{"id":50729,"date":"2023-12-23T10:31:39","date_gmt":"2023-12-23T02:31:39","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/"},"modified":"2023-12-23T15:33:17","modified_gmt":"2023-12-23T07:33:17","slug":"spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/","title":{"rendered":"Spring Security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b"},"content":{"rendered":"<p>\u4eca\u5929\u6211\u4eec\u5c06\u8ba8\u8bba\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236\u548c\u6388\u6743\u7684Spring\u5b89\u5168\u5b9e\u4f8b\u3002\u4f46\u662f\u5728\u9605\u8bfb\u672c\u7bc7\u6587\u7ae0\u4e4b\u524d\uff0c\u8bf7\u5148\u67e5\u770b\u6211\u7684\u4e4b\u524d\u4e00\u7bc7\u5173\u4e8e\u201cSpring 4 Security MVC\u767b\u5f55\u6ce8\u9500\u793a\u4f8b\u201d\u7684\u6587\u7ae0\uff0c\u4ee5\u83b7\u5f97\u5173\u4e8eSpring 4\u5b89\u5168\u7684\u57fa\u672c\u77e5\u8bc6\u3002<\/p>\n<h2>Spring \u5b89\u5168\u89d2\u8272<\/h2>\n<p>\u5728\u8fd9\u7bc7\u6587\u7ae0\u4e2d\uff0c\u6211\u4eec\u5c06\u8ba8\u8bba\u5982\u4f55\u5728Spring Web\u5e94\u7528\u7a0b\u5e8f\u4e2d\u5b9a\u4e49\u3001\u4f7f\u7528\u548c\u7ba1\u7406\u201cUSER\u201d\u3001\u201cADMIN\u201d\u7b49Spring\u5b89\u5168\u89d2\u8272\u3002\u4e0e\u6211\u4e4b\u524d\u7684\u6587\u7ae0\u4e00\u6837\uff0c\u8fd9\u7bc7\u6587\u7ae0\u7684\u793a\u4f8b\u4e5f\u662f\u4f7f\u7528Spring 4 MVC\u5b89\u5168\u4e0e\u5185\u5b58\u5b58\u50a8\u548cSpring Java\u914d\u7f6e\u7279\u6027\u6765\u5f00\u53d1\u5e94\u7528\u7a0b\u5e8f\u3002\u8fd9\u610f\u5473\u7740\u6211\u4eec\u4e0d\u4f1a\u4f7f\u7528web.xml\u6587\u4ef6\uff0c\u4e5f\u4e0d\u4f1a\u7f16\u5199\u4e00\u884cSpring XML\u914d\u7f6e\u3002\u6211\u4eec\u5c06\u4f7f\u7528\u201c\u5185\u5b58\u5b58\u50a8\u201d\u9009\u9879\u6765\u5b58\u50a8\u548c\u7ba1\u7406\u7528\u6237\u51ed\u636e\u3002\u6211\u4eec\u5c06\u4f7f\u7528Spring 4.0.2.RELEASE\u3001Spring STS 3.7 Suite IDE\u3001Spring TC Server 3.1\u4ee5\u53caJava 1.8\u548cMaven\u6784\u5efa\u5de5\u5177\u6765\u5f00\u53d1\u8fd9\u4e2a\u793a\u4f8b\u3002<\/p>\n<h3>Spring Security \u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b<\/h3>\n<ol>\u5728Spring STS\u5957\u4ef6\u4e2d\u521b\u5efa\u4e00\u4e2a\u540d\u4e3a\u201cSpringMVCSecruityMavenRolesApp2\u201d\u7684\u201cSimple Spring Web Maven\u201d\u9879\u76ee\uff0c\u5177\u4f53\u8be6\u60c5\u5982\u4e0b\u3002\u4f7f\u7528\u6211\u4e4b\u524d\u5e16\u5b50\u4e2d\u7684\u540c\u4e00pom.xml\u6587\u4ef6\uff0c\u4f46\u8fdb\u884c\u4ee5\u4e0b\u66f4\u6539\u3002<\/ol>\n<pre class=\"post-pre\"><code>&lt;artifactId&gt;SpringMVCSecruityMavenRolesApp&lt;\/artifactId&gt;\r\n\r\n&lt;build&gt;\r\n  &lt;finalName&gt;SpringMVCSecruityMavenRolesApp&lt;\/finalName&gt;\r\n&lt;\/build&gt;\r\n&lt;\/project&gt;\r\n<\/code><\/pre>\n<ol>\u4f7f\u7528\u6211\u4e4b\u524d\u53d1\u5e03\u7684\u6240\u6709Java\u548cJSP\u6587\u4ef6\u3002\u6211\u4eec\u53ea\u8ba8\u8bba\u8fd9\u91cc\u66f4\u65b0\u6216\u65b0\u6dfb\u52a0\u7684\u5185\u5bb9\u3002<br \/>\n\u66f4\u65b0LoginSecurityConfig.java\u6587\u4ef6\uff0c\u914d\u7f6e\u7528\u6237\u89d2\u8272\uff0c\u5982\u201cUSER\u201d\u548c\u201cADMIN\u201d\u3002<br \/>\nLoginSecurityConfig.java<\/ol>\n<pre class=\"post-pre\"><code>package com.Olivia.spring.secuity.config;\r\n\r\nimport org.springframework.beans.factory.annotation.Autowired;\r\nimport org.springframework.context.annotation.Configuration;\r\nimport org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;\r\nimport org.springframework.security.config.annotation.web.builders.HttpSecurity;\r\nimport org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;\r\nimport org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;\r\n\r\n@Configuration\r\n@EnableWebSecurity\r\npublic class LoginSecurityConfig extends WebSecurityConfigurerAdapter {\r\n\r\n\t@Autowired\r\n\tpublic void configureGlobal(AuthenticationManagerBuilder authenticationMgr) throws Exception {\r\n\t\tauthenticationMgr.inMemoryAuthentication()\r\n\t\t\t.withUser(\"jduser\").password(\"jdu@123\").authorities(\"ROLE_USER\")\r\n\t\t\t.and()\r\n\t\t\t.withUser(\"jdadmin\").password(\"jda@123\").authorities(\"ROLE_USER\",\"ROLE_ADMIN\");\r\n\t}\r\n\t\r\n\t@Override\r\n\tprotected void configure(HttpSecurity http) throws Exception {\r\n\r\n\t\t\r\n\t\thttp.authorizeRequests()\r\n\t\t\t.antMatchers(\"\/homePage\").access(\"hasRole('ROLE_USER') or hasRole('ROLE_ADMIN')\")\r\n\t\t\t.antMatchers(\"\/userPage\").access(\"hasRole('ROLE_USER')\")\r\n\t\t\t.antMatchers(\"\/adminPage\").access(\"hasRole('ROLE_ADMIN')\")\r\n\t\t\t.and()\r\n\t\t\t\t.formLogin().loginPage(\"\/loginPage\")\r\n\t\t\t\t.defaultSuccessUrl(\"\/homePage\")\r\n\t\t\t\t.failureUrl(\"\/loginPage?error\")\r\n\t\t\t\t.usernameParameter(\"username\").passwordParameter(\"password\")\t\t\t\t\r\n\t\t\t.and()\r\n\t\t\t\t.logout().logoutSuccessUrl(\"\/loginPage?logout\"); \r\n\t\t\r\n\t}\r\n}\r\n<\/code><\/pre>\n<p>\u4ee3\u7801\u89e3\u91ca<\/p>\n<ol>\u5728configureGlobal()\u65b9\u6cd5\u4e2d\uff0c\u6211\u4eec\u6dfb\u52a0\u4e86\u4e24\u4e2a\u7528\u6237\uff1a\u4e00\u4e2a\u5177\u6709\u201cROLE_USER\u201d\u89d2\u8272\uff0c\u53e6\u4e00\u4e2a\u5177\u6709\u201cROLE_USER\u201d\u548c\u201cROLE_ADMIN\u201d\u89d2\u8272\u3002\u8fd9\u610f\u5473\u7740\u7b2c\u4e8c\u4e2a\u7528\u6237\u5c06\u5145\u5f53\u7ba1\u7406\u5458\u7528\u6237\u3002\u901a\u8fc7\u8fd9\u79cd\u65b9\u5f0f\uff0c\u6211\u4eec\u53ef\u4ee5\u914d\u7f6e\u4efb\u610f\u6570\u91cf\u7684\u7528\u6237\u548c\u89d2\u8272\u3002<br \/>\n\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528authorities(ROLE)\u6216roles(ROLE)\u65b9\u6cd5\u6765\u914d\u7f6e\u5e94\u7528\u7a0b\u5e8f\u4e2d\u7684\u89d2\u8272\u3002<br \/>\nauthorities()\u548croles()\u65b9\u6cd5\u7684\u533a\u522b\u662f\uff1a<\/ol>\n<ul class=\"post-ul\">\n<li>authorities() needs complete role name like \u201cROLE_USER\u201d<\/li>\n<li>roles() needs role name like \u201cUSER\u201d. It will automatically adds \u201cROLE_\u201d value to this \u201cUSER\u201d role name.