p.id pid,p.permissionName,p.url from role r, role_permission rp, permission p where r.id=rp.roleId and p.id=rp.permissionId and r.id=#id
    </select>

编写RoleService

//角色权限关联查询
    public Role findRole(int id);

@Override
    public Role findRole(int id) 
        return roleMapper.selectRole(id);
    

编写RoleController

@RequestMapping(value = "/show")
    public String show(HttpServletRequest request,int id)
        Role role = roleService.findRole(id);
        request.setAttribute("role",role);
        return "/role/role-show";
    

测试

2.5 角色删除

编写RoleMapper接口

//删除角色信息
    @Delete("delete from role where id=#id")
    public int deleteById(int id);

编写RoleService

//删除角色信息
    public int deleteById(int id);

@Override
    public int deleteById(int id) 
        return roleMapper.deleteById(id);
    

编写RoleController

@RequestMapping(value = "/delete")
    public String delete(int id)
        roleService.deleteById(id);
        return "redirect:/role/findAll";
    

测试

三、用户管理

3.1 查询用户

编写UserMapper接口

public interface UserMapper 
    //查询所有用户信息(包含权限)
    public List<Users> selectAllUser();

<resultMap id="u_r" type="com.yunhe.javabean.Users" autoMapping="true">
    <association property="role" javaType="com.yunhe.javabean.Role" autoMapping="true">
        <id column="roleId" property="id"/>
    </association>
</resultMap>

<select id="selectAllUser" resultMap="u_r">
    select u.*,ur.roleId,r.roleName,r.roleDesc from users u,users_role ur, role r where u.id=ur.userId and r.id=ur.roleId
</select>

编写UserService

public interface UserService extends UserDetailsService 

    /**
     * 查询所有用户
     * @return
     */
     public List<Users> findAllUser();

@Service("userService")
public class UserServiceImpl implements UserService 

    @Autowired
    private UserMapper userMapper;
    
     /**
     * 查询所有用户
     * @return
     */
     @Override
    public List<Users> findAllUser() 
        return  userMapper.selectAllUser();
    

编写UserController

@Controller
@RequestMapping("/users")
public class UserController 
    @Autowired
    UserService userService;
    @Autowired
    RoleService roleService;//之后查询角色信息使用
    
    @RequestMapping("/findAll")
    public String findAll(HttpServletRequest request, @RequestParam(value = "page",required = false,defaultValue = "1") int page, @RequestParam(value = "limit",required = false,defaultValue = "5")int limit)
        PageHelper.startPage(page,limit);
        List<Users> allUser = userService.findAllUser();
        PageInfo<Users> pageInfo=new PageInfo<>(allUser);
        request.setAttribute("pageInfo",pageInfo);
        return "/users/users-list";
    

测试

3.2 用户添加

编写UserMapper接口

//添加用户数据
    public int insert(Users users);
    //添加用户角色关联表数据
    //将关联表中指定userid对应的roleid添加
    @Insert("insert into users_role (userId,roleId)values(#uid,#rid)")
    public int InsertUserRole(@Param("uid") int uid,@Param("rid") int rid);

<insert id="insert" parameterType="com.yunhe.javabean.Users" useGeneratedKeys="true" keyProperty="id" keyColumn="id">
        insert users (username,password,email,phoneNum,status)values(#username,#password,#email,#phoneNum,#status)
    </insert>

编写UserService

public interface UserService extends UserDetailsService 
   /**
     * 新增用户
     * @param users rid
     */
    public boolean add(Users users,int  rid);

@Override
    @Transactional
    public boolean add(Users users,int rid) 
        //添加数据前将密码加密
        users.setPassword(passwordEncoder.encode(users.getPassword()));

        //向用户表中添加数据
        userMapper.insert(users);
        //向用户角色关联表中添加数据
        userMapper.InsertUserRole(users.getId(),rid);
        return true;
    

注意事项：

在添加用户时，我们还要将用户的密码，进行加密操作，在SpringSecurity中已经帮我们提供了实现，直接使用即可！

在【spring-securiyt.xml】中我们配置​​BCryptPasswordEncoder​​；加密类

<!-- 在xml配置加密类 -->
<bean id="passwordEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder"/>

