{"id":4307,"date":"2024-03-21T22:26:35","date_gmt":"2024-03-21T14:26:35","guid":{"rendered":"https:\/\/xinchewhd.com.cn\/index.php\/spring-boot\/spring-boot%e6%95%b4%e5%90%88spring-security\/"},"modified":"2024-03-21T22:26:35","modified_gmt":"2024-03-21T14:26:35","slug":"spring-boot%e6%95%b4%e5%90%88spring-security","status":"publish","type":"post","link":"https:\/\/xinchewhd.com.cn\/index.php\/spring-boot\/spring-boot%e6%95%b4%e5%90%88spring-security\/","title":{"rendered":"Spring Boot\u6574\u5408Spring Security"},"content":{"rendered":"
\n

\u5982\u679c\u6587\u7ae0\u4e2d\u4ee3\u7801\u4e0d\u4fbf\u4e8e\u9605\u8bfb\uff0c\u8bf7\u4f7f\u7528\u7535\u8111\u67e5\u770b\u6216\u70b9\u51fb\u9605\u8bfb\u539f\u6587\u3002<\/span><\/h1>\n

Spring Security\u662f\u9488\u5bf9Spring\u9879\u76ee\u7684\u5b89\u5168\u6846\u67b6\uff0c\u4e5f\u662fSpring Boot\u5e95\u5c42\u5b89\u5168\u6a21\u5757\u7684\u9ed8\u8ba4\u6280\u672f\u9009\u578b\uff0c\u4ec5\u9700\u5f15\u5165<\/span>spring-boot-starter-security<\/strong><\/span>\u6a21\u5757\uff0c\u8fdb\u884c\u5c11\u91cf\u914d\u7f6e\uff0c\u5373\u53ef\u5b9e\u73b0\u5f3a\u5927\u7684Web\u5b89\u5168\u63a7\u5236\u3002<\/span><\/p>\n

Spring Security\u7684\u4e24\u4e2a\u4e3b\u8981\u76ee\u6807\u662f<\/span>\u8ba4\u8bc1<\/strong><\/span>\u548c<\/span>\u6388\u6743<\/strong><\/span>\uff08\u8bbf\u95ee\u63a7\u5236\uff09<\/span><\/p>\n

\u5b98\u65b9\u6587\u6863\uff1a<\/span>https:\/\/docs.spring.io\/spring-security\/site\/docs\/5.2.0.RELEASE\/reference\/htmlsingle\/<\/span><\/span><\/p>\n

\n

0 \u5f00\u53d1\u73af\u5883<\/span><\/h1>\n
    \n
  • \n

    JDK\uff1a1.8<\/span><\/p>\n<\/li>\n

  • \n

    Spring Boot\uff1a2.7.18<\/span><\/p>\n<\/li>\n<\/ul>\n

    \n

    Spring Boot \u7248\u672c\u5347\u7ea7\u4e3a2.7.18\uff0c\u4e13\u680f\u4e2d\u5176\u4ed6Spring Boot\u76f8\u5173\u73af\u5883\u540c\u6b65\u5347\u7ea7<\/span><\/p>\n<\/blockquote>\n

    1 \u5f15\u5165\u4f9d\u8d56<\/span><\/h1>\n
    <<\/span>dependency<\/span>><\/span><\/span>  <<\/span>groupId<\/span>><\/span>org.springframework.boot<\/<\/span>groupId<\/span>><\/span><\/span>  <<\/span>artifactId<\/span>><\/span>spring-boot-starter-security<\/<\/span>artifactId<\/span>><\/span><\/span><\/<\/span>dependency<\/span>><\/span><\/span><\/pre>\n
    2 \u6d4b\u8bd5<\/span><\/h1>\n
    2.1 \u65b0\u5efaController<\/span><\/h2>\n
    @RestController<\/span><\/span>@RequestMapping<\/span>(\"user\"<\/span>)<\/span>public<\/span> class<\/span> UserController<\/span> {<\/span><\/span><\/span>  @GetMapping<\/span>(value<\/span> =<\/span> \"query\"<\/span>)<\/span>  public<\/span> String<\/span> query<\/span>() {<\/span>    return<\/span> \"\u7528\u6237\u67e5\u8be2\u6210\u529f\"<\/span>;<\/span>   }<\/span>}<\/span><\/pre>\n
    2.2 \u6d4b\u8bd5<\/span><\/h2>\n
    \u542f\u52a8\u670d\u52a1\uff0c\u6d4f\u89c8\u5668\u8bbf\u95ee 127.0.0.1:8090\/user\/query\uff0c\u9875\u9762\u81ea\u52a8\u8df3\u8f6c\u5230\u6388\u6743\u767b\u5f55\u9875<\/span><\/p>\n
    \u9ed8\u8ba4\u7528\u6237\u540d\u4e3auser\uff0c\u63a7\u5236\u53f0\u4e0a\u4f1a\u6253\u5370\u9ed8\u8ba4\u5bc6\u7801\uff0c\u9ed8\u8ba4\u5bc6\u7801\u6bcf\u6b21\u542f\u52a8\u670d\u52a1\u90fd\u4f1a\u5237\u65b0<\/span><\/p>\n
    \u767b\u5f55\u6210\u529f\u540e\uff0c\u5c31\u53ef\u4ee5\u6b63\u5e38\u8bbf\u95ee\u4e86<\/span><\/p>\n
    3 \u81ea\u5b9a\u4e49\u5bc6\u7801<\/span><\/h1>\n
    \u8be5\u90e8\u5206\u4f1a\u4f7f\u7528\u5230Spring Security\u7684\u51e0\u4e2a\u5173\u952e\u7c7b\uff0c\u5982\u4e0b\uff1a<\/span><\/p>\n
      \n
    • \n
      WebSecurityConfigurerAdapter \u81ea\u5b9a\u4e49Security\u7b56\u7565<\/span><\/p>\n<\/li>\n
    • \n
      AuthenticationManagerBuilder \u81ea\u5b9a\u4e49\u8ba4\u8bc1\u7b56\u7565<\/span><\/p>\n<\/li>\n
    • \n
      @EnableWebSecurity \u5f00\u542fWebSecurity\u6a21\u5f0f<\/span><\/p>\n<\/li>\n<\/ul>\n
      3.1 \u901a\u8fc7application.yml \u914d\u7f6e<\/span><\/h2>\n
      spring<\/span>:<\/span><\/span>  security<\/span>:<\/span><\/span>   user<\/span>:<\/span><\/span>    name<\/span>: <\/span>admin<\/span>    password<\/span>: <\/span>123456<\/span><\/span><\/pre>\n
      3.2 \u81ea\u5b9a\u4e49\u914d\u7f6e\u7c7b\u914d\u7f6e<\/span><\/h2>\n
      @EnableWebSecurity<\/span><\/span>public<\/span> class<\/span> SecurityConfig<\/span> extends<\/span> WebSecurityConfigurerAdapter<\/span> {<\/span><\/span><\/span>  @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(AuthenticationManagerBuilder<\/span> auth<\/span>) throws<\/span> Exception<\/span> {<\/span>    \/\/\u5bc6\u7801\u52a0\u5bc6<\/span><\/span>    BCryptPasswordEncoder<\/span> passwordEncoder<\/span> =<\/span> new<\/span> BCryptPasswordEncoder<\/span>();<\/span>    \/\/\u914d\u7f6e\u7528\u6237\u540d\u3001\u5bc6\u7801\uff0c\u8be5\u914d\u7f6e\u65b9\u5f0f\u4e0b\uff0c\u7528\u6237\u540d\u548c\u5bc6\u7801\u4fdd\u5b58\u5728\u5185\u5b58\u4e2d<\/span><\/span>    auth<\/span>.inMemoryAuthentication<\/span>()<\/span>        \/\/\u5bc6\u7801\u52a0\u5bc6\u65b9\u5f0f<\/span><\/span>         .passwordEncoder<\/span>(new<\/span> BCryptPasswordEncoder<\/span>())<\/span>         .withUser<\/span>(\"admin\"<\/span>).password<\/span>(passwordEncoder<\/span>.encode<\/span>(\"123456\"<\/span>)).roles<\/span>(\"admin\"<\/span>);<\/span>   }<\/span>}<\/span><\/pre>\n
      3.3 \u81ea\u5b9a\u4e49\u5b9e\u73b0\u7c7b\u914d\u7f6e<\/span><\/h2>\n
      3.3.1 \u7f16\u5199UserDetailsService\u5b9e\u73b0\u7c7b<\/span><\/h3>\n
      \u8fd9\u91cc\u6211\u4eec\u5c31\u76f4\u63a5\u56fa\u5b9a\u5199\u6b7b\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u5b9e\u9645\u751f\u4ea7\u4e2d\u53ef\u4ee5\u4ece\u6570\u636e\u5e93\u4e2d\u83b7\u53d6<\/span><\/p>\n
