spring boot + spring security 基于 前端 ajax Content-Type为applications-json的 post方式的登陆 以及权限认证

1，maven依赖 加入

    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
    </dependency>

**

2，自定义WebSecurityConfigurerAdapter 的实现类

**

public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
@Autowired
private MyFilterSecurityInterceptor myFilterSecurityInterceptor;
@Autowired
private UserService userService;


@Autowired
private AuthenticationAccessDeniedHandler accessDeniedHandler;

@Override
protected void configure(HttpSecurity http) throws Exception {
     http.formLogin()  
      .loginPage("/user/usercontroller/login_page")
      .loginProcessingUrl("/user/usercontroller/login").permitAll()
      .and()
      .authorizeRequests()    // 定义哪些URL需要被保护、哪些不需要被保护
      .antMatchers("/user/usercontroller/login_page").permitAll()   // 设置所有人都可以访问的路径
      .anyRequest()        // 任何请求,登录后可以访问
      .authenticated()
      .and()
      .csrf().disable();     // 关闭csrf防护
      http.addFilterBefore(myFilterSecurityInterceptor,FilterSecurityInterceptor.class);
        //用重写的Filter替换掉原有的UsernamePasswordAuthenticationFilter
      http.addFilterAt(customAuthenticationFilter(),UsernamePasswordAuthenticationFilter.class);
      http.exceptionHandling().accessDeniedHandler(accessDeniedHandler);

}

//注册自定义的UsernamePasswordAuthenticationFilter
@Bean
CustomAuthenticationFilter customAuthenticationFilter() throws Exception {
    CustomAuthenticationFilter filter = new CustomAuthenticationFilter();
    filter.setAuthenticationSuccessHandler(new SuccessHandler());
    filter.setAuthenticationFailureHandler(new FailureHandler());
    filter.setFilterProcessesUrl("/user/usercontroller/login");
    //这句很关键，重用WebSecurityConfigurerAdapter配置的AuthenticationManager，不然要自己组装AuthenticationManager
    filter.setAuthenticationManager(authenticationManagerBean());
    return filter;
}

@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
   auth.userDetailsService(userService).passwordEncoder(new PasswordEncoder() { 
       @Override
       public String encode(CharSequence rawPassword) {
           return Md5Utils.encryptPassword((String) rawPassword, (String) rawPassword);
       }

       @Override
       public boolean matches(CharSequence rawPassword, String encodedPassword) {
           return encodedPassword.equals(Md5Utils.encryptPassword((String) rawPassword,(String) rawPassword));
       }
   });

}

}

3，继承 UserDetailsService 并实现认证方法

 @Service
 public class UserServiceImpl implements UserService，UserDetailsService {

@Autowired
UserMapper u