Spring Security

https://spring.io/projects/spring-security/ 官方文档 https://github.com/spring-projects/spring-security-samples/ 官方示例

RBAC(Role-Base Access Controll)

在Controller中获取登录人信息

Authentication authentication = SecurityContextHolder.getContext().getAuthentication();  
  
if (authentication == null) {  
    return new ModelAndView("redirect:/login");  
}  
UserDetails principal = (UserDetails) authentication.getPrincipal();  
User user = userRepository.findByUsername(principal.getUsername());