SpringBoot-08 SpringSecurity

<dependency>
    <groupId>org.springframework.bootgroupId>
    <artifactId>spring-boot-starter-thymeleafartifactId>
dependency>

spring.thymeleaf.cache=false

<dependency>
    <groupId>org.springframework.bootgroupId>
    <artifactId>spring-boot-starter-securityartifactId>
dependency>

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .antMatchers("/").permitAll()                //对于主页面都可以登录
                .antMatchers("/level1/**").hasRole("vip1")   //对于level1文件夹下的页面需要vip1才能登录
                .antMatchers("/level2/**").hasRole("vip2")   //对于level2文件夹下的页面需要vip2才能登录
                .antMatchers("/level3/**").hasRole("vip3");  //对于level3文件夹下的页面需要vip3才能登录
        //如果没有权限，进入登录页面，这是Security内部自带的
        http.formLogin();
    }
}

//认证
@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    auth.inMemoryAuthentication().passwordEncoder(new BCryptPasswordEncoder())
        .withUser("zc").password(new BCryptPasswordEncoder().encode("123456")).roles("vip1","vip2")
        .and()
        .withUser("root").password(new BCryptPasswordEncoder().encode("123456")).roles("vip1","vip2","vip3")
        .and()
        .withUser("test").password(new BCryptPasswordEncoder().encode("123456")).roles("vip3");
}

@Override
protected void configure(HttpSecurity http) throws Exception {
    http.authorizeRequests()
        .antMatchers("/").permitAll()                //对于主页面都可以登录
        .antMatchers("/level1/**").hasRole("vip1")   //对于level1文件夹下的页面需要vip1才能登录
        .antMatchers("/level2/**").hasRole("vip2")   //对于level2文件夹下的页面需要vip2才能登录
        .antMatchers("/level3/**").hasRole("vip3");  //对于level3文件夹下的页面需要vip3才能登录
    //如果没有权限，进入登录页面，这是Security内部自带的
    http.formLogin();

    //注销功能
    http.logout().logoutSuccessUrl("/");
}

<div class="right menu">
    
    <a class="item" th:href="@{/toLogin}">
        <i class="address card icon">i> 登录
    a>
    <a class="item" th:href="@{/logout}">
        <i class="address card icon">i> 注销
    a>
div>

<dependency>
    <groupId>org.thymeleaf.extrasgroupId>
    <artifactId>thymeleaf-extras-springsecurity4artifactId>
    <version>3.0.2.RELEASEversion>
dependency>

xmlns:th="http://www.thymeleaf.org" 
xmlns:sec="http://www.thymeleaf.org/thymeleaf-extras-springsecurity4">

<div class="right menu">
    
    <div sec:authorize="!isAuthenticated()">
        <a class="item" th:href="@{/toLogin}">
            <i class="address card icon">i> 登录
        a>
    div>
    <div sec:authorize="isAuthenticated()">
        <a class="item" >
            用户名：<span sec:authentication="name">span>
        a>
        <a class="item" th:href="@{/logout}">
            <i class="address card icon">i> 注销
        a>
    div>
div>   

http.formLogin().loginPage("/toLogin");

<form th:action="@{/toLogin}" method="post">

<div class="field">
    <input type="checkbox" name="remember">
div>

http.rememberMe().rememberMeParameter("remember");