Spring Security 构建rest服务 rememberme 记住我 Spring Security 构建rest服务实现rememberme 记住我功能

//记住我秒数配置
private int rememberMeSeconds = 10;齐活
package com.imooc.s@Configuration //这是一个配置
public class BrowserSecurityConfig extends WebSecurityConfigurerAdapter{
  //读取用户配置的登录页配置
  @Autowired
  private SecurityProperties securityProperties;
  //自定义的登录成功后的处理器
  @Autowired
  private AuthenticationSuccessHandler imoocAuthenticationSuccessHandler;
  //自定义的认证失败后的处理器
  @Autowired
  private AuthenticationFailureHandler imoocAuthenticationFailureHandler;
  //数据源
  @Autowired
  private DataSource dataSource;
  @Autowired
  private UserDetailsService userDetailsService;
  //注意是org.springframework.security.crypto.password.PasswordEncoder
  @Bean
  public PasswordEncoder passwordencoder(){
    //BCryptPasswordEncoder implements PasswordEncoder
    return new BCryptPasswordEncoder();
  }
  /**
   * 记住我TokenRepository配置，在登录成功后执行
   * 登录成功后往数据库存token的
   * @Description: 记住我TokenRepository配置
   * @param @return  JdbcTokenRepositoryImpl
   * @return PersistentTokenRepository 
   * @throws
   * @author lihaoyang
   * @date 2018年3月5日
   */
  @Bean
  public PersistentTokenRepository persistentTokenRepository(){
    JdbcTokenRepositoryImpl jdbcTokenRepository = new JdbcTokenRepositoryImpl();
    jdbcTokenRepository.setDataSource(dataSource);
    //启动时自动生成相应表，可以在JdbcTokenRepositoryImpl里自己执行CREATE_TABLE_SQL脚本生成表
    jdbcTokenRepository.setCreateTableOnStartup(true);
    return jdbcTokenRepository;
  }
  //版本二：可配置的登录页
  @Override
  protected void configure(HttpSecurity http) throws Exception {
    //验证码过滤器
    ValidateCodeFilter validateCodeFilter = new ValidateCodeFilter();
    //验证码过滤器中使用自己的错误处理
    validateCodeFilter.setAuthenticationFailureHandler(imoocAuthenticationFailureHandler);
    //配置的验证码过滤url
    validateCodeFilter.setSecurityProperties(securityProperties);
    validateCodeFilter.afterPropertiesSet();
    //实现需要认证的接口跳转表单登录,安全=认证+授权
    //http.httpBasic() //这个就是默认的弹框认证
    //
    http //把验证码过滤器加载登录过滤器前边
      .addFilterBefore(validateCodeFilter, UsernamePasswordAuthenticationFilter.class)
      //表单认证相关配置
      .formLogin() 
        .loginPage("/authentication/require") //处理用户认证BrowserSecurityController
        //登录过滤器UsernamePasswordAuthenticationFilter默认登录的url是"/login"，在这能改
        .loginProcessingUrl("/authentication/form") 
        .successHandler(imoocAuthenticationSuccessHandler)//自定义的认证后处理器
        .failureHandler(imoocAuthenticationFailureHandler) //登录失败后的处理
      .and()
      //记住我相关配置  
      .rememberMe()
        .tokenRepository(persistentTokenRepository())//TokenRepository，登录成功后往数据库存token的
        .tokenValiditySeconds(securityProperties.getBrowser().getRememberMeSeconds())//记住我秒数
        .userDetailsService(userDetailsService) //记住我成功后，调用userDetailsService查询用户信息
      .and()
      //授权相关的配置 
      .authorizeRequests() 
        // /authentication/require：处理登录，securityProperties.getBrowser().getLoginPage():用户配置的登录页
        .antMatchers("/authentication/require",
        securityProperties.getBrowser().getLoginPage(),//放过登录页不过滤，否则报错
        "/verifycode/image").permitAll() //验证码
        .anyRequest()    //任何请求
        .authenticated()  //都需要身份认证
      .and()
        .csrf().disable() //关闭csrf防护
      ;  
  }
}ecurity.browser;

spring.datasource.driver-class-name=com.mysql.jdbc.Driver
spring.datasource.url=jdbc:mysql://127.0.0.1:3306/imooc-demo
spring.datasource.username=root
spring.datasource.password=root