      @Service<\/span><\/span>public<\/span> class<\/span> UserDetailsServiceImpl<\/span> implements<\/span> UserDetailsService<\/span> {<\/span><\/span><\/span>  @Override<\/span><\/span>  public<\/span> UserDetails<\/span> loadUserByUsername<\/span>(String<\/span> s<\/span>) throws<\/span> UsernameNotFoundException<\/span> {<\/span>    \/\/\u8bbe\u7f6e\u89d2\u8272\uff0c\u89d2\u8272\u7684\u6982\u5ff5\u540e\u7eed\u4ecb\u7ecd<\/span><\/span>    List<\/span><<\/span>GrantedAuthority<\/span>><\/span> roles<\/span> =<\/span> AuthorityUtils<\/span>.commaSeparatedStringToAuthorityList<\/span>(\"admin\"<\/span>);<\/span><\/span><\/span>    return<\/span> new<\/span> User<\/span>(\"admin\"<\/span>, new<\/span> BCryptPasswordEncoder<\/span>().encode<\/span>(\"123456\"<\/span>), roles<\/span>);<\/span>   }<\/span>}<\/span><\/pre>\n
      3.3.2 \u7f16\u5199\u914d\u7f6e\u7c7b<\/span><\/h3>\n
      @EnableWebSecurity<\/span><\/span>public<\/span> class<\/span> SecurityConfig<\/span> extends<\/span> WebSecurityConfigurerAdapter<\/span> {<\/span><\/span><\/span>  @Autowired<\/span><\/span>  private<\/span> UserDetailsServiceImpl<\/span> userDetailsService<\/span>;<\/span><\/span><\/span>  @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(AuthenticationManagerBuilder<\/span> auth<\/span>) throws<\/span> Exception<\/span> {<\/span>    \/\/\u4f7f\u7528UserDetailsServiceImpl \u67e5\u8be2\u7528\u6237\u540d\u3001\u5bc6\u7801<\/span><\/span>    auth<\/span>.userDetailsService<\/span>(userDetailsService<\/span>).passwordEncoder<\/span>(new<\/span> BCryptPasswordEncoder<\/span>());<\/span>   }<\/span>}<\/span><\/pre>\n
      \u5206\u522b\u6d4b\u8bd5\uff0c\u90fd\u901a\u8fc7<\/span><\/p>\n
      4 \u7528\u6237\u8ba4\u8bc1\u548c\u6388\u6743\/\u57fa\u4e8e\u89d2\u8272\u548c\u6743\u9650\u7684\u8bbf\u95ee\u63a7\u5236<\/span><\/h1>\n
      \u5b9e\u9645\u751f\u4ea7\u4e2d\uff0c\u9700\u8981\u6839\u636e\u7528\u6237\u89d2\u8272\u7684\u6743\u9650\u6765\u63a7\u5236\u53ef\u8bbf\u95ee\u7684\u9875\u9762\u3001\u53ef\u6267\u884c\u7684\u64cd\u4f5c\u7b49<\/span><\/p>\n
      4.1 \u65b0\u5efa4\u4e2a\u9875\u9762<\/span><\/h2>\n
      level-1.html<\/strong><\/span><\/p>\n
      <!DOCTYPE html><\/span><\/span><<\/span>html<\/span> lang<\/span>=\"en\"<\/span>><\/span><\/span><<\/span>head<\/span>><\/span><\/span>  <<\/span>meta<\/span> charset<\/span>=\"UTF-8\"<\/span>><\/span><\/span>  <<\/span>title<\/span>><\/span>Title<\/<\/span>title<\/span>><\/span><\/span><\/<\/span>head<\/span>><\/span><\/span><<\/span>body<\/span>><\/span><\/span><<\/span>h1<\/span> style<\/span>=\"color: red\"<\/span>><\/span>\u8fd9\u662f\u7528\u6237\u7b49\u7ea71\u53ef\u8bbf\u95ee\u7684\u9875\u9762<\/<\/span>h1<\/span>><\/span><\/span><\/<\/span>body<\/span>><\/span><\/span><\/<\/span>html<\/span>><\/span><\/span><\/pre>\n
      level-2.html<\/strong><\/span><\/p>\n
      <!DOCTYPE html><\/span><\/span><<\/span>html<\/span> lang<\/span>=\"en\"<\/span>><\/span><\/span><<\/span>head<\/span>><\/span><\/span>  <<\/span>meta<\/span> charset<\/span>=\"UTF-8\"<\/span>><\/span><\/span>  <<\/span>title<\/span>><\/span>Title<\/<\/span>title<\/span>><\/span><\/span><\/<\/span>head<\/span>><\/span><\/span><<\/span>body<\/span>><\/span><\/span><<\/span>h1<\/span> style<\/span>=\"color: green\"<\/span>><\/span>\u8fd9\u662f\u7528\u6237\u7b49\u7ea72\u53ef\u8bbf\u95ee\u7684\u9875\u9762<\/<\/span>h1<\/span>><\/span><\/span><\/<\/span>body<\/span>><\/span><\/span><\/<\/span>html<\/span>><\/span><\/span><\/pre>\n
      level-3.html<\/strong><\/span><\/p>\n
      <!DOCTYPE html><\/span><\/span><<\/span>html<\/span> lang<\/span>=\"en\"<\/span>><\/span><\/span><<\/span>head<\/span>><\/span><\/span>  <<\/span>meta<\/span> charset<\/span>=\"UTF-8\"<\/span>><\/span><\/span>  <<\/span>title<\/span>><\/span>Title<\/<\/span>title<\/span>><\/span><\/span><\/<\/span>head<\/span>><\/span><\/span><<\/span>body<\/span>><\/span><\/span><<\/span>h1<\/span> style<\/span>=\"color: blue\"<\/span>><\/span>\u8fd9\u662f\u7528\u6237\u7b49\u7ea73\u53ef\u8bbf\u95ee\u7684\u9875\u9762<\/<\/span>h1<\/span>><\/span><\/span><\/<\/span>body<\/span>><\/span><\/span><\/<\/span>html<\/span>><\/span><\/span><\/pre>\n
      index.html<\/strong><\/span><\/p>\n
      <!DOCTYPE html><\/span><\/span><<\/span>html<\/span> lang<\/span>=\"en\"<\/span>><\/span><\/span><<\/span>head<\/span>><\/span><\/span>  <<\/span>meta<\/span> charset<\/span>=\"UTF-8\"<\/span>><\/span><\/span>  <<\/span>title<\/span>><\/span>Title<\/<\/span>title<\/span>><\/span><\/span><\/<\/span>head<\/span>><\/span><\/span><<\/span>body<\/span>><\/span><\/span><<\/span>a<\/span> href<\/span>=\"level-1.html\"<\/span>><\/span>\u7b49\u7ea71<\/<\/span>a<\/span>><<\/span>br<\/span>><<\/span>br<\/span>><\/span><\/span><<\/span>a<\/span> href<\/span>=\"level-2.html\"<\/span>><\/span>\u7b49\u7ea72<\/<\/span>a<\/span>><<\/span>br<\/span>><<\/span>br<\/span>><\/span><\/span><<\/span>a<\/span> href<\/span>=\"level-3.html\"<\/span>><\/span>\u7b49\u7ea73<\/<\/span>a<\/span>><\/span><\/span><\/<\/span>body<\/span>><\/span><\/span><\/<\/span>html<\/span>><\/span><\/span><\/pre>\n
      4.2 \u4fee\u6539\u914d\u7f6e\u7c7b<\/span><\/h2>\n
