Spring Security 教程

Spring Security 是一个提供身份验证、授权和防护常见攻击的框架。它为确保命令式和反应式应用程序的安全提供一流的支持，是确保基于 Spring 的应用程序安全的事实标准。

谁适合阅读？

本教程适合需要有一定 Java 和 Spring Security 知识，需要学习 Spring Security 框架的读者。通过学习该框架，读者可以快速了解什么是 Spring Security，以及怎样利用 Spring Security 提供身份验证、授权和防护常见操作。

需要具备的知识

• Java

• XML

• IDEA

• Tomcat

• Spring
  

版本信息

本教程将使用 Spring Boot 来进行演示。其中，Spring Security 版本为 6.3.7，JDK 版本为 17。完整的 maven 依赖如下：

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" 
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <parent>
       <groupId>org.springframework.boot</groupId>
       <artifactId>spring-boot-starter-parent</artifactId>
       <version>3.3.9</version>
       <relativePath/> <!-- lookup parent from repository -->
    </parent>
    <groupId>com.hxstrive.spring_security</groupId>
    <artifactId>spring_security_demo1</artifactId>
    <version>0.0.1-SNAPSHOT</version>
    <name>spring_security_demo1</name>
    <description>Demo project for Spring Boot</description>

    <properties>
       <java.version>17</java.version>
    </properties>

    <dependencies>
       <dependency>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-starter-security</artifactId>
       </dependency>
       <dependency>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-starter-web</artifactId>
       </dependency>

       <dependency>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-devtools</artifactId>
          <scope>runtime</scope>
          <optional>true</optional>
       </dependency>
       <dependency>
          <groupId>org.projectlombok</groupId>
          <artifactId>lombok</artifactId>
          <optional>true</optional>
       </dependency>
       <dependency>
          <groupId>org.springframework.boot</groupId>
          <artifactId>spring-boot-starter-test</artifactId>
          <scope>test</scope>
       </dependency>
       <dependency>
          <groupId>org.springframework.security</groupId>
          <artifactId>spring-security-test</artifactId>
          <scope>test</scope>
       </dependency>
    </dependencies>

    <build>
       <plugins>
          <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-compiler-plugin</artifactId>
             <configuration>
                <annotationProcessorPaths>
                   <path>
                      <groupId>org.projectlombok</groupId>
                      <artifactId>lombok</artifactId>
                   </path>
                </annotationProcessorPaths>
             </configuration>
          </plugin>
          <plugin>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-maven-plugin</artifactId>
             <configuration>
                <excludes>
                   <exclude>
                      <groupId>org.projectlombok</groupId>
                      <artifactId>lombok</artifactId>
                   </exclude>
                </excludes>
             </configuration>
          </plugin>
       </plugins>
    </build>

</project>

参考资料

• Spring Security 中文文档 :: Spring Security Reference

• Spring Security :: Spring Security

• Java Doc (spring-security-docs 6.3.9 API)