WebSecurityConfigurerAdapter过时，新方法替代

最新推荐文章于 2024-05-12 06:25:23 发布

独繁华

最新推荐文章于 2024-05-12 06:25:23 发布

阅读量1.5w

点赞数 19

分类专栏： SpringSecurity 文章标签： java

本文链接：https://blog.csdn.net/qq_45524787/article/details/125473762

版权

SpringSecurity 专栏收录该内容

3 篇文章 0 订阅

订阅专栏

1、AuthenticationManager对象注入IOC

@Configuration
public class SecurityConfig {

    @Autowired
    private AuthenticationConfiguration authenticationConfiguration;

    @Bean
    public AuthenticationManager authenticationManager() throws Exception{
        AuthenticationManager authenticationManager = authenticationConfiguration.getAuthenticationManager();
        return authenticationManager;
    }
}

使用方法照常注入使用即可

@Service
public class LoginServiceImpl implements LoginService {

    @Autowired
    private AuthenticationManager authenticationManager;

    ...
}

2、配置过滤链

@Configuration
public class SecurityConfig {
    @Bean
    SecurityFilterChain filterChain(HttpSecurity http)throws Exception{
        return http.csrf().disable()
                .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
                .and()
                .authorizeRequests()
                .antMatchers("/user/login").anonymous()
                .anyRequest().authenticated()
                .and()
                .addFilterBefore(jwtAuthenticationTokenFilter,UsernamePasswordAuthenticationFilter.class)
                .build();
    }
}