<\/li>\n<\/ul>\n<ol>\u5728configure\uff08\uff09\u65b9\u6cd5\u4e2d\uff0c\u6211\u4eec\u5df2\u7ecf\u5b9a\u4e49\u4e86\u5177\u6709\u6240\u9700\u8bbf\u95ee\u89d2\u8272\u7684\u4e0d\u540cURL\u3002<\/ol>\n<pre class=\"post-pre\"><code>antMatchers(\"\/homePage\")\r\n   .access(\"hasRole('ROLE_USER') or hasRole('ROLE_ADMIN')\")\r\n<\/code><\/pre>\n<p>\u8fd9\u6bb5\u4ee3\u7801\u7247\u6bb5\u914d\u7f6e\u4e86\u201c\/homePage\u201d\u9875\u9762\u5bf9USER\u548cADMIN\u89d2\u8272\u90fd\u662f\u53ef\u7528\u7684\u3002<\/p>\n<pre class=\"post-pre\"><code> .antMatchers(\"\/userPage\").access(\"hasRole('ROLE_USER')\")\r\n .antMatchers(\"\/adminPage\").access(\"hasRole('ROLE_ADMIN')\")\r\n<\/code><\/pre>\n<p>\u8fd9\u6bb5\u4ee3\u7801\u7247\u6bb5\u914d\u7f6e\u4e86\u201c\/userPage\u201d\u53ea\u80fd\u88ab\u201cUSER\u201d\u89d2\u8272\u8bbf\u95ee\uff0c\u201c\/adminPage\u201d\u53ea\u80fd\u88ab\u201cADMIN\u201d\u89d2\u8272\u8bbf\u95ee\u3002\u5982\u679c\u5176\u4ed6\u89d2\u8272\u8bbf\u95ee\u8fd9\u4e9b\u9875\u9762\uff0c\u4f1a\u5f97\u5230\u201c403\u8bbf\u95ee\u88ab\u62d2\u7edd\u201d\u9519\u8bef\u6d88\u606f\u3002<\/p>\n<ol>\u5c06LoginController.java\u63a7\u5236\u5668\u6587\u4ef6\u66f4\u65b0\uff0c\u5b9a\u4e49\u5982\u4e0b\u7684\u65b0URL\u8bbf\u95ee\u8def\u5f84\u3002<br \/>\nLoginController.java<\/ol>\n<pre class=\"post-pre\"><code>package com.Olivia.spring.web.controller;\r\n\r\nimport org.springframework.stereotype.Controller;\r\nimport org.springframework.web.bind.annotation.RequestMapping;\r\nimport org.springframework.web.bind.annotation.RequestMethod;\r\nimport org.springframework.web.bind.annotation.RequestParam;\r\nimport org.springframework.web.servlet.ModelAndView;\r\n\r\n@Controller\r\npublic class LoginController {\r\n\r\n\t@RequestMapping(value = { \"\/\"}, method = RequestMethod.GET)\r\n\tpublic ModelAndView welcomePage() {\r\n\t\tModelAndView model = new ModelAndView();\r\n\t\tmodel.setViewName(\"welcomePage\");\r\n\t\treturn model;\r\n\t}\r\n\r\n\t@RequestMapping(value = { \"\/homePage\"}, method = RequestMethod.GET)\r\n\tpublic ModelAndView homePage() {\r\n\t\tModelAndView model = new ModelAndView();\r\n\t\tmodel.setViewName(\"homePage\");\r\n\t\treturn model;\r\n\t}\r\n\t\r\n\t@RequestMapping(value = {\"\/userPage\"}, method = RequestMethod.GET)\r\n\tpublic ModelAndView userPage() {\r\n\t\tModelAndView model = new ModelAndView();\r\n\t\tmodel.setViewName(\"userPage\");\r\n\t\treturn model;\r\n\t}\r\n\t\r\n\t@RequestMapping(value = {\"\/adminPage\"}, method = RequestMethod.GET)\r\n\tpublic ModelAndView adminPage() {\r\n\t\tModelAndView model = new ModelAndView();\r\n\t\tmodel.setViewName(\"adminPage\");\r\n\t\treturn model;\r\n\t}\r\n\t\r\n\t@RequestMapping(value = \"\/loginPage\", method = RequestMethod.GET)\r\n\tpublic ModelAndView loginPage(@RequestParam(value = \"error\",required = false) String error,\r\n\t@RequestParam(value = \"logout\",\trequired = false) String logout) {\r\n\t\t\r\n\t\tModelAndView model = new ModelAndView();\r\n\t\tif (error != null) {\r\n\t\t\tmodel.addObject(\"error\", \"Invalid Credentials provided.