十九、实战开发 uni-app x 项目（仿京东）- 后端用户认证和授权功能

十八、实战开发 uni-app x 项目（仿京东）- 后端生成API文档-优快云博客接着上一篇十八、实战开发 uni-app x 项目（仿京东）- 后端生成API文档-优快云博客，我们加上用户的认证和授权。在项目中集成Spring Security和JWT（JSON Web Token）可以实现用户认证和授权功能。

1. 添加依赖

步骤1: 修改pom.xml文件

• 打开pom.xml文件，添加Spring Security和JWT相关的依赖：

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
    <groupId>io.jsonwebtoken</groupId>
    <artifactId>jjwt-api</artifactId>
    <version>0.12.3</version>
</dependency>
<dependency>
    <groupId>io.jsonwebtoken</groupId>
    <artifactId>jjwt-impl</artifactId>
    <version>0.12.3</version>
    <scope>runtime</scope>
</dependency>
<dependency>
    <groupId>io.jsonwebtoken</groupId>
    <artifactId>jjwt-jackson</artifactId>
    <version>0.12.3</version>
    <scope>runtime</scope>
</dependency>

• 保存文件后，Maven会自动下载依赖。

---

2. 配置Spring Security

步骤1: 创建Spring Security配置类

• 在com.jd.jdmall.config包下创建SecurityConfig.java文件：

package com.jd.jdmall.config;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfiguration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.http.SessionCreationPolicy;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;

@Configuration
@EnableWebSecurity
public class SecurityConfig {

    private final JwtAuthenticationFilter jwtAuthenticationFilter;

    public SecurityConfig(JwtAuth