IDEA+SpringBoot+SpringSecurity：整个SpringSecurity的实现过程，可应用于线上产品

package com.security.demo_1; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.context.annotation.Configuration; import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.builders.WebSecurity; import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; /** * @author Administrator * @create 2017/12/2 * @since 1.0.0 */ //注解为配置 @Configuration @EnableWebSecurity public class SpringSecurityConfig extends WebSecurityConfigurerAdapter{ @Autowired private MyUserService myUserService; @Override protected void configure(AuthenticationManagerBuilder auth) throws Exception { // auth.inMemoryAuthentication().withUser("admin").password("123456").roles("ADMIN"); // auth.inMemoryAuthentication().withUser("zs").password("123456").roles("USER"); auth.userDetailsService(myUserService).passwordEncoder(new MyPasswordEncoder()); //默认jdbc认证--自己的查询方法--权限查询--密码认证 auth.jdbcAuthentication().usersByUsernameQuery("").authoritiesByUsernameQuery("").passwordEncoder(new MyPasswordEncoder()); } /** * 权限 * @param http * @throws Exception */ @Override public void configure(HttpSecurity http)throws Exception{ http.authorizeRequests() .antMatchers("/").permitAll() .anyRequest().authenticated()//需要验证 .and() .logout().permitAll() .and() .formLogin(); //关闭csrf协议 http.csrf().disable(); } /** * 静态资源过滤 * @param web */ @Override public void configure(WebSecurity web) throws Exception{ web.ignoring().antMatchers("/js/**","/css/**","/images/**"); } }