jxchallenger的专栏

学习Spring Security时碰到这个问题官方原文：18.5.3 Logging OutAdding CSRF will update the LogoutFilter to only use HTTP POST. This ensures that log out requires a CSRF token and that a ma

在表单中添加隐藏域Spring Security默认启用CSRF 防御官方原文：When should you use CSRF protection? Our recommendation is to use CSRF protection for any request that could be processed by a browser by

10.3 Password EncodingSpring Security’s PasswordEncoder interface is used to support the use of passwords which are encoded in some way in persistent storage. You should never store passwo

1、创建RoleHierarchy /** * 角色继承关系 * @return */ @Bean(name = "roleHierarchy") public RoleHierarchy getRoleHierarchyImpl() { RoleHierarchyImpl roleHierarchy = new RoleHierarchyImpl(); roleHi...

#当前用户名${#authentication.name}#当前用户的xxx属性${#authentication.principal.xxx} 

org.springframework.security.config.annotation.authentication.configuration.AuthenticationConfigurationorg.springframework.security.config.annotation.web.configuration.WebSecurityConfiguration