17、SpringBoot集成SpringSecurity实战：手机号登录-程序员江小北

前言

SpringSecurity默认不支持短信验证码登录，而现在手机验证码登录随处可见，下面对SpringSecurity进行集成手机短信登录。

实现

public class MobileAuthenticationToken extends AbstractAuthenticationToken {
   
   
     
    private static final long serialVersionUID = 540L;
    private final Object principal; // 认证前是手机号，最终保存用户信息

    public MobileAuthenticationToken(Object principal) {
   
   
     
        super(null);
        this.principal = principal;
        this.setAuthenticated(false);
    }

    public MobileAuthenticationToken(Object principal, Collection<? extends GrantedAuthority> authorities) {
   
   
     
        super(authorities);
        this.principal = principal;
        super.setAuthenticated(true);
    }

    public Object getCredentials() {
   
   
     
        return null;
    }

    public Object getPrincipal() {
   
   
     
        return this.principal;
    }

    public void setAuthenticated(boolean isAuthenticated) throws IllegalArgumentException {
   
   
     
        Assert.isTrue(!isAuthenticated, "Cannot set this token to trusted - use constructor which takes a " +
                "GrantedAuthority list instead");
        super.setAuthenticated(false);
    }

    public void eraseCredentials() {
   
   
     
        super.eraseCredentials();
    }
}

public class MobileAuthenticationFilter extends AbstractAuthenticationProcessingFilter {
   
   
     
    private String mobileParameter = "mobile";
    private