如果密码不正确，则登录尝试将存储到数据库中

private static final int MAX_ATTEMPTS = 3;

  @Override
  public UserDetails loadUserAndCheckLogin(String email, String enteredPassword) {
    Members members = membersDao.findByEmail(email);
    if (members == null) {
      //Create Error Message for User
      return null;
    }
    if (members.getAttempts() > MAX_ATTEMPTS) {
      //Create Error Message for User
      return null;
    }
    if (members.getPassword().equals(enteredPassword)) {
      Set<GrantedAuthority> authorities = new HashSet<>();
      Role role = members.getRoles();
      authorities.add(new SimpleGrantedAuthority(role.getRole()));
      members.setAttempts(0);
      membersDao.save(members);
      return new User(members.getEmail(), members.getPassword(), authorities);
    } else {
      int attempts = members.getAttempts();
      members.setAttempts(++attempts);
      membersDao.save(members);
      //Create Error Message for User
      return null;
    }
  }

顺便说一句。我不确定您是否确实要创建一个新的“ SimpleGrantedAuthority”和“ User”，或者是否要从数据库中加载现有的。

并且您应该使用哈希作为密码。

Login controller
@PostMapping("/login")
    public ResponseEntity<?> login(@RequestBody LoginMembers loginMembers) throws AuthenticationException, IOException, ServletException {

        final Authentication authentication = authenticationManager.authenticate(
                new UsernamePasswordAuthenticationToken(
                        loginMembers.getEmail(),
                        loginMembers.getPassword()
                )
        );
        SecurityContextHolder.getContext().setAuthentication(authentication);
        final String token = jwtTokenUtil.generateToken(authentication);
        logger.info("You are log in successfully with token");
        return ResponseEntity.ok(new AuthTokenRequest(token));
    }

回答来源：Stack Overflow