https://github.com/liumapp/spring-security-mybatis-demo

A simple demo for Spring Security with Mybatis .
https://github.com/liumapp/spring-security-mybatis-demo

mybatis spring-boot spring-security springboot

Last synced: 13 days ago
JSON representation

A simple demo for Spring Security with Mybatis .

• Host: GitHub
• URL: https://github.com/liumapp/spring-security-mybatis-demo
• Owner: liumapp
• License: apache-2.0
• Created: 2018-01-31T06:40:59.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2018-02-08T02:57:34.000Z (almost 7 years ago)
• Last Synced: 2023-03-04T07:12:16.864Z (over 1 year ago)
• Topics: mybatis, spring-boot, spring-security, springboot
• Language: Java
• Homepage:
• Size: 2 MB
• Stars: 49
• Watchers: 2
• Forks: 11
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# spring-security-mybatis-demo

A simple demo for Spring Security with Mybatis .

![er-map](https://github.com/liumapp/spring-security-mybatis-demo/blob/master/pic/er.jpg)

[中文文档](http://www.liumapp.com/articles/2018/02/03/1517659378683.html)

## how to use 

First off all , plz start the project . 

We view users are personal user and company user .

### personal user

 

We use phone number to verify personal user , and the auth path is auth/personal , the refresh path is refresh/personal .

#### auth 

personal user get their token by phone and password , like the pic below : 

 

![personal_login](https://github.com/liumapp/spring-security-mybatis-demo/blob/master/pic/personal_login.jpg)

after login success , personal user will get the role as 'PERSONAL'.

### use

 

First of all , you need set Authorization in request header , which's value is  : "Bearer " + ${token} . (plz pay attention to the blank space)

They can only do the things which under 'PERSONAL' role's permission . 

like :

![personal_coming](https://github.com/liumapp/spring-security-mybatis-demo/blob/master/pic/personal_coming.jpg)

### company user 

Here we get our big user . 

For Company User , we make three types Role : BOSS , MANAGER and EMPLOYEE . (Of cause , you can add any roles else if you like )

Company User can create sub-accounts which is no limited in numbers , and choice appropriate roles for thire sub-accounts . 

#### auth

Every types of company user's account get their token by : auth/company.

simply like : 

![get_boss_token](https://github.com/liumapp/spring-security-mybatis-demo/blob/master/pic/get_boss_token.jpg)

or a manager : 

![manager_login](https://github.com/liumapp/spring-security-mybatis-demo/blob/master/pic/manager_login.jpg)

#### use

First of all , you need set Authorization in request header , which's value is  : "Bearer " + ${token} . (plz pay attention to the blank space)

 

Now it is very simple to use .

  

* A boss role account can get the boss greeting by : 

  

![boss_coming](https://github.com/liumapp/spring-security-mybatis-demo/blob/master/pic/boss_coming.jpg)

  

* A manager role account can get the manager greeting by :

![mager_coming](https://github.com/liumapp/spring-security-mybatis-demo/blob/master/pic/manager_coming.jpg)

* But a manager can not get boss's greeting , because boss greeting path ask for boss's permission :

![mager_want_boss_greeting](https://github.com/liumapp/spring-security-mybatis-demo/blob/master/pic/manager_want_boss_greeting.jpg)