\");\r\n\t\t}\r\n\r\n\t\tif (logout != null) {\r\n\t\t\tmodel.addObject(\"message\", \"Logged out from JournalDEV successfully.\");\r\n\t\t}\r\n\r\n\t\tmodel.setViewName(\"loginPage\");\r\n\t\treturn model;\r\n\t}\r\n\r\n}\r\n<\/code><\/pre>\n<p>\u4ee3\u7801\u8bf4\u660e\u9664\u4e86\u4e4b\u524d\u7684\u793a\u4f8b\u5916\uff0c\u8fd9\u91cc\u6211\u4eec\u6dfb\u52a0\u4e86\u4e24\u4e2a\u65b0\u7684URL\u3002<\/p>\n<ol>\u201c\/\u7528\u6237\u9875\u9762\u201d\u7528\u4e8e\u7528\u6237\u89d2\u8272\u8bbf\u95ee\u548c\u6267\u884c\u666e\u901a\u7528\u6237\u6d3b\u52a8\u3002<br \/>\n\u201c\/\u7ba1\u7406\u5458\u9875\u9762\u201d\u7528\u4e8e\u7ba1\u7406\u5458\u89d2\u8272\u8bbf\u95ee\u548c\u6267\u884c\u7ba1\u7406\u5458\u7528\u6237\u6d3b\u52a8\u3002\u7ba1\u7406\u5458\u89d2\u8272\u4e5f\u53ef\u4ee5\u8bbf\u95ee\u201c\/\u7528\u6237\u9875\u9762\u201dURL\u3002<br \/>\n\u66f4\u65b0\u4e86homePage.jsp\u6587\u4ef6\u4ee5\u63d0\u4f9b\u7528\u6237\u548c\u7ba1\u7406\u5458\u89d2\u8272\u7684\u7279\u5b9a\u6d3b\u52a8\u3002<br \/>\nhomePage.jsp<\/ol>\n<pre class=\"post-pre\"><code>&lt;%@taglib prefix=\"c\" uri=\"https:\/\/java.sun.com\/jsp\/jstl\/core\"%&gt;\r\n&lt;a href=\"${pageContext.request.contextPath}\/userPage\"&gt;JD User&lt;\/a&gt; | &lt;a href=\"${pageContext.request.contextPath}\/adminPage\"&gt;JD Admin&lt;\/a&gt; | &lt;a href=\"javascript:document.getElementById('logout').submit()\"&gt;Logout&lt;\/a&gt;\r\n\r\n&lt;h3&gt;Welcome to JournalDEV Tutorials&lt;\/h3&gt;\r\n&lt;ul&gt;\r\n   &lt;li&gt;Java 8 tutorial&lt;\/li&gt;\r\n   &lt;li&gt;Spring tutorial&lt;\/li&gt;\r\n   &lt;li&gt;Gradle tutorial&lt;\/li&gt;\r\n   &lt;li&gt;BigData tutorial&lt;\/li&gt;\r\n&lt;\/ul&gt;\r\n\r\n&lt;c:url value=\"\/logout\" var=\"logoutUrl\" \/&gt;\r\n&lt;form id=\"logout\" action=\"${logoutUrl}\" method=\"post\" &gt;\r\n  &lt;input type=\"hidden\" name=\"${_csrf.parameterName}\" value=\"${_csrf.token}\" \/&gt;\r\n&lt;\/form&gt;\r\n<\/code><\/pre>\n<p>\u5728\u8fd9\u91cc\uff0c\u6211\u4eec\u5728\u9876\u90e8\u6846\u67b6\u4e0a\u589e\u52a0\u4e86\u4e09\u4e2a\u7c7b\u4f3c\u83dc\u5355\u9009\u9879\u3002 &#8220;\u6ce8\u9500&#8221;\u5728\u6211\u4e4b\u524d\u7684\u5e16\u5b50\u4e2d\u5df2\u7ecf\u8ba8\u8bba\u8fc7\u4e86\u3002\u65b0\u6dfb\u52a0\u7684\u4e24\u4e2a\u94fe\u63a5\u5206\u522b\u662f\uff1a<\/p>\n<ol>JD \u7528\u6237\uff1a\u53ef\u7531\u201c\u7528\u6237\u201d\u548c\u201c\u7ba1\u7406\u5458\u201d\u89d2\u8272\u8bbf\u95ee<br \/>\nJD \u7ba1\u7406\u5458\uff1a\u4ec5\u9650\u201c\u7ba1\u7406\u5458\u201d\u89d2\u8272\u8bbf\u95ee<\/ol>\n<p>\u5728\u5b9e\u65f6\u5e94\u7528\u4e2d\uff0c\u6211\u4eec\u53ea\u4f1a\u5c06\u201cJD\u7528\u6237\u201d\u94fe\u63a5\u663e\u793a\u4e3a\u201c\u7528\u6237\u201d\u89d2\u8272\uff0c\u5e76\u9690\u85cf\u201cJD\u7ba1\u7406\u5458\u201d\u94fe\u63a5\u3002\u4e3a\u4e86\u6d4b\u8bd5\u201c\u7528\u6237\u201d\u89d2\u8272\u662f\u5426\u53ef\u4ee5\u8bbf\u95ee\u5e76\u67e5\u770b\u8be6\u7ec6\u7684\u9519\u8bef\u4fe1\u606f\uff0c\u6211\u4eec\u6ca1\u6709\u9690\u85cf\u6b64\u94fe\u63a5\u300220. \u6dfb\u52a0\u65b0\u7684adminPage.jsp\u6587\u4ef6\u4f5c\u4e3a\u201c\u7ba1\u7406\u5458\u201d\u89d2\u8272\u7684\u4e3b\u9875\u3002<\/p>\n<pre class=\"post-pre\"><code>&lt;%@taglib prefix=\"c\" uri=\"https:\/\/java.sun.com\/jsp\/jstl\/core\"%&gt;\r\n&lt;h3&gt;Welcome to JournalDEV Tutorials&lt;\/h3&gt;\r\n&lt;h3&gt;Admin Page&lt;\/h3&gt;\r\n\r\n&lt;c:url value=\"\/logout\" var=\"logoutUrl\" \/&gt;\r\n&lt;form id=\"logout\" action=\"${logoutUrl}\" method=\"post\" &gt;\r\n  &lt;input type=\"hidden\" name=\"${_csrf.parameterName}\" value=\"${_csrf.token}\" \/&gt;\r\n&lt;\/form&gt;\r\n&lt;c:if test=\"${pageContext.request.userPrincipal.name != null}\"&gt;\r\n\t&lt;a href=\"javascript:document.getElementById('logout').submit()\"&gt;Logout&lt;\/a&gt;\r\n&lt;\/c:if&gt;\r\n<\/code><\/pre>\n<ol>\u65b0\u589euserPage.jsp\u6587\u4ef6\u4f5c\u4e3a\u201cUSER\u201d\u89d2\u8272\u7684\u4e3b\u9875\u3002<br \/>\nuserPage.jsp<\/ol>\n<pre class=\"post-pre\"><code>&lt;%@taglib prefix=\"c\" uri=\"https:\/\/java.sun.com\/jsp\/jstl\/core\"%&gt;\r\n&lt;h3&gt;Welcome to JournalDEV Tutorials&lt;\/h3&gt;\r\n&lt;h3&gt;User Page&lt;\/h3&gt;\r\n\r\n&lt;c:url value=\"\/logout\" var=\"logoutUrl\" \/&gt;\r\n&lt;form id=\"logout\" action=\"${logoutUrl}\" method=\"post\" &gt;\r\n  &lt;input type=\"hidden\" name=\"${_csrf.parameterName}\" value=\"${_csrf.token}\" \/&gt;\r\n&lt;\/form&gt;\r\n&lt;c:if test=\"${pageContext.request.userPrincipal.name != null}\"&gt;\r\n\t&lt;a href=\"javascript:document.getElementById('logout').submit()\"&gt;Logout&lt;\/a&gt;\r\n&lt;\/c:if&gt;\r\n<\/code><\/pre>\n<p>\u6211\u4eec\u73b0\u5728\u5df2\u7ecf\u5b8c\u6210\u4e86\u5e94\u7528\u7a0b\u5e8f\u7684\u5f00\u53d1\u3002\u73b0\u5728\u662f\u65f6\u5019\u770b\u770b\u6211\u4eec\u9879\u76ee\u7684\u6700\u7ec8\u7ed3\u6784\u5e76\u6d4b\u8bd5\u5e94\u7528\u7a0b\u5e8f\u4e86\u300226. \u6700\u7ec8\u9879\u76ee\u7ed3\u6784\u5982\u4e0b\uff1a<\/p>\n<h3>Spring Security \u89d2\u8272\u793a\u4f8b\u5e94\u7528\u6d4b\u8bd5<\/h3>\n<ol>\u5728Spring STS IDE\u4e2d\uff0c\u53f3\u952e\u5355\u51fb\u9879\u76ee\u5e76\u9009\u62e9\u201cRun AS >> Run on Server\u201d\u9009\u9879\u3002<br \/>\n\u5c06\u4f1a\u8bbf\u95ee\u9ed8\u8ba4\u7684\u5e94\u7528\u6b22\u8fce\u9875\u9762\uff0c\u5982\u4e0b\u6240\u793a\uff1a3. \u5355\u51fb\u201cLogin to JournalDEV\u201d\u94fe\u63a5\u3002\u73b0\u5728\u60a8\u5904\u4e8e\u767b\u5f55\u9875\u9762\u3002<br \/>\n5. \u4f7f\u7528\u201cUSER\u201d\u89d2\u8272\u51ed\u636e\u9996\u6b21\u767b\u5f55\uff1a<br \/>\n\u7528\u6237\u540d\uff1ajduser \u5bc6\u7801\uff1ajdu@123 \u73b0\u5728\u6211\u4eec\u5c06\u770b\u5230\u5e94\u7528\u7a0b\u5e8f\u9996\u9875\u67093\u4e2a\u83dc\u5355\u9009\u9879\uff1a\u201cJD User\u201d\uff0c\u201cJD Admin\u201d\u548c\u201cLogout\u201d\u3002\u5355\u51fb\u201cJD User\u201d\u94fe\u63a5\u3002\u7531\u4e8e\u6211\u4eec\u4f7f\u7528\u201cUSER\u201d\u89d2\u8272\u51ed\u636e\u767b\u5f55\u5e94\u7528\u7a0b\u5e8f\uff0c\u6211\u4eec\u53ef\u4ee5\u8bbf\u95ee\u6b64\u94fe\u63a5\uff0c\u5982\u4e0b\u6240\u793a\u3002\u53ea\u9700\u5728Spring STS IDE\u4e2d\u4f7f\u7528\u5411\u540e\u7bad\u5934\uff0c\u8fd9\u6b21\u5355\u51fb\u201cJD Admin\u201d\u94fe\u63a5\u3002\u7531\u4e8e\u6211\u4eec\u4f7f\u7528\u201cUSER\u201d\u89d2\u8272\u51ed\u636e\u767b\u5f55\uff0c\u6211\u4eec\u65e0\u6cd5\u8bbf\u95ee\u6b64\u94fe\u63a5\u3002\u8fd9\u5c31\u662f\u4e3a\u4ec0\u4e48\u6211\u4eec\u770b\u5230\u6b64\u9519\u8bef\u6d88\u606f\uff1a\u201c403 Access is denied\u201d\u30029. \u73b0\u5728\u6ce8\u9500\u5e76\u518d\u6b21\u4f7f\u7528ADMIN\u89d2\u8272\u51ed\u636e\u767b\u5f55<br \/>\n\u7528\u6237\u540d\uff1ajdadmin \u5bc6\u7801\uff1ajda@123 \u8fd9\u6b21\u6211\u4eec\u53ef\u4ee5\u6210\u529f\u8bbf\u95ee\u201cJD Admin\u201d\u94fe\u63a5\uff0c\u5982\u4e0b\u6240\u793a\u3002\u6d4b\u8bd5\u201cLogout\u201d\u94fe\u63a5\u4ee5\u9000\u51fa\u5e94\u7528\u7a0b\u5e8f\u3002<\/ol>\n<p>\u8fd9\u5c31\u662f\u5173\u4e8eSpring\u5b89\u5168\u89d2\u8272\u793a\u4f8b\u7684\u5168\u90e8\u5185\u5bb9\uff0c\u7528\u4e8e\u63d0\u4f9b\u5bf9Web\u5e94\u7528\u7a0b\u5e8f\u9875\u9762\u7684\u6388\u6743\u8bbf\u95ee\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4eca\u5929\u6211\u4eec\u5c06\u8ba8\u8bba\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236\u548c\u6388\u6743\u7684Spring\u5b89\u5168\u5b9e\u4f8b\u3002\u4f46\u662f\u5728\u9605\u8bfb\u672c\u7bc7\u6587\u7ae0\u4e4b\u524d\uff0c\u8bf7\u5148\u67e5\u770b\u6211\u7684\u4e4b\u524d\u4e00\u7bc7\u5173\u4e8e [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-50729","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v21.5) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Spring Security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/spring-security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Spring Security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b\" \/>\n<meta property=\"og:description\" content=\"\u4eca\u5929\u6211\u4eec\u5c06\u8ba8\u8bba\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236\u548c\u6388\u6743\u7684Spring\u5b89\u5168\u5b9e\u4f8b\u3002\u4f46\u662f\u5728\u9605\u8bfb\u672c\u7bc7\u6587\u7ae0\u4e4b\u524d\uff0c\u8bf7\u5148\u67e5\u770b\u6211\u7684\u4e4b\u524d\u4e00\u7bc7\u5173\u4e8e [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/spring-security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-12-23T02:31:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-12-23T07:33:17+00:00\" \/>\n<meta