      @EnableWebSecurity<\/span><\/span>public<\/span> class<\/span> SecurityConfig<\/span> extends<\/span> WebSecurityConfigurerAdapter<\/span> {<\/span><\/span><\/span>  @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(HttpSecurity<\/span> http<\/span>) throws<\/span> Exception<\/span> {<\/span>    \/\/\u8bf7\u6c42\u6388\u6743\u7684\u89c4\u5219<\/span><\/span>    \/\/\u5f00\u542f\u8ba4\u8bc1<\/span><\/span>    http<\/span>.authorizeRequests<\/span>()<\/span>        \/\/\u9996\u9875\u6240\u6709\u4eba\u53ef\u8bbf\u95ee<\/span><\/span>         .antMatchers<\/span>(\"\/\"<\/span>).permitAll<\/span>()<\/span>        \/\/\u529f\u80fd\u9875\u5bf9\u5e94\u89d2\u8272\u6216\u6743\u9650\u624d\u80fd\u8bbf\u95ee<\/span><\/span>        \/\/hasRole \u4e3a\u89d2\u8272\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u89d2\u8272<\/span><\/span>        \/\/hasAuthority \u4e3a\u6743\u9650\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u6743\u9650<\/span><\/span>         .antMatchers<\/span>(\"\/level-1.html\"<\/span>).hasRole<\/span>(\"level1\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-2.html\"<\/span>).hasRole<\/span>(\"level2\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-3.html\"<\/span>).hasAuthority<\/span>(\"level3\"<\/span>);<\/span><\/span><\/span>    \/\/\u5f00\u542f\u767b\u5f55\uff0c\u65e0\u6743\u9650\u65f6\u8fdb\u5165\u767b\u5f55\u9875\u9762<\/span><\/span>    http<\/span>.formLogin<\/span>();<\/span>   }<\/span><\/span><\/span>  @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(AuthenticationManagerBuilder<\/span> auth<\/span>) throws<\/span> Exception<\/span> {<\/span>    \/\/\u5bc6\u7801\u52a0\u5bc6<\/span><\/span>    BCryptPasswordEncoder<\/span> passwordEncoder<\/span> =<\/span> new<\/span> BCryptPasswordEncoder<\/span>();<\/span>    \/\/\u914d\u7f6e\u7528\u6237\u540d\u3001\u5bc6\u7801\uff0c\u8be5\u914d\u7f6e\u65b9\u5f0f\u4e0b\uff0c\u7528\u6237\u540d\u548c\u5bc6\u7801\u4fdd\u5b58\u5728\u5185\u5b58\u4e2d<\/span><\/span>    auth<\/span>.inMemoryAuthentication<\/span>()<\/span>        \/\/\u5bc6\u7801\u52a0\u5bc6\u65b9\u5f0f<\/span><\/span>         .passwordEncoder<\/span>(new<\/span> BCryptPasswordEncoder<\/span>())<\/span>         .withUser<\/span>(\"admin\"<\/span>).password<\/span>(passwordEncoder<\/span>.encode<\/span>(\"123456\"<\/span>)).roles<\/span>(\"admin\"<\/span>)<\/span>         .and<\/span>().withUser<\/span>(\"admin1\"<\/span>).password<\/span>(passwordEncoder<\/span>.encode<\/span>(\"123456\"<\/span>)).roles<\/span>(\"level1\"<\/span>)<\/span>         .and<\/span>().withUser<\/span>(\"admin2\"<\/span>).password<\/span>(passwordEncoder<\/span>.encode<\/span>(\"123456\"<\/span>)).roles<\/span>(\"level2\"<\/span>)<\/span>         .and<\/span>().withUser<\/span>(\"admin3\"<\/span>).password<\/span>(passwordEncoder<\/span>.encode<\/span>(\"123456\"<\/span>)).authorities<\/span>(\"level3\"<\/span>)<\/span>         .and<\/span>().withUser<\/span>(\"admin0\"<\/span>).password<\/span>(passwordEncoder<\/span>.encode<\/span>(\"123456\"<\/span>)).authorities<\/span>(\"ROLE_level1\"<\/span>, \"ROLE_level2\"<\/span>, \"level3\"<\/span>);<\/span>   }<\/span>}<\/span><\/pre>\n
      hasRole()<\/strong><\/span>\u548c<\/span>hasAuthority()<\/strong><\/span>\u7528\u6cd5\u662f\u7c7b\u4f3c\u7684\uff0c\u53ea\u4e0d\u8fc7hasRole()\u65b9\u6cd5\u4f1a\u7ed9\u81ea\u5b9a\u4e49\u7684\u89d2\u8272\u540d\u524d\u52a0\u4e0a <\/span>ROLE_<\/strong><\/span> \u524d\u7f00<\/span><\/p>\n
      \u56e0\u6b64\u5728\u81ea\u5b9a\u4e49\u7528\u6237\u65f6\uff0c\u5982\u679c\u4f7f\u7528<\/span>authorities()<\/strong><\/span>\u7ed9\u7528\u6237\u8bbe\u7f6e\u89d2\u8272\u65f6\uff0c\u9700\u8981\u81ea\u884c\u6dfb\u52a0\u4e0a<\/span>ROLE_<\/strong><\/span>\u524d\u7f00\u3002<\/span><\/p>\n
      roles()<\/strong><\/span>\u548c<\/span>authorities()<\/strong><\/span>\u8bbe\u7f6e\u7684\u89d2\u8272\u6216\u6743\u9650\uff0c\u6700\u7ec8\u90fd\u5b58\u653e\u5728<\/span>authorities<\/strong><\/span>\u53c2\u6570\u4e2d\uff0c\u4e14\u8fd9\u4e24\u4e2a\u65b9\u6cd5\u4f1a\u4e92\u76f8\u8986\u76d6\u5f7c\u6b64\u7684\u503c\u3002<\/span><\/p>\n
      4.3 \u6d4b\u8bd5<\/span><\/h2>\n
      \u6d4f\u89c8\u5668\u8bbf\u95ee<\/span><\/p>\n
      \u4f9d\u6b21\u70b9\u51fb\u7b49\u7ea71\u3001\u7b49\u7ea72\u3001\u7b49\u7ea73\uff0c\u5747\u81ea\u52a8\u8df3\u8f6c\u5230\u6388\u6743\u767b\u5f55\u9875\u9762\uff0c\u767b\u5f55\u5bf9\u5e94\u6743\u9650\u7684\u7528\u6237\u540e\uff0c\u53ef\u6210\u529f\u8bbf\u95ee\u3002<\/span><\/p>\n
      \u5176\u4e2d\uff0c\u767b\u5f55admin\u7528\u6237\uff0c\u65e0\u6cd5\u8bbf\u95ee\u4efb\u4f55\u9875\u9762\uff0c\u767b\u5f55admin0\uff0c\u53ef\u8bbf\u95ee\u6240\u6709\u9875\u9762<\/span><\/p>\n
      \u767b\u5f55\u6743\u9650\u4e0d\u5339\u914d\u7684\u7528\u6237\uff0c\u62d2\u7edd\u8bbf\u95ee<\/span><\/p>\n
      4.4 \u4f7f\u7528UserDetailsService\u7c7b\u5b9e\u73b0<\/span><\/h2>\n
      UserDetailsServiceImpl<\/strong><\/span><\/p>\n
      @Service<\/span><\/span>public<\/span> class<\/span> UserDetailsServiceImpl<\/span> implements<\/span> UserDetailsService<\/span> {<\/span><\/span><\/span>  @Override<\/span><\/span>  public<\/span> UserDetails<\/span> loadUserByUsername<\/span>(String<\/span> s<\/span>) throws<\/span> UsernameNotFoundException<\/span> {<\/span>    List<\/span><<\/span>GrantedAuthority<\/span>><\/span> roles<\/span>;<\/span>    if<\/span> (\"admin1\"<\/span>.equals<\/span>(s<\/span>)) {<\/span>      roles<\/span> =<\/span> AuthorityUtils<\/span>.commaSeparatedStringToAuthorityList<\/span>(\"ROLE_level1\"<\/span>);<\/span>     } else<\/span> if<\/span> (\"admin2\"<\/span>.equals<\/span>(s<\/span>)) {<\/span>      roles<\/span> =<\/span> AuthorityUtils<\/span>.commaSeparatedStringToAuthorityList<\/span>(\"ROLE_level2\"<\/span>);<\/span>     } else<\/span> if<\/span> (\"admin3\"<\/span>.equals<\/span>(s<\/span>)) {<\/span>      roles<\/span> =<\/span> AuthorityUtils<\/span>.commaSeparatedStringToAuthorityList<\/span>(\"level3\"<\/span>);<\/span>     } else<\/span> if<\/span> (\"admin0\"<\/span>.equals<\/span>(s<\/span>)) {<\/span>      roles<\/span> =<\/span> AuthorityUtils<\/span>.createAuthorityList<\/span>(\"ROLE_level1\"<\/span>, \"ROLE_level2\"<\/span>, \"level3\"<\/span>);<\/span>     } else<\/span> {<\/span>      roles<\/span> =<\/span> AuthorityUtils<\/span>.createAuthorityList<\/span>(\"admin\"<\/span>);<\/span>     }<\/span><\/span><\/span>    return<\/span> new<\/span> User<\/span>(s<\/span>, new<\/span> BCryptPasswordEncoder<\/span>().encode<\/span>(\"123456\"<\/span>), roles<\/span>);<\/span>   }<\/span>}<\/span><\/pre>\n
