Spring security 5 Authorize Configuration

1. Spring Security 核心请求，认证配置类 WebSecurityConfigurerAdapter

protected void configure(HttpSecurity http) throws Exception {

    http

        .authorizeRequests()

            .anyRequest().authenticated()

            .and()

        .formLogin()

            .and()

        .httpBasic();

}

Ensures that any request to our application requires the user to be authenticated
Allows users to authenticate with form based login
Allows users to authenticate with HTTP Basic authentication

protected void configure(HttpSecurity http) throws Exception {

    http

        .authorizeRequests()

            .antMatchers("/resources/**", "/signup", "/about").permitAll()

            .antMatchers("/admin/**").hasRole("ADMIN")

            .antMatchers("/db/**").access("hasRole('ADMIN') and hasRole('DBA')")

            .anyRequest().authenticated()

            .and()

        // ...

        .formLogin();

}

protected void configure(HttpSecurity http) throws Exception {

    http

        .logout()

            .logoutUrl("/my/logout")

            .logoutSuccessUrl("/my/index")

            .logoutSuccessHandler(logoutSuccessHandler)

            .invalidateHttpSession(true)

            .addLogoutHandler(logoutHandler)

            .deleteCookies(cookieNamesToClear)

            .and()

        ...

}

巴特西

Spring security 5 Authorize Configuration

最新文章

热门文章