SpringBoot 2整合SpringSecurity权限管理（二）配置自定义登录成功和失败处理器

@Slf4j
@Component
public class LoginSuccessHandler extends SavedRequestAwareAuthenticationSuccessHandler {
    @Override
    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws ServletException, IOException {
        log.info("登录成功！");
        /* 默认：会帮我们跳转到上一次请求的页面上 */
        //super.onAuthenticationSuccess(request, response, authentication);
        response.setStatus(HttpServletResponse.SC_OK);
        response.setContentType(MediaType.APPLICATION_JSON_UTF8_VALUE);
        PrintWriter writer = response.getWriter();
        writer.write("登录成功");
        writer.flush();
        writer.close();
    }
}

@Slf4j
@Component
public class LoginFailureHandler extends SimpleUrlAuthenticationFailureHandler {

    @Override
    public void onAuthenticationFailure(HttpServletRequest request, HttpServletResponse response, AuthenticationException exception) throws IOException, ServletException {
        /* 默认：执行重定向或转发到defaultfailureurl(如果设置)，Otherw返回401错误代码 */
        //super.onAuthenticationFailure(request,response,exception)
        log.error("登录错误 [{}] ",exception.getMessage());
        response.setStatus(HttpServletResponse.SC_BAD_REQUEST);
        response.setContentType(MediaType.APPLICATION_JSON_UTF8_VALUE);
        PrintWriter writer = response.getWriter();
        writer.write(exception.getMessage());
        writer.flush();
        writer.close();
    }
}

@Override
protected void configure(HttpSecurity http) throws Exception {
    http.authorizeRequests() //需要授权的请求
        .antMatchers("/login","/home").permitAll() //过滤不需要认证的路径
        .anyRequest().authenticated() //对任何一个请求，都需要认证
        .and() //完成上一个配置，进行下一步配置
        //.httpBasic();
        .formLogin() //配置表单登录
        .loginPage("/login") //设置登录页面
        .successHandler(successHandler)  /* 设置成功处理器 */
        .failureHandler(failureHandler)  /* 设置失败处理器*/
        .and()
        .logout() //登出
        .logoutSuccessUrl("/home"); //设置退出页面
}