• spring security url动态授权

    spring security url动态授权

            

    官网：https://docs.spring.io/spring-security/reference/servlet/appendix/faq.html#appendix-faq-dynamic-url-metadata

                            

                                            

    引入jar包

                  

    pom.xml

    1. "1.0" encoding="UTF-8"?>
    2. <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    3.          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    4.     <modelVersion>4.0.0modelVersion>
    5.     <parent>
    6.         <groupId>org.springframework.bootgroupId>
    7.         <artifactId>spring-boot-starter-parentartifactId>
    8.         <version>2.7.3version>
    9.         <relativePath/> 
    10.     parent>
    11.     <groupId>com.examplegroupId>
    12.     <artifactId>demoartifactId>
    13.     <version>0.0.1-SNAPSHOTversion>
    14.     <name>demoname>
    15.     <description>Demo project for Spring Bootdescription>
    16.     <properties>
    17.         <java.version>1.8java.version>
    18.     properties>
    19.  
    20.     <dependencies>
    21.         <dependency>
    22.             <groupId>org.springframework.bootgroupId>
    23.             <artifactId>spring-boot-starter-securityartifactId>
    24.         dependency>
    25.  
    26.         ...
    27.     dependencies>
    28.  
    29.     ...
    30.  
    31. project>

           

                

                                            

    动态数据源

                  

    FilterInvocationSecurityMetadataSource：获取数据源

    1. public interface FilterInvocationSecurityMetadataSource extends SecurityMetadataSource {
    2. }

               

    SecurityMetadataSource

    1. public interface SecurityMetadataSource extends AopInfrastructureBean {
    2.     Collection getAttributes(Object object) throws IllegalArgumentException;
    3.                                 //获取object对应的权限
    4.  
    5.     Collection getAllConfigAttributes();
    6.  
    7.     boolean supports(Class clazz);
    8. }

                

    ConfigAttribute：权限属性

    1. public interface ConfigAttribute extends Serializable {
    2.     String getAttribute();
    3. }

                 

                 

     SecurityConfig：attrib可用来设置权限值（admin、user等）

    1. public class SecurityConfig implements ConfigAttribute {
    2.     private final String attrib;
    3.  
    4.     public SecurityConfig(String config) {
    5.         Assert.hasText(config, "You must provide a configuration attribute");
    6.         this.attrib = config;
    7.     }
    8.  
    9.     public boolean equals(Object obj) {
    10.         if (obj instanceof ConfigAttribute) {
    11.             ConfigAttribute attr = (ConfigAttribute)obj;
    12.             return this.attrib.equals(attr.getAttribute());
    13.         } else {
    14.             return false;
    15.         }
    16.     }
    17.  
    18.     public String getAttribute() {
    19.         return this.attrib;
    20.     }
    21.  
    22.     public int hashCode() {
    23.         return this.attrib.hashCode();
    24.     }
    25.  
    26.     public String toString() {
    27.         return this.attrib;
    28.     }
    29.  
    30.     public static List createListFromCommaDelimitedString(String access) {
    31.         return createList(StringUtils.commaDelimitedListToStringArray(access));
    32.     }
    33.  
    34.     public static List createList(String... attributeNames) {
    35.         Assert.notNull(attributeNames, "You must supply an array of attribute names");
    36.         List attributes = new ArrayList(attributeNames.length);
    37.         String[] var2 = attributeNames;
    38.         int var3 = attributeNames.length;
    39.  
    40.         for(int var4 = 0; var4 < var3; ++var4) {
    41.             String attribute = var2[var4];
    42.             attributes.add(new SecurityConfig(attribute.trim()));
    43.         }
    44.  
    45.         return attributes;
    46.     }
    47. }

                    

                         

                                            

    权限拦截器

                