      SecurityConfig<\/strong><\/span><\/p>\n
      @EnableWebSecurity<\/span><\/span>public<\/span> class<\/span> SecurityConfig<\/span> extends<\/span> WebSecurityConfigurerAdapter<\/span> {<\/span><\/span><\/span>  @Autowired<\/span><\/span>  private<\/span> UserDetailsServiceImpl<\/span> userDetailsService<\/span>;<\/span><\/span><\/span>  @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(HttpSecurity<\/span> http<\/span>) throws<\/span> Exception<\/span> {<\/span>    \/\/\u8bf7\u6c42\u6388\u6743\u7684\u89c4\u5219<\/span><\/span>    \/\/\u5f00\u542f\u8ba4\u8bc1<\/span><\/span>    http<\/span>.authorizeRequests<\/span>()<\/span>        \/\/\u9996\u9875\u6240\u6709\u4eba\u53ef\u8bbf\u95ee<\/span><\/span>         .antMatchers<\/span>(\"\/\"<\/span>).permitAll<\/span>()<\/span>        \/\/\u529f\u80fd\u9875\u5bf9\u5e94\u89d2\u8272\u6216\u6743\u9650\u624d\u80fd\u8bbf\u95ee<\/span><\/span>        \/\/hasRole \u4e3a\u89d2\u8272\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u89d2\u8272<\/span><\/span>        \/\/hasAuthority \u4e3a\u6743\u9650\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u6743\u9650<\/span><\/span>         .antMatchers<\/span>(\"\/level-1.html\"<\/span>).hasRole<\/span>(\"level1\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-2.html\"<\/span>).hasRole<\/span>(\"level2\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-3.html\"<\/span>).hasAuthority<\/span>(\"level3\"<\/span>);<\/span><\/span><\/span>    \/\/\u5f00\u542f\u767b\u5f55\uff0c\u65e0\u6743\u9650\u65f6\u8fdb\u5165\u767b\u5f55\u9875\u9762<\/span><\/span>    http<\/span>.formLogin<\/span>();<\/span>   }<\/span><\/span><\/span>  @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(AuthenticationManagerBuilder<\/span> auth<\/span>) throws<\/span> Exception<\/span> {<\/span>    \/\/\u4f7f\u7528UserDetailsServiceImpl \u67e5\u8be2\u7528\u6237\u540d\u3001\u5bc6\u7801<\/span><\/span>    auth<\/span>.userDetailsService<\/span>(userDetailsService<\/span>).passwordEncoder<\/span>(new<\/span> BCryptPasswordEncoder<\/span>());<\/span>   }<\/span>}<\/span><\/pre>\n
      \u6d4f\u89c8\u5668\u8bbf\u95ee\uff0c\u6d4b\u8bd5\uff0c\u901a\u8fc7<\/span><\/p>\n
      5 \u5e38\u7528\u6ce8\u89e3<\/span><\/h1>\n
      \u53ef\u63a7\u5236\u7528\u6237\u8ba4\u8bc1\u8bbf\u95ee\u63a5\u53e3<\/strong><\/span><\/p>\n
      5.1 @Secured()<\/span><\/h2>\n
      \u6821\u9a8c\u7528\u6237\u5177\u6709\u67d0\u4e2a\u89d2\u8272\uff0c\u624d\u53ef\u8bbf\u95ee\u63a5\u53e3<\/strong><\/span><\/p>\n
      \u9700\u5728\u542f\u52a8\u7c7b\u5f00\u542f\u6ce8\u89e3<\/span><\/p>\n
      @EnableGlobalMethodSecurity<\/span>(securedEnabled<\/span> =<\/span> true<\/span>)<\/span><\/pre>\n
      \u7136\u540e\u5728\u63a5\u53e3\u65b9\u6cd5\u4e0a\u914d\u7f6e\u6ce8\u89e3<\/span><\/p>\n
      @RestController<\/span><\/span>@RequestMapping<\/span>(\"user\"<\/span>)<\/span>public<\/span> class<\/span> UserController<\/span> {<\/span><\/span><\/span>  @GetMapping<\/span>(value<\/span> =<\/span> \"query\"<\/span>)<\/span>  @Secured<\/span>(\"ROLE_level1\"<\/span>)<\/span>  public<\/span> String<\/span> query<\/span>() {<\/span>    return<\/span> \"\u7528\u6237\u67e5\u8be2\u6210\u529f\"<\/span>;<\/span>   }<\/span><\/span><\/span>  @GetMapping<\/span>(value<\/span> =<\/span> \"update\"<\/span>)<\/span>  @Secured<\/span>({\"ROLE_level1\"<\/span>, \"ROLE_level2\"<\/span>})<\/span>  public<\/span> String<\/span> update<\/span>() {<\/span>    return<\/span> \"\u7528\u6237\u66f4\u65b0\u6210\u529f\"<\/span>;<\/span>   }<\/span>}<\/span><\/pre>\n
      5.2 @PreAuthorize()<\/span><\/h2>\n
      \u5728\u8fdb\u5165\u65b9\u6cd5\u524d\u6821\u9a8c\u7528\u6237\u5177\u6709\u67d0\u4e2a\u6743\u9650\u6216\u89d2\u8272<\/strong><\/span><\/p>\n
      \u9700\u5728\u542f\u52a8\u7c7b\u5f00\u542f\u6ce8\u89e3<\/span><\/p>\n
      @EnableGlobalMethodSecurity<\/span>(securedEnabled<\/span> =<\/span> true<\/span>, prePostEnabled<\/span> =<\/span> true<\/span>)<\/span><\/pre>\n
      \u7136\u540e\u5728\u63a5\u53e3\u65b9\u6cd5\u4e0a\u914d\u7f6e\u6ce8\u89e3<\/span><\/p>\n
      @RestController<\/span><\/span>@RequestMapping<\/span>(\"user\"<\/span>)<\/span>public<\/span> class<\/span> UserController<\/span> {<\/span><\/span><\/span>  @GetMapping<\/span>(value<\/span> =<\/span> \"delete\"<\/span>)<\/span>  @PreAuthorize<\/span>(\"hasAnyAuthority('ROLE_level1','level3')\"<\/span>)<\/span>  public<\/span> String<\/span> delete<\/span>() {<\/span>    return<\/span> \"\u7528\u6237\u5220\u9664\u6210\u529f\"<\/span>;<\/span>   }<\/span>}<\/span><\/pre>\n
      5.3 @PostAuthorize()<\/span><\/h2>\n
      \u5728\u8fdb\u5165\u65b9\u6cd5\u540e\u6821\u9a8c\u7528\u6237\u5177\u6709\u67d0\u4e2a\u6743\u9650\u6216\u89d2\u8272<\/strong><\/span><\/p>\n
      \u9700\u5728\u542f\u52a8\u7c7b\u5f00\u542f\u6ce8\u89e3<\/span><\/p>\n
      @EnableGlobalMethodSecurity<\/span>(securedEnabled<\/span> =<\/span> true<\/span>, prePostEnabled<\/span> =<\/span> true<\/span>)<\/span><\/pre>\n
