packageorg.gaocl.demo.service;
importlombok.extern.slf4j.Slf4j;
importorg.gaocl.demo.Entity.MyUser;
importorg.gaocl.demo.dao.UserDao;
importorg.springframework.beans.factory.annotation.Autowired;
importorg.springframework.security.core.userdetails.User;
importorg.springframework.security.core.userdetails.UserDetails;
importorg.springframework.security.core.userdetails.UserDetailsService;
importorg.springframework.security.core.userdetails.UsernameNotFoundException;
importorg.springframework.security.crypto.password.PasswordEncoder;
importorg.springframework.stereotype.Service;
@Service@Slf4jpublicclassUserServiceimplementsUserDetailsService {
@AutowiredprivateUserDaouserDao;
@AutowiredprivatePasswordEncoderpasswordEncoder;
publicintsave(MyUseruser){
user.setPassword(passwordEncoder.encode(user.getPassword()));
returnuserDao.save(user);
    }
@OverridepublicUserDetailsloadUserByUsername(Stringusername) throwsUsernameNotFoundException {
MyUsermyUser=userDao.findByName(username);
//        log.info(myUser.toString());if(myUser==null){
thrownewUsernameNotFoundException("用户名不存在");
        }
returnUser.builder()
                .username(myUser.getUsername())
                .password(myUser.getPassword())
                .roles("USER", "ADMIN") //roles(Arrays.asList("").toArray(new String[]{}))                .build();
    }
}

packageorg.gaocl.demo.config;
importorg.springframework.beans.factory.annotation.Autowired;
importorg.springframework.context.annotation.Bean;
importorg.springframework.context.annotation.Configuration;
importorg.springframework.security.config.annotation.web.builders.HttpSecurity;
importorg.springframework.security.config.annotation.web.configuration.WebSecurityCustomizer;
importorg.springframework.security.crypto.password.PasswordEncoder;
importorg.springframework.security.web.SecurityFilterChain;
@ConfigurationpublicclassSecurityConfig {
@AutowiredprivatePasswordEncoderpasswordEncoder;
@BeanpublicSecurityFilterChainfilterChain(HttpSecuritysecurity) throwsException {
//给请求加所有权限//form login 配置登录页的//logoutreturnsecurity                .authorizeHttpRequests()
                .anyRequest()
                .authenticated() //跳转登录页面 permitAll() 放开请求，不用进去登录页                .and()
                .formLogin()//postmapping                .successHandler(newSucessLogin())//这个与defaultSuccessUrl是冲突的                .failureHandler(newFailLogin())
                .loginPage("/login") //这个必须要写getmapping//  .defaultSuccessUrl("/index") //这个就相当于实现了 //redirect                .permitAll()
                .and()
                .logout()//这个post要自己写                .logoutUrl("/logout")
                .logoutSuccessUrl("/login")
                .and()
                .csrf()
                .disable()
                .build();
    }
@BeanpublicWebSecurityCustomizerwebSecurityCustomizer(){
return  (web)->web.ignoring()
                .antMatchers("/resign")
                .antMatchers("/sign")
                .regexMatchers("/css/.*")
                .regexMatchers("/js/.*");
    }
}