    AbstractSecurityInterceptor

    1. public abstract class AbstractSecurityInterceptor implements InitializingBean, ApplicationEventPublisherAware, MessageSourceAware {
    2.     protected final Log logger = LogFactory.getLog(this.getClass());
    3.     protected MessageSourceAccessor messages = SpringSecurityMessageSource.getAccessor();
    4.     private ApplicationEventPublisher eventPublisher;
    5.     private AccessDecisionManager accessDecisionManager;
    6.     private AfterInvocationManager afterInvocationManager;
    7.     private AuthenticationManager authenticationManager = new AbstractSecurityInterceptor.NoOpAuthenticationManager();
    8.     private RunAsManager runAsManager = new NullRunAsManager();
    9.     private boolean alwaysReauthenticate = false;
    10.     private boolean rejectPublicInvocations = false;
    11.     private boolean validateConfigAttributes = true;
    12.     private boolean publishAuthorizationSuccess = false;
    13.  
    14.     public AbstractSecurityInterceptor() {
    15.     }
    16.  
    17.  
    18.     public void afterPropertiesSet() {
    19.     public void setRunAsManager(RunAsManager runAsManager) {
    20.     public void setMessageSource(MessageSource messageSource) {
    21.     public void setAlwaysReauthenticate(boolean alwaysReauthenticate) {
    22.     public void setAuthenticationManager(AuthenticationManager newManager) {
    23.     public void setRejectPublicInvocations(boolean rejectPublicInvocations) {
    24.     public void setValidateConfigAttributes(boolean validateConfigAttributes) {
    25.     public void setPublishAuthorizationSuccess(boolean publishAuthorizationSuccess) {
    26.     public void setAccessDecisionManager(AccessDecisionManager accessDecisionManager) {
    27.     public void setAfterInvocationManager(AfterInvocationManager afterInvocationManager) {
    28.     public void setApplicationEventPublisher(ApplicationEventPublisher applicationEventPublisher) {
    29.  
    30.  
    31.     public boolean isAlwaysReauthenticate() {
    32.     public boolean isRejectPublicInvocations() {
    33.     public boolean isValidateConfigAttributes() {
    34.  
    35.     public AccessDecisionManager getAccessDecisionManager() {
    36.     public AfterInvocationManager getAfterInvocationManager() {
    37.     public AuthenticationManager getAuthenticationManager() {
    38.     public RunAsManager getRunAsManager() {
    39.  
    40.  
    41.     public abstract Class getSecureObjectClass();
    42.     public abstract SecurityMetadataSource obtainSecurityMetadataSource();
    43.  
    44.     protected void finallyInvocation(InterceptorStatusToken token) {
    45.     protected InterceptorStatusToken beforeInvocation(Object object) {
    46.     protected Object afterInvocation(InterceptorStatusToken token, Object returnedObject) {
    47.  
    48.  
    49.     private Authentication authenticateIfRequired() {
    50.     private void publishEvent(ApplicationEvent event) {
    51.     private void validateAttributeDefs(Collection attributeDefs) {
    52.     private void attemptAuthorization(Object object, Collection attributes, Authentication authenticated) {
    53.     private void credentialsNotFound(String reason, Object secureObject, Collection configAttribs) {
    54.  
    55.  
    56. *********
    57. 静态内部类：NoOpAuthenticationManager
    58.  
    59.     private static class NoOpAuthenticationManager implements AuthenticationManager {
    60.         private NoOpAuthenticationManager() {
    61.         }
    62.  
    63.         public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    64.             throw new AuthenticationServiceException("Cannot authenticate " + authentication);
    65.         }
    66.     }
    67. }

                 

               