      \u7136\u540e\u5728\u63a5\u53e3\u65b9\u6cd5\u4e0a\u914d\u7f6e\u6ce8\u89e3<\/span><\/p>\n
      @RestController<\/span><\/span>@RequestMapping<\/span>(\"user\"<\/span>)<\/span>public<\/span> class<\/span> UserController<\/span> {<\/span><\/span><\/span>  @GetMapping<\/span>(value<\/span> =<\/span> \"delete\"<\/span>)<\/span>  @PostAuthorize<\/span>(\"hasAnyAuthority('ROLE_level1','level3')\"<\/span>)<\/span>  public<\/span> String<\/span> delete<\/span>() {<\/span>    return<\/span> \"\u7528\u6237\u5220\u9664\u6210\u529f\"<\/span>;<\/span>   }<\/span>}<\/span><\/pre>\n
      5.4 @PostFilter()<\/span><\/h2>\n
      \u6821\u9a8c\u6743\u9650\u540e\u5bf9\u6570\u636e\u8fdb\u884c\u8fc7\u6ee4\uff0c\u53ea\u8fd4\u56de\u6ee1\u8db3\u6761\u4ef6\u7684\u6570\u636e<\/strong><\/span><\/p>\n
      \u65b0\u5efa\u5b9e\u4f53\u7c7b<\/span><\/p>\n
      @Data<\/span><\/span>@AllArgsConstructor<\/span><\/span>@NoArgsConstructor<\/span><\/span>public<\/span> class<\/span> UserModel<\/span> {<\/span><\/span><\/span>  private<\/span> String<\/span> username<\/span>;<\/span>  private<\/span> String<\/span> password<\/span>;<\/span>}<\/span><\/pre>\n
      \u7136\u540e\u5728\u65b9\u6cd5\u4e0a\u52a0\u4e0a\u6ce8\u89e3<\/span><\/p>\n
      @RestController<\/span><\/span>@RequestMapping<\/span>(\"user\"<\/span>)<\/span>public<\/span> class<\/span> UserController<\/span> {<\/span><\/span><\/span>  @GetMapping<\/span>(value<\/span> =<\/span> \"queryList\"<\/span>)<\/span>  @PreAuthorize<\/span>(\"hasAnyAuthority('ROLE_level1','level3')\"<\/span>)<\/span>  @PostFilter<\/span>(\"filterObject.username == 'test'\"<\/span>)<\/span>  public<\/span> List<\/span><<\/span>UserModel<\/span>><\/span> queryList<\/span>() {<\/span>    List<\/span><<\/span>UserModel<\/span>><\/span> userList<\/span> =<\/span> new<\/span> ArrayList<\/span><><\/span>();<\/span>    userList<\/span>.add<\/span>(new<\/span> UserModel<\/span>(\"test\"<\/span>, \"qwerty\"<\/span>));<\/span>    userList<\/span>.add<\/span>(new<\/span> UserModel<\/span>(\"test2\"<\/span>, \"asdfgh\"<\/span>));<\/span>    userList<\/span>.add<\/span>(new<\/span> UserModel<\/span>(\"test3\"<\/span>, \"zxcvbn\"<\/span>));<\/span><\/span><\/span>    return<\/span> userList<\/span>;<\/span>   }<\/span>}<\/span><\/pre>\n
      \u6d4b\u8bd5\uff0c\u6743\u9650\u9a8c\u8bc1\u901a\u8fc7\u540e<\/span><\/p>\n
      5.5 @PreFilter()<\/span><\/h2>\n
      \u6821\u9a8c\u6743\u9650\u540e\u5bf9\u6570\u636e\u8fdb\u884c\u8fc7\u6ee4\uff0c\u53ea\u6709\u6ee1\u8db3\u6761\u4ef6\u7684\u6570\u636e\u624d\u80fd\u4f20\u5165\u63a5\u53e3\u65b9\u6cd5\u4e2d<\/strong><\/span><\/p>\n
      @RestController<\/span><\/span>@RequestMapping<\/span>(\"user\"<\/span>)<\/span>public<\/span> class<\/span> UserController<\/span> {<\/span><\/span><\/span>  @PostMapping<\/span>(value<\/span> =<\/span> \"queryUser\"<\/span>)<\/span>  @PreAuthorize<\/span>(\"hasAnyAuthority('ROLE_level1','level3')\"<\/span>)<\/span>  @PreFilter<\/span>(\"filterObject.username == 'test2'\"<\/span>)<\/span>  public<\/span> List<\/span><<\/span>UserModel<\/span>><\/span> queryUser<\/span>(@RequestBody<\/span> List<\/span><<\/span>UserModel<\/span>><\/span> userModels<\/span>) {<\/span>    return<\/span> userModels<\/span>;<\/span>   }<\/span>}<\/span><\/pre>\n
      \u6d4b\u8bd5\uff0c\u6743\u9650\u9a8c\u8bc1\u901a\u8fc7\u540e<\/span><\/p>\n
      6 \u8bb0\u4f4f\u6211<\/span><\/h1>\n
      \u914d\u7f6e\u7c7b\u4e2d\u5f00\u542f\u8bb0\u4f4f\u6211<\/span><\/p>\n
        @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(HttpSecurity<\/span> http<\/span>) throws<\/span> Exception<\/span> {<\/span>    \/\/\u8bf7\u6c42\u6388\u6743\u7684\u89c4\u5219<\/span><\/span>    \/\/\u5f00\u542f\u8ba4\u8bc1<\/span><\/span>    http<\/span>.authorizeRequests<\/span>()<\/span>        \/\/\u9996\u9875\u6240\u6709\u4eba\u53ef\u8bbf\u95ee<\/span><\/span>         .antMatchers<\/span>(\"\/\"<\/span>).permitAll<\/span>()<\/span>        \/\/\u529f\u80fd\u9875\u5bf9\u5e94\u89d2\u8272\u6216\u6743\u9650\u624d\u80fd\u8bbf\u95ee<\/span><\/span>        \/\/hasRole \u4e3a\u89d2\u8272\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u89d2\u8272<\/span><\/span>        \/\/hasAuthority \u4e3a\u6743\u9650\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u6743\u9650<\/span><\/span>         .antMatchers<\/span>(\"\/level-1.html\"<\/span>).hasRole<\/span>(\"level1\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-2.html\"<\/span>).hasRole<\/span>(\"level2\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-3.html\"<\/span>).hasAuthority<\/span>(\"level3\"<\/span>);<\/span><\/span><\/span>    \/\/\u5f00\u542f\u767b\u5f55\uff0c\u65e0\u6743\u9650\u65f6\u8fdb\u5165\u767b\u5f55\u9875\u9762<\/span><\/span>    http<\/span>.formLogin<\/span>();<\/span><\/span><\/span>    \/\/\u8bb0\u4f4f\u6211<\/span><\/span>    http<\/span>.rememberMe<\/span>();<\/span>   }<\/span><\/pre>\n
      \u542f\u52a8\u670d\u52a1\uff0c\u8bbf\u95ee\u9875\u9762\uff0c\u767b\u5f55\u9875\u9762\u589e\u52a0\u4e86\u8bb0\u4f4f\u6211\u9009\u62e9\u6846<\/span><\/p>\n
      \u767b\u5f55\u6210\u529f\u540e\uff0ccookie\u4e2d\u5df2\u4fdd\u5b58\u7528\u6237\u4fe1\u606f\uff0c\u9ed8\u8ba4\u65f6\u95f4\u4e3a2\u5468<\/span><\/p>\n
      7 \u6ce8\u9500<\/span><\/h1>\n
      7.1 \u914d\u7f6e\u7c7b\u4e2d\u5f00\u542f\u6ce8\u9500<\/span><\/h2>\n
