使用Spring Security实现统一身份认证系统并下载文件

@EnableWebSecurity

public class SecurityConfig extends WebSecurityConfigurerAdapter {

@Override

protected void configure(HttpSecurity http) throws Exception {

http

.authorizeRequests()

.antMatchers("/download/**").authenticated() // 需要登录才能访问下载路径

.anyRequest().permitAll()

.and()

.formLogin()

.loginPage("/login")

.permitAll()

.and()

.logout()

.permitAll();

}

@Autowired

public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {

auth.inMemoryAuthentication()

.withUser("user").password("{noop}password").roles("USER");

}

}

@RequestMapping(value = "/download/{fileName}", method = RequestMethod.GET)

public ResponseEntity downloadFile(@PathVariable String fileName, HttpServletRequest request) {

Resource resource = new ClassPathResource("files/" + fileName);

String contentType = null;

try {

contentType = request.getServletContext().getMimeType(resource.getFile().getAbsolutePath());

} catch (IOException e) {

e.printStackTrace();

}

if (contentType == null) {

contentType = "application/octet-stream";

}

return ResponseEntity.ok()

.contentType(MediaType.parseMediaType(contentType))

.header(HttpHeaders.CONTENT_DISPOSITION, "attachment; filename=\"" + resource.getFilename() + "\"")

.body(resource);

}