编写UserController

@RequestMapping(value = "/add",method = RequestMethod.GET)
    public String toAdd(HttpServletRequest request)
        //查询角色列表数据
        List<Role> roleList = roleService.findAll();
        request.setAttribute("roleList",roleList);
        return "/users/users-add";
    

    @RequestMapping(value = "/add",method = RequestMethod.POST)
    public String add(Users users,int roleId)
        userService.add(users,roleId);
        return "redirect:/users/findAll";
    

测试

3.3 用户删除

编写UserMapper接口

//添加用户数据
    public int insert(Users users);
    //添加用户角色关联表数据
    //将关联表中指定userid对应的roleid添加
    @Insert("insert into users_role (userId,roleId)values(#uid,#rid)")
    public int InsertUserRole(@Param("uid") int uid,@Param("rid") int rid);

<insert id="insert" parameterType="com.yunhe.javabean.Users" useGeneratedKeys="true" keyProperty="id" keyColumn="id">
        insert users (username,password,email,phoneNum,status)values(#username,#password,#email,#phoneNum,#status)
    </insert>

编写UserService

public interface UserService extends UserDetailsService 
   /**
     * 新增用户
     * @param users rid
     */
    public boolean add(Users users,int  rid);

@Override
    @Transactional
    public boolean add(Users users,int rid) 
        //添加数据前将密码加密
        users.setPassword(passwordEncoder.encode(users.getPassword()));

        //向用户表中添加数据
        userMapper.insert(users);
        //向用户角色关联表中添加数据
        userMapper.InsertUserRole(users.getId(),rid);
        return true;
    

注意事项：

在添加用户时，我们还要将用户的密码，进行加密操作，在SpringSecurity中已经帮我们提供了实现，直接使用即可！

在【spring-securiyt.xml】中我们配置​​BCryptPasswordEncoder​​；加密类

<!-- 在xml配置加密类 -->
<bean id="passwordEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder"/>

编写UserController

@RequestMapping(value = "/add",method = RequestMethod.GET)
    public String toAdd(HttpServletRequest request)
        //查询角色列表数据
        List<Role> roleList = roleService.findAll();
        request.setAttribute("roleList",roleList);
        return "/users/users-add";
    

    @RequestMapping(value = "/add",method = RequestMethod.POST)
    public String add(Users users,int roleId)
        userService.add(users,roleId);
        return "redirect:/users/findAll";
    

测试

3.4 问题处理

问题一：之前账号不能登录

用户的添加功能已经实现，当我们使用新添加的用户名进行登录时发现没办法登录的。

原因是，我们的密码是进行加密的，要登录时要对密码进行解密，在UserService中将查询到的UserInfo封装到了User对象中，此处我们有一段代码也是要修改,将​​noop​​给删掉

User user = new User(userInfo.getUsername(),
               // "noop"+userInfo.getPassword(),
                 userInfo.getPassword(),
                 userInfo.getStatus() == 0 ? false : true ,
                true,true,true,
                 getAuthority(userInfo.getRoles()));

最后我们在spring-security.xml配置文件中也要进行配置

此时我们再进行测试，看是否能登录成功！！！ 哈哈已经登录成功了

问题二：对jack密码进行加密

但是问题也就出现了，原来的jack用户名没办法登录了，原因是我们之间用的是明文进行登录的，密码没有进行加密，我们可以进行手动的进行加密把jack的密码给改一下即可！

编写​​BCryptPasswordEncoderUtil​​工具类

public class BCryptPasswordEncoderUtil 

    private static BCryptPasswordEncoder bCryptPasswordEncoder = new BCryptPasswordEncoder();

    public static String encoderPassword(String password)
        String encoderPasswordStr = bCryptPasswordEncoder.encode(password);
        return encoderPasswordStr;
    


    public static void main(String[] args) 
        String s = encoderPassword("123");
        System.out.println(s);
    

问题三：登录页面账号名称显示

可以修改配置文件中认证成功后转发地址，设置为自定义的请求

然后再响应位置书写代码获取主体中认证成功的账号信息,存入session跳转成功页面即可

//....一级目录/users
    @RequestMapping("/name")
    public String getUsername(HttpServletRequest request)
        SecurityContext context = SecurityContextHolder.getContext();
        UserDetails userDetails= (UserDetails)context.getAuthentication().getPrincipal();
        request.getSession().setAttribute("username",userDetails.getUsername());
        return "main";