spring security配置

SecurityBuilder

public interface SecurityBuilder<O> {
    O build() throws Exception;
}

这个Builder的重要子类

Builder.png

• AuthenticationManagerBuilder要build的对象是AuthenticationManager
• WebSecurity要build的对象是Filter
• HttpSecurity要build的对象是DefaultSecurityFilterChain

SecurityConfigurer

public interface SecurityConfigurer<O, B extends SecurityBuilder<O>> {
     //Initialize the {@link SecurityBuilder}. 
    void init(B builder) throws Exception;
    //Configure the {@link SecurityBuilder} by setting the necessary properties on the
    void configure(B builder) throws Exception;
}

这个SecurityConfigurer重要子类就是WebSecurityConfigurerAdapter
spring security的配置主要是由WebSecurityConfiguration实现的，WebSecurityConfigurerAdapter或者其子类被添加到WebSecurity的属性private final LinkedHashMap<Class<? extends SecurityConfigurer<O, B>>, List<SecurityConfigurer<O, B>>> configurers = new LinkedHashMap<>();中，在WebSecurityConfigurerAdapter配置WebSecurity的过程中，init这一步会创建HttpSecurity实例对象http，并调用WebSecurity的addSecurityFilterChainBuilder这一个方法，把http添加到WebSecurity的securityFilterChainBuilders