    FilterSecurityInterceptor

    1. public class FilterSecurityInterceptor extends AbstractSecurityInterceptor implements Filter {
    2.     private static final String FILTER_APPLIED = "__spring_security_filterSecurityInterceptor_filterApplied";
    3.     private FilterInvocationSecurityMetadataSource securityMetadataSource;
    4.     private boolean observeOncePerRequest = true;
    5.  
    6.     public FilterSecurityInterceptor() {
    7.     }
    8.  
    9.     public void init(FilterConfig arg0) {
    10.     }
    11.  
    12.     public void destroy() {
    13.     }
    14.  
    15.     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
    16.         this.invoke(new FilterInvocation(request, response, chain));
    17.     }
    18.  
    19.     public FilterInvocationSecurityMetadataSource getSecurityMetadataSource() {
    20.         return this.securityMetadataSource;
    21.     }
    22.  
    23.     public SecurityMetadataSource obtainSecurityMetadataSource() {
    24.         return this.securityMetadataSource;
    25.     }
    26.  
    27.     public void setSecurityMetadataSource(FilterInvocationSecurityMetadataSource newSource) {
    28.         this.securityMetadataSource = newSource;
    29.     }
    30.  
    31.     public Class getSecureObjectClass() {
    32.         return FilterInvocation.class;
    33.     }
    34.  
    35.     public void invoke(FilterInvocation filterInvocation) throws IOException, ServletException {
    36.         if (this.isApplied(filterInvocation) && this.observeOncePerRequest) {
    37.             filterInvocation.getChain().doFilter(filterInvocation.getRequest(), filterInvocation.getResponse());
    38.         } else {
    39.             if (filterInvocation.getRequest() != null && this.observeOncePerRequest) {
    40.                 filterInvocation.getRequest().setAttribute("__spring_security_filterSecurityInterceptor_filterApplied", Boolean.TRUE);
    41.             }
    42.  
    43.             InterceptorStatusToken token = super.beforeInvocation(filterInvocation);
    44.  
    45.             try {
    46.                 filterInvocation.getChain().doFilter(filterInvocation.getRequest(), filterInvocation.getResponse());
    47.             } finally {
    48.                 super.finallyInvocation(token);
    49.             }
    50.  
    51.             super.afterInvocation(token, (Object)null);
    52.         }
    53.     }
    54.  
    55.     private boolean isApplied(FilterInvocation filterInvocation) {
    56.         return filterInvocation.getRequest() != null && filterInvocation.getRequest().getAttribute("__spring_security_filterSecurityInterceptor_filterApplied") != null;
    57.     }
    58.  
    59.     public boolean isObserveOncePerRequest() {
    60.         return this.observeOncePerRequest;
    61.     }
    62.  
    63.     public void setObserveOncePerRequest(boolean observeOncePerRequest) {
    64.         this.observeOncePerRequest = observeOncePerRequest;
    65.     }
    66. }

               

                              

                                            

    认证管理器

                

    AccessDecisionManager

    1. public interface AccessDecisionManager {
    2.     void decide(Authentication authentication, Object object, Collection configAttributes) throws AccessDeniedException, InsufficientAuthenticationException;
    3.  
    4.     boolean supports(ConfigAttribute attribute);
    5.  
    6.     boolean supports(Class clazz);
    7. }

                 

    AbstractAccessDecisionManager

    1. public abstract class AbstractAccessDecisionManager implements AccessDecisionManager, InitializingBean, MessageSourceAware {
    2.     protected final Log logger = LogFactory.getLog(this.getClass());
    3.     private List> decisionVoters;
    4.     protected MessageSourceAccessor messages = SpringSecurityMessageSource.getAccessor();
    5.     private boolean allowIfAllAbstainDecisions = false;
    6.  
    7.  
    8.     public boolean supports(ConfigAttribute attribute) {
    9.         Iterator var2 = this.decisionVoters.iterator();
    10.  
    11.         AccessDecisionVoter voter;
    12.         do {
    13.             if (!var2.hasNext()) {
    14.                 return false;
    15.             }
    16.  
    17.             voter = (AccessDecisionVoter)var2.next();
    18.         } while(!voter.supports(attribute));
    19.  
    20.         return true;
    21.     }
    22.  
    23.     public boolean supports(Class clazz) {
    24.         Iterator var2 = this.decisionVoters.iterator();
    25.  
    26.         AccessDecisionVoter voter;
    27.         do {
    28.             if (!var2.hasNext()) {
    29.                 return true;
    30.             }
    31.  
    32.             voter = (AccessDecisionVoter)var2.next();
    33.         } while(voter.supports(clazz));
    34.  
    35.         return false;
    36.     }
    37.  
    38.  
    39.     public void setMessageSource(MessageSource messageSource) {
    40.     public void setAllowIfAllAbstainDecisions(boolean allowIfAllAbstainDecisions) {
    41.  
    42.     public List> getDecisionVoters() {
    43.     public boolean isAllowIfAllAbstainDecisions() {
    44.  
    45.     public String toString() {
    46.     public void afterPropertiesSet() {
    47.  
    48.     protected final void checkAllowIfAllAbstainDecisions() {
    49.     protected AbstractAccessDecisionManager(List> decisionVoters) {

                 

                    

