SpringBoot-SBA增加Security机制

packagecom.config;
importde.codecentric.boot.admin.server.config.AdminServerProperties;
importorg.springframework.context.annotation.Configuration;
importorg.springframework.security.config.annotation.web.builders.HttpSecurity;
importorg.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
importorg.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler;
importorg.springframework.security.web.csrf.CookieCsrfTokenRepository;
@ConfigurationpublicclassSecuritySecureConfigextendsWebSecurityConfigurerAdapter {
privatefinalStringadminContextPath;
publicSecuritySecureConfig(AdminServerPropertiesadminServerProperties) {
this.adminContextPath=adminServerProperties.getContextPath();
    }
@Overrideprotectedvoidconfigure(HttpSecurityhttp) throwsException {
SavedRequestAwareAuthenticationSuccessHandlersuccessHandler=newSavedRequestAwareAuthenticationSuccessHandler();
successHandler.setTargetUrlParameter("redirectTo");
successHandler.setDefaultTargetUrl(adminContextPath+"/");
http.authorizeRequests()
                .antMatchers(adminContextPath+"/assets/**").permitAll()
                .antMatchers(adminContextPath+"/login").permitAll()
                .antMatchers(adminContextPath+"/actuator/health").permitAll()
                .anyRequest().authenticated()
                .and()
                .formLogin().loginPage(adminContextPath+"/login").successHandler(successHandler).and()
                .logout().logoutUrl(adminContextPath+"/logout").and()
                .httpBasic().and()
                .csrf()
                .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())
                .ignoringAntMatchers(
adminContextPath+"/instances",
adminContextPath+"/actuator/**"                );
    }
}