name=\"author\" content=\"\u6e05, \u626c\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u6e05, \u626c\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/\",\"name\":\"Spring Security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-12-23T02:31:39+00:00\",\"dateModified\":\"2023-12-23T07:33:17+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Spring Security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461\",\"name\":\"\u6e05, \u626c\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g\",\"caption\":\"\u6e05, \u626c\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Spring Security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/spring-security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b\/","og_locale":"zh_CN","og_type":"article","og_title":"Spring Security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b","og_description":"\u4eca\u5929\u6211\u4eec\u5c06\u8ba8\u8bba\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u63a7\u5236\u548c\u6388\u6743\u7684Spring\u5b89\u5168\u5b9e\u4f8b\u3002\u4f46\u662f\u5728\u9605\u8bfb\u672c\u7bc7\u6587\u7ae0\u4e4b\u524d\uff0c\u8bf7\u5148\u67e5\u770b\u6211\u7684\u4e4b\u524d\u4e00\u7bc7\u5173\u4e8e [&hellip;]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/spring-security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-12-23T02:31:39+00:00","article_modified_time":"2023-12-23T07:33:17+00:00","author":"\u6e05, \u626c","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u6e05, \u626c","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"1 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/","name":"Spring Security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-12-23T02:31:39+00:00","dateModified":"2023-12-23T07:33:17+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"Spring Security\u57fa\u4e8e\u89d2\u8272\u7684\u8bbf\u95ee\u6388\u6743\u793a\u4f8b"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/cb5556d2501da73d864cac945e8d9461","name":"\u6e05, \u626c","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/32a4239de8ff29adace466261d309424a1e5fe9f7e3036bf89fe03f2e3dbe717?s=96&d=mm&r=g","caption":"\u6e05, \u626c"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/qingyang\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/spring-security%e5%9f%ba%e4%ba%8e%e8%a7%92%e8%89%b2%e7%9a%84%e8%ae%bf%e9%97%ae%e6%8e%88%e6%9d%83%e7%a4%ba%e4%be%8b\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/50729","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=50729"}],"version-history":[{"count":1,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/50729\/revisions"}],"predecessor-version":[{"id":50802,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/50729\/revisions\/50802"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=50729"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=50729"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=50729"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}