        @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(HttpSecurity<\/span> http<\/span>) throws<\/span> Exception<\/span> {<\/span>    \/\/\u8bf7\u6c42\u6388\u6743\u7684\u89c4\u5219<\/span><\/span>    \/\/\u5f00\u542f\u8ba4\u8bc1<\/span><\/span>    http<\/span>.authorizeRequests<\/span>()<\/span>        \/\/\u9996\u9875\u6240\u6709\u4eba\u53ef\u8bbf\u95ee<\/span><\/span>         .antMatchers<\/span>(\"\/\"<\/span>).permitAll<\/span>()<\/span>        \/\/\u529f\u80fd\u9875\u5bf9\u5e94\u89d2\u8272\u6216\u6743\u9650\u624d\u80fd\u8bbf\u95ee<\/span><\/span>        \/\/hasRole \u4e3a\u89d2\u8272\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u89d2\u8272<\/span><\/span>        \/\/hasAuthority \u4e3a\u6743\u9650\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u6743\u9650<\/span><\/span>         .antMatchers<\/span>(\"\/level-1.html\"<\/span>).hasRole<\/span>(\"level1\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-2.html\"<\/span>).hasRole<\/span>(\"level2\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-3.html\"<\/span>).hasAuthority<\/span>(\"level3\"<\/span>);<\/span><\/span><\/span>    \/\/\u5f00\u542f\u767b\u5f55\uff0c\u65e0\u6743\u9650\u65f6\u8fdb\u5165\u767b\u5f55\u9875\u9762<\/span><\/span>    http<\/span>.formLogin<\/span>();<\/span><\/span><\/span>    \/\/\u8bb0\u4f4f\u6211<\/span><\/span>    http<\/span>.rememberMe<\/span>();<\/span><\/span><\/span>    \/\/\u5f00\u542f\u6ce8\u9500\uff0c\u6ce8\u9500\u6210\u529f\u540e\u56de\u9996\u9875<\/span><\/span>    http<\/span>.logout<\/span>().logoutSuccessUrl<\/span>(\"\/\"<\/span>);<\/span>   }<\/span><\/pre>\n
      7.2 level-* \u9875\u9762\u589e\u52a0\u6ce8\u9500\u6309\u94ae<\/span><\/h2>\n
      <!DOCTYPE html><\/span><\/span><<\/span>html<\/span> lang<\/span>=\"en\"<\/span>><\/span><\/span><<\/span>head<\/span>><\/span><\/span>  <<\/span>meta<\/span> charset<\/span>=\"UTF-8\"<\/span>><\/span><\/span>  <<\/span>title<\/span>><\/span>Title<\/<\/span>title<\/span>><\/span><\/span><\/<\/span>head<\/span>><\/span><\/span><<\/span>body<\/span>><\/span><\/span><<\/span>h1<\/span> style<\/span>=\"color: red\"<\/span>><\/span>\u8fd9\u662f\u7528\u6237\u7b49\u7ea71\u53ef\u8bbf\u95ee\u7684\u9875\u9762<\/<\/span>h1<\/span>><\/span><\/span><<\/span>br<\/span>><<\/span>br<\/span>><\/span><\/span><<\/span>a<\/span> href<\/span>=\"\/logout\"<\/span>><\/span>\u6ce8\u9500<\/<\/span>a<\/span>><\/span><\/span><\/<\/span>body<\/span>><\/span><\/span><\/<\/span>html<\/span>><\/span><\/span><\/pre>\n
      \u5176\u4ed6\u4e24\u4e2a\u9875\u9762\u505a\u76f8\u540c\u4fee\u6539<\/span><\/p>\n
      \u542f\u52a8\u670d\u52a1\uff0c\u767b\u5f55\u6210\u529f\u540e\u70b9\u51fb\u6ce8\u9500\u6309\u94ae\uff0c\u6ce8\u9500\u6210\u529f\uff0c\u8fd4\u56de\u9996\u9875\uff0c\u8bbf\u95ee\u9875\u9762\u9700\u518d\u6b21\u767b\u5f55<\/span><\/p>\n
      8 \u81ea\u5b9a\u4e49\u767b\u5f55\u9875<\/span><\/h1>\n
      8.1 \u65b0\u5efa\u767b\u5f55\u9875login.html<\/span><\/h2>\n
      <!DOCTYPE html><\/span><\/span><<\/span>html<\/span> lang<\/span>=\"en\"<\/span>><\/span><\/span><<\/span>head<\/span>><\/span><\/span>  <<\/span>meta<\/span> charset<\/span>=\"UTF-8\"<\/span>><\/span><\/span>  <<\/span>title<\/span>><\/span>Title<\/<\/span>title<\/span>><\/span><\/span>  <<\/span>meta<\/span> charset<\/span>=\"UTF-8\"<\/span>><\/span><\/span>  <<\/span>title<\/span>><\/span>Login Page<\/<\/span>title<\/span>><\/span><\/span><\/span><\/span>  <<\/span>style<\/span>><\/span><\/span>    body<\/span> {<\/span>      font-family<\/span>: Arial<\/span>, sans-serif<\/span>;<\/span>      background-color<\/span>: #f5f5f5<\/span>;<\/span>     }<\/span><\/span><\/span>    .container<\/span> {<\/span>      width<\/span>: 300px<\/span>;<\/span>      margin<\/span>: auto<\/span>;<\/span>      padding<\/span>: 40px<\/span>;<\/span>      border<\/span>: 1px<\/span> solid<\/span> #ccc<\/span>;<\/span>      background-color<\/span>: white<\/span>;<\/span>      box-shadow<\/span>: 0<\/span> 0<\/span> 10px<\/span> rgba<\/span>(0<\/span>, 0<\/span>, 0<\/span>, 0.1<\/span>);<\/span>     }<\/span><\/span><\/span>    h2<\/span> {<\/span>      text-align<\/span>: center<\/span>;<\/span>     }<\/span><\/span><\/span>    label<\/span> {<\/span>      display<\/span>: block<\/span>;<\/span>      margin-bottom<\/span>: 10px<\/span>;<\/span>     }<\/span><\/span><\/span>    input<\/span>[type<\/span>=\"text\"<\/span>],<\/span>    input<\/span>[type<\/span>=\"password\"<\/span>] {<\/span>      width<\/span>: 100%<\/span>;<\/span>      padding<\/span>: 6px<\/span>;<\/span>      border<\/span>: 1px<\/span> solid<\/span> #ccc<\/span>;<\/span>      outline<\/span>: none<\/span>;<\/span>     }<\/span><\/span><\/span>    button<\/span> {<\/span>      width<\/span>: 100%<\/span>;<\/span>      padding<\/span>: 10px<\/span>;<\/span>      color<\/span>: white<\/span>;<\/span>      background-color<\/span>: #4CAF50<\/span>;<\/span>      cursor<\/span>: pointer<\/span>;<\/span>      border<\/span>: none<\/span>;<\/span>      outline<\/span>: none<\/span>;<\/span>     }<\/span><\/span><\/span>    button<\/span>:hover<\/span> {<\/span>      opacity<\/span>: 0.9<\/span>;<\/span>     }<\/span>  <\/<\/span>style<\/span>><\/span><\/span><\/<\/span>head<\/span>><\/span><\/span><<\/span>body<\/span>><\/span><\/span><<\/span>div<\/span> class<\/span>=\"container\"<\/span>><\/span><\/span>  <<\/span>h2<\/span>><\/span>\u767b\u5f55<\/<\/span>h2<\/span>><\/span><\/span>  <<\/span>form<\/span> action<\/span>=\"\/login\"<\/span> method<\/span>=\"post\"<\/span>><\/span><\/span>    <<\/span>label<\/span> for<\/span>=\"username\"<\/span>><\/span>\u7528\u6237\u540d<\/<\/span>label<\/span>><\/span><\/span>    <<\/span>input<\/span> type<\/span>=\"text\"<\/span> id<\/span>=\"username\"<\/span> name<\/span>=\"username\"<\/span>><<\/span>br<\/span>><<\/span>br<\/span>><\/span><\/span><\/span><\/span>    <<\/span>label<\/span> for<\/span>=\"password\"<\/span>><\/span>\u5bc6\u7801<\/<\/span>label<\/span>><\/span><\/span>    <<\/span>input<\/span> type<\/span>=\"password\"<\/span> id<\/span>=\"password\"<\/span> name<\/span>=\"password\"<\/span>><<\/span>br<\/span>><<\/span>br<\/span>><\/span><\/span><\/span><\/span>    <<\/span>input<\/span> type<\/span>=\"checkbox\"<\/span> name<\/span>=\"remember-me\"<\/span> title<\/span>=\"\u8bb0\u4f4f\u6211\"<\/span>><\/span>\u8bb0\u4f4f\u6211<<\/span>br<\/span>><<\/span>br<\/span>><\/span><\/span><\/span><\/span>    <<\/span>button<\/span> type<\/span>=\"submit\"<\/span>><\/span>\u767b \u5f55<\/<\/span>button<\/span>><\/span><\/span>  <\/<\/span>form<\/span>><\/span><\/span><\/<\/span>div<\/span>><\/span><\/span><\/<\/span>body<\/span>><\/span><\/span><\/<\/span>html<\/span>><\/span><\/span><\/pre>\n
      8.2 \u914d\u7f6e\u7c7b\u4e2d\u5f00\u542f\u81ea\u5b9a\u4e49\u767b\u5f55\u9875<\/span><\/h2>\n
        @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(HttpSecurity<\/span> http<\/span>) throws<\/span> Exception<\/span> {<\/span>    \/\/\u8bf7\u6c42\u6388\u6743\u7684\u89c4\u5219<\/span><\/span>    \/\/\u5f00\u542f\u8ba4\u8bc1<\/span><\/span>    http<\/span>.authorizeRequests<\/span>()<\/span>        \/\/\u9996\u9875\u6240\u6709\u4eba\u53ef\u8bbf\u95ee<\/span><\/span>         .antMatchers<\/span>(\"\/\"<\/span>).permitAll<\/span>()<\/span>        \/\/\u529f\u80fd\u9875\u5bf9\u5e94\u89d2\u8272\u6216\u6743\u9650\u624d\u80fd\u8bbf\u95ee<\/span><\/span>        \/\/hasRole \u4e3a\u89d2\u8272\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u89d2\u8272<\/span><\/span>        \/\/hasAuthority \u4e3a\u6743\u9650\u6388\u6743\uff0c\u8868\u793a\u7528\u6237\u62e5\u6709\u6307\u5b9a\u6743\u9650<\/span><\/span>         .antMatchers<\/span>(\"\/level-1.html\"<\/span>).hasRole<\/span>(\"level1\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-2.html\"<\/span>).hasRole<\/span>(\"level2\"<\/span>)<\/span>         .antMatchers<\/span>(\"\/level-3.html\"<\/span>).hasAuthority<\/span>(\"level3\"<\/span>);<\/span><\/span><\/span>    \/\/\u5f00\u542f\u767b\u5f55\uff0c\u65e0\u6743\u9650\u65f6\u8fdb\u5165\u767b\u5f55\u9875\u9762<\/span><\/span>    \/\/\u81ea\u5b9a\u4e49\u767b\u5f55\u9875<\/span><\/span>    http<\/span>.formLogin<\/span>().loginPage<\/span>(\"\/login.html\"<\/span>).loginProcessingUrl<\/span>(\"\/login\"<\/span>);<\/span>    \/\/\u5173\u95edcsrf\u9632\u62a4<\/span><\/span>    http<\/span>.csrf<\/span>().disable<\/span>();<\/span><\/span><\/span>    \/\/\u8bb0\u4f4f\u6211<\/span><\/span>    http<\/span>.rememberMe<\/span>();<\/span><\/span><\/span>    \/\/\u5f00\u542f\u6ce8\u9500\uff0c\u6ce8\u9500\u6210\u529f\u540e\u56de\u9996\u9875<\/span><\/span>    http<\/span>.logout<\/span>().logoutSuccessUrl<\/span>(\"\/\"<\/span>);<\/span>   }<\/span><\/pre>\n
      \u8fd9\u91cc\uff0c\u81ea\u5b9a\u4e49\u767b\u5f55\uff0c\u9ed8\u8ba4\u7528\u6237\u53c2\u6570\u662f<\/span>username<\/strong><\/span>\uff0c\u9ed8\u8ba4\u5bc6\u7801\u53c2\u6570\u662f<\/span>password<\/strong><\/span>\uff0c\u9ed8\u8ba4\u8bb0\u4f4f\u6211\u53c2\u6570\u662f<\/span>remember-me<\/strong><\/span>\uff0c\u5982\u679c\u9700\u8981\u81ea\u5b9a\u4e49\u767b\u5f55\u8868\u5355\u7684\u53c2\u6570\uff0c\u505a\u5982\u4e0b\u4fee\u6539<\/span><\/p>\n
          \/\/\u5f00\u542f\u767b\u5f55\uff0c\u65e0\u6743\u9650\u65f6\u8fdb\u5165\u767b\u5f55\u9875\u9762<\/span><\/span>    http<\/span>.formLogin<\/span>().loginPage<\/span>(\"\/login.html\"<\/span>).loginProcessingUrl<\/span>(\"\/login\"<\/span>)<\/span>         .usernameParameter<\/span>(\"username\"<\/span>)<\/span>         .passwordParameter<\/span>(\"password\"<\/span>);<\/span>    \/\/\u5173\u95edcsrf\u9632\u62a4<\/span><\/span>    http<\/span>.csrf<\/span>().disable<\/span>();<\/span><\/span><\/span>    \/\/\u8bb0\u4f4f\u6211<\/span><\/span>    http<\/span>.rememberMe<\/span>().rememberMeParameter<\/span>(\"remember-me\"<\/span>);<\/span><\/pre>\n
      \u542f\u52a8\u670d\u52a1\uff0c\u8bbf\u95ee\u5730\u5740\uff0c\u8df3\u8f6c\u5230\u81ea\u5b9a\u4e49\u767b\u5f55\u9875<\/span><\/p>\n
      9 \u81ea\u5b9a\u4e49403\u9875\u9762<\/span><\/h1>\n
      9.1 \u65b0\u5efa403.html<\/span><\/h2>\n
      <!DOCTYPE html><\/span><\/span><<\/span>html<\/span> lang<\/span>=\"en\"<\/span>><\/span><\/span><<\/span>head<\/span>><\/span><\/span>  <<\/span>meta<\/span> charset<\/span>=\"UTF-8\"<\/span>><\/span><\/span>  <<\/span>title<\/span>><\/span>Title<\/<\/span>title<\/span>><\/span><\/span><\/<\/span>head<\/span>><\/span><\/span><<\/span>body<\/span>><\/span><\/span>\u6743\u9650\u4e0d\u8db3\uff0c\u65e0\u6cd5\u8bbf\u95ee<\/span><\/<\/span>body<\/span>><\/span><\/span><\/<\/span>html<\/span>><\/span><\/span><\/pre>\n
      9.2 \u914d\u7f6e\u7c7b\u4e2d\u5f00\u542f\u81ea\u5b9a\u4e49403\u9875\u9762<\/span><\/h2>\n
        @Override<\/span><\/span>  protected<\/span> void<\/span> configure<\/span>(HttpSecurity<\/span> http<\/span>) throws<\/span> Exception<\/span> {<\/span>    <\/span>    <\/span>\/\/...\u5176\u4ed6\u4ee3\u7801...<\/span><\/span><\/span><\/span>    \/\/\u81ea\u5b9a\u4e49403\u9875\u9762<\/span><\/span>    http<\/span>.exceptionHandling<\/span>().accessDeniedPage<\/span>(\"\/403.html\"<\/span>);<\/span>   }<\/span><\/pre>\n
      \u542f\u52a8\u670d\u52a1\uff0c\u6d4f\u89c8\u5668\u8bbf\u95ee\uff0c\u767b\u5f55\u65e0\u6743\u9650\u7528\u6237\u540e\u63d0\u793a<\/span><\/p>\n
      \u81f3\u6b64\uff0cSpring Boot\u6574\u5408Spring Security\u5b9e\u73b0\u7528\u6237\u8ba4\u8bc1\u548c\u6388\u6743\u57fa\u672c\u7528\u6cd5\u5df2\u8bb2\u89e3\u5b8c\u6bd5\uff0c\u4e14\u6d4b\u8bd5\u901a\u8fc7\u3002<\/span><\/p>\n