    AffirmativedBased

    1. public class AffirmativeBased extends AbstractAccessDecisionManager {
    2.     public AffirmativeBased(List> decisionVoters) {
    3.         super(decisionVoters);
    4.     }
    5.  
    6.     public void decide(Authentication authentication, Object object, Collection configAttributes) throws AccessDeniedException {
    7.         int deny = 0;
    8.         Iterator var5 = this.getDecisionVoters().iterator();
    9.  
    10.         while(var5.hasNext()) {
    11.             AccessDecisionVoter voter = (AccessDecisionVoter)var5.next();
    12.             int result = voter.vote(authentication, object, configAttributes);
    13.             switch(result) {
    14.             case -1:
    15.                 ++deny;
    16.                 break;
    17.             case 1:
    18.                 return;
    19.             }
    20.         }
    21.  
    22.         if (deny > 0) {
    23.             throw new AccessDeniedException(this.messages.getMessage("AbstractAccessDecisionManager.accessDenied", "Access is denied"));
    24.         } else {
    25.             this.checkAllowIfAllAbstainDecisions();
    26.         }
    27.     }
    28. }

                 

    AccessDecisionVoter

    1. public interface AccessDecisionVoter {
    2.     int ACCESS_GRANTED = 1;
    3.     int ACCESS_ABSTAIN = 0;
    4.     int ACCESS_DENIED = -1;
    5.  
    6.     boolean supports(ConfigAttribute attribute);
    7.  
    8.     boolean supports(Class clazz);
    9.  
    10.     int vote(Authentication authentication, S object, Collection attributes);
    11. }

                 

              

     RoleVoter：根据权限判断是否让请求通过

    1. public class RoleVoter implements AccessDecisionVoter {
    2.     private String rolePrefix = "ROLE_";
    3.  
    4.     public RoleVoter() {
    5.     }
    6.  
    7.     public String getRolePrefix() {
    8.         return this.rolePrefix;
    9.     }
    10.  
    11.     public void setRolePrefix(String rolePrefix) {
    12.         this.rolePrefix = rolePrefix;
    13.     }
    14.  
    15.     public boolean supports(ConfigAttribute attribute) {
    16.         return attribute.getAttribute() != null && attribute.getAttribute().startsWith(this.getRolePrefix());
    17.     }
    18.  
    19.     public boolean supports(Class clazz) {
    20.         return true;
    21.     }
    22.  
    23.     public int vote(Authentication authentication, Object object, Collection attributes) {
    24.         if (authentication == null) {
    25.             return -1;
    26.         } else {
    27.             int result = 0;
    28.             Collectionextends GrantedAuthority> authorities = this.extractAuthorities(authentication);
    29.             Iterator var6 = attributes.iterator();
    30.  
    31.             while(true) {
    32.                 ConfigAttribute attribute;
    33.                 do {
    34.                     if (!var6.hasNext()) {
    35.                         return result;
    36.                     }
    37.  
    38.                     attribute = (ConfigAttribute)var6.next();
    39.                 } while(!this.supports(attribute));
    40.  
    41.                 result = -1;
    42.                 Iterator var8 = authorities.iterator();
    43.  
    44.                 while(var8.hasNext()) {
    45.                     GrantedAuthority authority = (GrantedAuthority)var8.next();
    46.                     if (attribute.getAttribute().equals(authority.getAuthority())) {
    47.                         return 1;
    48.                     }
    49.                 }
    50.             }
    51.         }
    52.     }
    53.  
    54.     Collectionextends GrantedAuthority> extractAuthorities(Authentication authentication) {
    55.         return authentication.getAuthorities();
    56.     }
    57. }
      58.  

               
       

                   
       

                                               
       

      使用示例
       

                  
       

                                   
       

               
       

      AuthorityDto
       

      1. @Data
      2. public class AuthorityDto {
      3.  
      4.     private String path;
      5.     private List authorities;
      6. }
       

                
       

      SecurityDataSourceUtil
       

      1. public class SecurityDataSourceUtil {
      2.  
      3.     public static Map> requestAuthoritiesMap = new HashMap<>();
      4.  
      5.     public static void setAuthorities(String path, Collection configAttributes){
      6.         requestAuthoritiesMap.put(path, configAttributes);
      7.     }
      8.  
      9.     public static Collection getAuthorities(String path){
      10.         return requestAuthoritiesMap.get(path);
      11.     }
      12. }
       

