*IT Security：足迹第八十四步：idea搭配Spring Security实现角色的权限访问控制

本文链接：https://blog.youkuaiyun.com/yuanyuhuib/article/details/107012959

本文详细介绍了在Spring项目中使用SpringSecurity进行权限管理的方法。包括为何需要设置权限拦截，如何在pom.xml中引入依赖，以及如何通过securityConfig.java文件配置特定接口（如/api/guest）的开放策略。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

idea搭配Spring Security

1.为何要设权限拦截：对后台接口如"/api/guest"选择开放与否

2.如何写pom.xml

		<dependency>
			<groupId>org.springframework.security</groupId>
			<artifactId>spring-security-test</artifactId>
			<scope>test</scope>
		</dependency>

3.如何写securityConfig.java:令"/api/guest"接口开放出去

package com.sany.springjwt;

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.config.http.SessionCreationPolicy;

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter{
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.csrf().disable()
                .authorizeRequests()
                .antMatchers("/api/guest").permitAll()
                .anyRequest()
                .authenticated()
                .and()
                .httpBasic()
                .and()
                .addFilter(new JwtAuthenticateFilter(authenticationManager()))
                .sessionManagement()
                .sessionCreationPolicy(SessionCreationPolicy.STATELESS);
    }
}