# JWT开关
codingapi.security.jwt.enable=true
# JWT密钥 需大于32位的字符串
codingapi.security.jwt.secret-key=codingapi.security.jwt.secretkey
# JWT 有效时间(毫秒) 15分钟有效期 1000*60*15=900000
codingapi.security.jwt.valid-time=900000
# JWT 更换令牌时间(毫秒) 10分钟后更换令牌 1000*60*10=600000
codingapi.security.jwt.rest-time=600000
# JWT AES密钥
codingapi.security.ase-key=QUNEWCQlXiYqJCNYQ1phc0FDRFgkJV4mKiQjWENaYXM=
# JWT AES IV
codingapi.security.ase-iv=QUNYRkdIQEVEUyNYQ1phcw==
# Redis开关
#codingapi.security.redis.enable=true
#spring.data.redis.host=localhost
#spring.data.redis.port=6379
# Security 配置 请求权限拦截地址
codingapi.security.authenticated-urls=/api/**
# Security 配置 登录地址
codingapi.security.login-processing-url=/user/login
# Security 配置 登出地址
codingapi.security.logout-url=/user/logout
# Security 配置 不拦截的地址
codingapi.security.ignore-urls=/open/**
# 禁用CSRF
codingapi.security.disable-csrf=true
# 禁用CORS
codingapi.security.disable-cors=true

默认账户密码

 @Bean
 public UserDetailsService userDetailsService(PasswordEncoder passwordEncoder) {
 String password = passwordEncoder.encode("12345678");
 UserDetails admin = User.withUsername("admin")
 .password(password)
 .roles("ADMIN")
 .build();
 UserDetails user = User.withUsername("user")
 .password(password)
 .roles("USER")
 .build();
 return new InMemoryUserDetailsManager(admin, user);
 }

登录拦截

 @Bean
 public SecurityLoginHandler securityLoginHandler() {
 return new SecurityLoginHandler() {
 @Override
 public void preHandle(HttpServletRequest request, HttpServletResponse response, LoginRequest handler) throws Exception {
 }
 @Override
 public void postHandle(HttpServletRequest request, HttpServletResponse response, LoginRequest handler, Token token) {
 }
 };
}

获取当前用户

 @GetMapping("/user")
 public String user(){
 return TokenContext.current().getUsername();
 }

 @GetMapping("/user")
 public String user(){
 return TokenContext.current().getExtra("user");
 }