                 
       

      CustomFilterSecurityMetadataSource
       

      1. @Component
      2. public class CustomFilterSecurityMetadataSource implements FilterInvocationSecurityMetadataSource {
      3.  
      4.     @Override
      5.     public boolean supports(Class clazz) {
      6.         return FilterInvocation.class.isAssignableFrom(clazz);
      7.     }
      8.  
      9.     @Override
      10.     public Collection getAllConfigAttributes() {
      11.         Set configAttributes = new HashSet<>();
      12.         for (Collection item : SecurityDataSourceUtil.requestAuthoritiesMap.values()){
      13.             configAttributes.addAll(item);
      14.         }
      15.  
      16.         return configAttributes;
      17.     }
      18.  
      19.     @Override
      20.     public Collection getAttributes(Object object) throws IllegalArgumentException {
      21.         HttpServletRequest request = ((FilterInvocation)object).getRequest();
      22.  
      23.         for (Map.Entry> entry: SecurityDataSourceUtil.requestAuthoritiesMap.entrySet()){
      24.             if (new AntPathRequestMatcher(entry.getKey()).matches(request)) {
      25.                 return entry.getValue();
      26.             }
      27.         }
      28.  
      29.         return null;
      30.     }
      31. }
       

               
       

      CustomUrlInterceptor
       

      1. @Data
      2. @Component
      3. @EqualsAndHashCode(callSuper = true)
      4. public class CustomUrlInterceptor extends AbstractSecurityInterceptor implements Filter, InitializingBean {
      5.  
      6.     private static final String FILTER_APPLIED = "__spring_security_custom_filterSecurityInterceptor_filterApplied";
      7.     private boolean observeOncePerRequest = true;
      8.  
      9.     @Resource
      10.     private FilterInvocationSecurityMetadataSource securityMetadataSource;
      11.  
      12.  
      13.     public CustomUrlInterceptor() {
      14.     }
      15.  
      16.     @Override
      17.     public void afterPropertiesSet() {
      18.         List> accessDecisionVoters = new ArrayList<>();
      19.         accessDecisionVoters.add(new RoleVoter());
      20.  
      21.         AccessDecisionManager accessDecisionManager = new AffirmativeBased(accessDecisionVoters);
      22.         this.setAccessDecisionManager(accessDecisionManager);
      23.     }
      24.  
      25.     public void init(FilterConfig arg0) {
      26.     }
      27.  
      28.     public void destroy() {
      29.     }
      30.  
      31.     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
      32.         this.invoke(new FilterInvocation(request, response, chain));
      33.     }
      34.  
      35.     public SecurityMetadataSource obtainSecurityMetadataSource() {
      36.         return this.securityMetadataSource;
      37.     }
      38.  
      39.     public Class getSecureObjectClass() {
      40.         return FilterInvocation.class;
      41.     }
      42.  
      43.     public void invoke(FilterInvocation filterInvocation) throws IOException, ServletException {
      44.         if (this.isApplied(filterInvocation) && this.observeOncePerRequest) {
      45.             filterInvocation.getChain().doFilter(filterInvocation.getRequest(), filterInvocation.getResponse());
      46.         } else {
      47.             if (filterInvocation.getRequest() != null && this.observeOncePerRequest) {
      48.                 filterInvocation.getRequest().setAttribute(FILTER_APPLIED, Boolean.TRUE);
      49.             }
      50.  
      51.             InterceptorStatusToken token = super.beforeInvocation(filterInvocation);
      52.  
      53.             try {
      54.                 filterInvocation.getChain().doFilter(filterInvocation.getRequest(), filterInvocation.getResponse());
      55.             } finally {
      56.                 super.finallyInvocation(token);
      57.             }
      58.  
      59.             super.afterInvocation(token, null);
      60.         }
      61.     }
      62.  
      63.     private boolean isApplied(FilterInvocation filterInvocation) {
      64.         return filterInvocation.getRequest() != null && filterInvocation.getRequest().getAttribute(FILTER_APPLIED) != null;
      65.     }
      66.  
      67.     public boolean isObserveOncePerRequest() {
      68.         return this.observeOncePerRequest;
      69.     }
      70.  
      71.     public void setObserveOncePerRequest(boolean observeOncePerRequest) {
      72.         this.observeOncePerRequest = observeOncePerRequest;
      73.     }
      74. }
       