      \n
      \n
      CSDN\uff1a<\/span>https:\/\/blog.csdn.net\/dkbnull\/article\/details\/136920791<\/span><\/span><\/p>\n
      \u77e5\u4e4e\uff1a<\/span>https:\/\/zhuanlan.zhihu.com\/p\/688341417<\/span><\/span><\/p>\n
      \n
      \n
      <\/mp-style-type><\/p>\n
      \n
      \u672c\u7bc7\u6587\u7ae0\u6765\u6e90\u4e8e\u5fae\u4fe1\u516c\u4f17\u53f7:                 \u7a0b\u5e8f\u5458null              <\/p>\n<\/blockquote>\n<\/div>\n","raw":"","protected":false},"excerpt":{"rendered":"
      \u5982\u679c\u6587\u7ae0\u4e2d\u4ee3\u7801\u4e0d\u4fbf\u4e8e\u9605\u8bfb\uff0c\u8bf7\u4f7f\u7528\u7535\u8111\u67e5\u770b\u6216\u70b9\u51fb\u9605\u8bfb\u539f\u6587\u3002 Spring Security\u662f\u9488\u5bf9Spring\u9879\u76ee\u7684\u5b89\u5168\u6846\u67b6\uff0c\u4e5f\u662fSp …<\/p>\n","protected":false},"author":1,"featured_media":4290,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"emotion":"","emotion_color":"","title_style":"","license":"","footnotes":""},"categories":[7,44],"tags":[],"class_list":["post-4307","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-spring-boot","category-spring-security"],"post_thumbnail_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152525689-150x150.jpeg","content_first_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152529353.png","post_medium_image_300":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152525689-300x127.jpeg","post_thumbnail_image_624":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152525689-1024x435.jpeg","post_frist_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152529353.png","post_medium_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152525689-300x127.jpeg","post_large_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152525689-1024x435.jpeg","post_full_image":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152525689.jpeg","post_all_images":[{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152529353.png","id":"image0"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152529353.png","id":"image1"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152531549.png","id":"image2"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152531549.png","id":"image3"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152534382.png","id":"image4"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152534382.png","id":"image5"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152536278.png","id":"image6"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152536278.png","id":"image7"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152538361.png","id":"image8"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152538361.png","id":"image9"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152541904.png","id":"image10"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152541904.png","id":"image11"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152543106.png","id":"image12"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152543106.png","id":"image13"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152545342.png","id":"image14"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152545342.png","id":"image15"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152547961.png","id":"image16"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152547961.png","id":"image17"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152549820.png","id":"image18"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152549820.png","id":"image19"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152551536.png","id":"image20"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152551536.png","id":"image21"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152553991.png","id":"image22"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152553991.png","id":"image23"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152556862.png","id":"image24"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152556862.png","id":"image25"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152558357.png","id":"image26"},{"imagesurl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2024\/05\/20240524152558357.png","id":"image27"}],"videoAdId":"","listAd":"0","listAdId":"","listAdEvery":6,"total_comments":0,"category_name":"Spring Boot","post_date":"2024-03-21","like_count":"0","praiseWord":"\u9f13\u52b1","copyright_state":"","excitationAd":"0","rewardedVideoAdId":"","detailAdId":"","detailAd":"0","enterpriseMinapp":"0","audios":[],"postImageUrl":"https:\/\/wp-moto-1258805347.cos.ap-shanghai.myqcloud.com\/2023\/05\/20230519082947553.jpg","avatarurls":[],"related_posts":null,"pageviews":294,"next_post_id":4289,"next_post_title":"Spring Boot\u6574\u5408Redis","previous_post_id":4317,"previous_post_title":"Spring Boot\u6574\u5408MyBatis Plus\u914d\u7f6e\u591a\u6570\u636e\u6e90","_links":{"self":[{"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/posts\/4307","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/comments?post=4307"}],"version-history":[{"count":0,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/posts\/4307\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/media\/4290"}],"wp:attachment":[{"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/media?parent=4307"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/categories?post=4307"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xinchewhd.com.cn\/index.php\/wp-json\/wp\/v2\/tags?post=4307"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}