spring security

DefaultLoginPageGeneratingFilter 生成默认的登录页

只有当 登录请求、登录错误、退出登录成功时，才返回登录页面

DefaultLogoutPageGeneratingFilter 退出登录页

只有 logout时返回

spring security 开箱即用，主要是做一些配置，下面是基本的配置，指定登录需要的配置

用户信息：

1. 用户

2. 密码

3. 权限

public interface Authentication extends Principal, Serializable {

	Collection<? extends GrantedAuthority> getAuthorities();

	Object getCredentials();

	Object getDetails();

	Object getPrincipal();

	boolean isAuthenticated();

	void setAuthenticated(boolean isAuthenticated) throws IllegalArgumentException;
}

SecurityContextPersistenceFilter 持久化登录信息

Servlet3SecurityContextHolderAwareRequestWrapper

SecurityContextHolderAwareRequestFilter

认证管理器，管理认证流程

AuthenticationManager接口，对应实现类ProviderManager

针对不同的身份类型 执行   具体的身份认证：

AuthenticationProvider

用户名,密码的方式登录：

AbstractUserDetailsAuthenticationProvider，子类 DaoAuthenticationProvider

系统认证方式 可以存在多个。

多个providerManager 共享同一个 providerManager

AbstractAuthenticationProcessingFilter

过滤器链：

ObjectPostProcessor

SecurityFilterChain，只有一个实现类DefaultSecurityFilterChain

SecurityBuilder  

AbstractSecurityBuilder 

AbstractConfiguredSecurityBuilder 

ProviderManagerBuilder AuthenticationManagerBuilder 

HttpSecurity

HttpSecurityBuilder

WebSecurity

FilterChainProxy

SecurityConfigurer

SecurityConfigurerAdapter

UserDetailsAwareConfigurer

AbstractHttpConfigurer

GlobalAuthenticationConfigurerAdapter

WebSecurityConfigurer

WebSecurityConfigurerAdapter

@Configuration(proxyBeanMethods = false)
@ConditionalOnClass(DefaultAuthenticationEventPublisher.class)
@EnableConfigurationProperties(SecurityProperties.class)
@Import({ SpringBootWebSecurityConfiguration.class, WebSecurityEnablerConfiguration.class,
		SecurityDataConfiguration.class })
public class SecurityAutoConfiguration {

	@Bean
	@ConditionalOnMissingBean(AuthenticationEventPublisher.class)
	public DefaultAuthenticationEventPublisher authenticationEventPublisher(ApplicationEventPublisher publisher) {
		return new DefaultAuthenticationEventPublisher(publisher);
	}

}

WebSecurityConfiguration

AuthenticationConfiguration