                   
       

      WebSecurity
       

      1. @Configuration
      2. public class WebSecurity {
      3.  
      4.     @Bean
      5.     public PasswordEncoder initPasswordEncoder(){
      6.         return new Pbkdf2PasswordEncoder();
      7.     }
      8. }
       

                 
       

      WebSecurityConfig
       

      1. @Configuration
      2. @EnableWebSecurity
      3. public class WebSecurityConfig {
      4.  
      5.     @Resource
      6.     private PasswordEncoder passwordEncoder;
      7.  
      8.     @Resource
      9.     private CustomUrlInterceptor customUrlInterceptor;
      10.  
      11.     @Bean
      12.     public SecurityFilterChain initSecurityFilterChain(HttpSecurity http) throws Exception{
      13.         http.addFilterAfter(customUrlInterceptor, FilterSecurityInterceptor.class);
      14.         http.csrf().disable();
      15.  
      16.         return http.formLogin().and().authorizeRequests()
      17.                 .antMatchers("/authority").permitAll()
      18.                 .antMatchers("/hello").hasRole("admin")
      19.                 .anyRequest().authenticated()
      20.                 .and().build();
      21.     }
      22.  
      23.     @Bean
      24.     public UserDetailsService initUserDetailsService(){
      25.         UserDetails userDetails = User.withUsername("gtlx").password(passwordEncoder.encode("123456")).roles("admin").build();
      26.  
      27.         return new InMemoryUserDetailsManager(userDetails);
      28.     }
      29. }
       

                 
       

      HelloController
       

      1. @RestController
      2. public class HelloController {
      3.  
      4.     @RequestMapping("/hello")
      5.     public String hello(){
      6.         return "hello";
      7.     }
      8.  
      9.     @RequestMapping("/hello2")
      10.     public String hello2(){
      11.         return "hello2";
      12.     }
      13. }
       

                  
       

      AuthorityController
       

      1. @RestController
      2. public class AuthorityController {
      3.  
      4.     @RequestMapping("/authority")
      5.     public String authority(@RequestBody AuthorityDto authorityDto){
      6.         List configAttributes = new ArrayList<>();
      7.         for (String s: authorityDto.getAuthorities()){
      8.             SecurityConfig securityConfig = new SecurityConfig("ROLE_"+s);
      9.             configAttributes.add(securityConfig);
      10.         }
      11.         SecurityDataSourceUtil.setAuthorities(authorityDto.getPath(), configAttributes);
      12.  
      13.         return "success";
      14.     }
      15. }
       

                
       

                        
       

                                               
       

      使用测试
       

                  
       

      localhost:8080/hello，输入密码
       

                   
       

                   
       

                  
       

      localhost:8080/hello2
       

                   
       

                  
       

      localhost:8080/authority，路径/hello2添加权限认证
       

                   
       

                  
       

      localhost:8080/hello2，当前用户没有user权限，禁止访问
       

                   
       

                  
       

      localhost:8080/authority，修改路径权限为admin
       

                   
       

                  
       

      localhost:8080/hello2，当前用户有admin权限，可正常访问
       

                   
       

                       
       

                                    
      
                
                    
                

                
    58. 

                    相关阅读:
      
                    
基于WebRTC构建的程序因虚拟内存不足导致闪退问题的排查以及解决办法的探究                            
      
长列表优化：用 React 实现虚拟列表                            
      
tensorflow学习率指数衰减ExponentialDecay的参数介绍与使用方法                            
      
细说 PDF 里的“秘密”——如何标记密文                            
      
心律守护 基于机器学习的心脏病预测                            
      
蔚来杯_2022牛客暑期多校训练营（加赛） E.Everyone is bot                            
      
jQuery常用API--样式操作                            
      
创建线程池执行java代码逻辑                            
      
记录一次 添加脚本的记录+改错记录                            
      
Java中的数组、Set、List、Map类型的互相转换总结                            
      
                          
                
      59. 
                
    59. 
                    原文地址：https://blog.csdn.net/weixin_43931625/article/details/126917739
                
      60.