认证管理器会将真正的认证任务委派给认证提供者，您也可以自定义认证提供者，只需要实现接口 AuthenticationProvider，并以 AuthenticationProvider 接口为 id 注入到 IoC 容器即可。

定义

  1. export interface AuthenticationProvider {
  2.     readonly priority: number;
  3.     authenticate(): Promise<Authentication>;
  4.     support(): Promise<boolean>;
  5. }

support 方法往往是匹配当前请求的路由是否为我们指定的即可。示例如下：

  1. async support(): Promise<boolean> {
  2.       return !!await this.requestMatcher.match(this.options.loginUrl, this.options.loginMethod);
  3. }

默认实现

  1. @Component(AuthenticationProvider)
  2. export class AuthenticationProviderImpl implements AuthenticationProvider {
  4.     @Value('malagu.security')
  5.     protected readonly options: any;
  7.     @Autowired(PasswordEncoder)
  8.     protected readonly passwordEncoder: PasswordEncoder;
  10.     @Autowired(UserStore)
  11.     protected readonly userStore: UserStore;
  13.     @Autowired(UserChecker)
  14.     protected readonly userChecker: UserChecker;
  16.     @Autowired(RequestMatcher)
  17.     protected readonly requestMatcher: RequestMatcher;
  19.     priority = DEFAULT_AUTHENTICATION_PROVIDER__PRIORITY;
  21.     async authenticate(): Promise<Authentication> {
  22.         const username = this.doGetValue(this.options.usernameKey);
  23.         const password = this.doGetValue(this.options.passwordKey);
  24.         if (!password || !username) {
  25.             throw new BadCredentialsError('Bad credentials');
  26.         }
  27.         const user = await this.userStore.load(username);
  28.         await this.userChecker.check(user);
  29.         if (!await this.passwordEncoder.matches(password, user.password)) {
  30.             throw new BadCredentialsError('Bad credentials');
  31.         }
  33.         Context.getResponse().statusCode = 302;
  34.         Context.getResponse().setHeader('Location', this.options.loginSuccessUrl);
  36.         return {
  37.             principal: user,
  38.             credentials: '',
  39.             policies: user.policies,
  40.             authenticated: true
  41.         };
  43.     }
  45.     protected doGetValue(key: string): string {
  46.         const request = Context.getRequest();
  47.         if (request.body) {
  48.             return request.body[key];
  49.         } else {
  50.             return request.query[key];
  51.         }
  52.     }
  54.     async support(): Promise<boolean> {
  55.        return !!await this.requestMatcher.match(this.options.loginUrl, this.options.loginMethod);
  56.     }
  58. }