package com.example.springsecuritydemo.service;

import com.baomidou.mybatisplus.extension.kotlin.KtQueryWrapper
import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl
import com.example.springsecuritydemo.mapper.UserMapper
import com.example.springsecuritydemo.model.User
import org.springframework.stereotype.Service
import org.springframework.util.StringUtils

@Service
class UserService : ServiceImpl<UserMapper, User>() {

    fun getByUsername(username: String): User? {
        if (!StringUtils.hasText(username)) return null

        val wrapper = KtQueryWrapper(User::class.java)
        wrapper.eq(User::username, username)

        val list = super.list(wrapper)
        if (list.isEmpty()) return null

        return list[0]
    }
}

package com.example.springsecuritydemo.service;

import com.baomidou.mybatisplus.extension.kotlin.KtQueryWrapper
import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl
import com.example.springsecuritydemo.mapper.UserRoleMapper
import com.example.springsecuritydemo.model.UserRole
import org.springframework.stereotype.Service

@Service
class UserRoleService : ServiceImpl<UserRoleMapper, UserRole>() {

    fun getByUserId(userId: Int?): List<UserRole> {
        val wrapper = KtQueryWrapper(UserRole::class.java)
        wrapper.eq(UserRole::userId, userId)
        return super.list(wrapper)
    }
}

package com.example.springsecuritydemo.mapper;

import com.baomidou.mybatisplus.core.mapper.BaseMapper
import com.example.springsecuritydemo.model.Auth
import org.apache.ibatis.annotations.Param
import org.apache.ibatis.annotations.Select

interface AuthMapper : BaseMapper<Auth> {

    @Select("select a.* from auth a, role_auth ra where ra.auth_id = a.id and ra.role_id in (#{roleIds})")
    fun getByRoleIds(@Param("roleIds") roleIds: String): List<Auth>?
}

package com.example.springsecuritydemo.service;

import com.baomidou.mybatisplus.extension.service.impl.ServiceImpl
import com.example.springsecuritydemo.mapper.AuthMapper
import com.example.springsecuritydemo.model.Auth
import org.springframework.stereotype.Service

@Service
class AuthService : ServiceImpl<AuthMapper, Auth>() {

    fun getByRoleIds(roleIds: String): List<Auth>? {
        return baseMapper.getByRoleIds(roleIds)
    }
}

package com.example.springsecuritydemo.security

import com.example.springsecuritydemo.service.AuthService
import com.example.springsecuritydemo.service.UserRoleService
import com.example.springsecuritydemo.service.UserService
import org.springframework.security.core.authority.SimpleGrantedAuthority
import org.springframework.security.core.userdetails.User
import org.springframework.security.core.userdetails.UserDetails
import org.springframework.security.core.userdetails.UserDetailsService
import org.springframework.security.core.userdetails.UsernameNotFoundException
import org.springframework.stereotype.Service

@Service
class MyUserDetailsService(
    private val userService: UserService,
    private val userRoleService: UserRoleService,
    private val authService: AuthService
) : UserDetailsService {

    /**
     * 实现接口，查询用户信息和权限信息。
     *
     * @param username 登录的用户名
     * @return 封装成 org.springframework.security.core.userdetails.UserDetails 对象返回
     */
    override fun loadUserByUsername(username: String?): UserDetails? {
        if (username == null) throw UsernameNotFoundException(username)

        val user = userService.getByUsername(username)
        if (user == null) throw UsernameNotFoundException(username)

        // 查询权限
        val userRoles = userRoleService.getByUserId(user.id)
        var roleIds: String = ""
        userRoles.forEach { roleIds = "${roleIds},${it.roleId}" }
        val auths = authService.getByRoleIds(roleIds.substring(1, roleIds.length))

        val authorities: MutableList<SimpleGrantedAuthority> = mutableListOf()
        if (auths!!.isNotEmpty()) {
            auths.forEach { authorities.addLast(SimpleGrantedAuthority(it.name)) }

            return User(username, user.password, authorities)
        }
        throw UsernameNotFoundException(username)
    }
}

@Configuration
@EnableWebSecurity
class SecurityConfig(private val myUserDetailsService: MyUserDetailsService) {}

/**
 * 构建登录认证管理器，将userDetailService与passwordEncoder联系起来
 */
@Bean
open fun authenticationManager(): AuthenticationManager {
    val authenticationProvider = DaoAuthenticationProvider()
    authenticationProvider.setUserDetailsService(myUserDetailsService)
    authenticationProvider.setPasswordEncoder(PasswordEncoderFactories.createDelegatingPasswordEncoder())

    return ProviderManager(authenticationProvider)
}