基于Spring boot創建了最簡單Spring Security配置環境，一切都在pom中

以jar包形式運行

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <groupId>org.mose</groupId>
    <artifactId>spring_security</artifactId>
    <packaging>jar</packaging>
    <version>1.0-SNAPSHOT</version>
    <name>spring_security Maven Webapp</name>
    <url>http://maven.apache.org</url>

    <properties>
        <spring-boot.version>1.5.4.RELEASE</spring-boot.version>
        <junit.version>4.12</junit.version>
    </properties>

    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>1.5.4.RELEASE</version>
    </parent>

    <dependencies>
        <!-- Start web -->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <!-- End web -->

        <!-- Start Spring Security -->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-security</artifactId>
        </dependency>
        <!-- End Spring Security -->

        <!-- Start Test -->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-devtools</artifactId>
            <optional>true</optional>
        </dependency>
        <!-- End Test -->
    </dependencies>
    <build>
        <finalName>spring_security</finalName>
    </build>
</project>

以war包形式運行

<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <groupId>org.mose</groupId>
    <artifactId>spring_security</artifactId>
    <packaging>war</packaging>
    <version>1.0-SNAPSHOT</version>
    <name>spring_security Maven Webapp</name>
    <url>http://maven.apache.org</url>

    <properties>
        <spring-boot.version>1.5.4.RELEASE</spring-boot.version>
        <junit.version>4.12</junit.version>
    </properties>

    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>1.5.4.RELEASE</version>
    </parent>

    <dependencies>
        <!-- Start web -->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <!-- End web -->

        <!-- Start Deploy In Tomcat Server -->
        <dependency>
            <groupId>javax.servlet</groupId>
            <artifactId>jstl</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-tomcat</artifactId>
            <scope>provided</scope>
        </dependency>
        <dependency>
            <groupId>org.apache.tomcat.embed</groupId>
            <artifactId>tomcat-embed-jasper</artifactId>
            <scope>provided</scope>
        </dependency>
        <!-- End Deploy In Tomcat Server -->

        <!-- Start Spring Security -->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-security</artifactId>
        </dependency>
        <!-- End Spring Security -->

        <!-- Start Test -->
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-devtools</artifactId>
            <optional>true</optional>
        </dependency>
        <!-- End Test -->
    </dependencies>
    <build>
        <finalName>spring_security</finalName>
    </build>
</project>

**創建Security配置類

/**
 * Description:Spring Security的java configuration
 *
 * @Author: 瓦力
 * @Date: 2017/7/19 13:47
 */
@EnableWebSecurity
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
    /**
     * Description：配置Spring Security
     * 1.開啟對任何地址（"/**"）的訪問控制，要求必須句別"ROLE_USER"的角色
     * 2.開啟默認form表單形式的用戶登入，訪問地址為"/login"，登錄成功后自動跳轉到用戶前一次的訪問地址
     * 3.關閉csrf限制，該功能以后再講，默認為開啟狀態<br>
     *
     * @param http
     * @return
     *
     * @Author: 瓦力
     * @Date: 2017/7/19 13:47
     */
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests().antMatchers("/**").hasRole("USER").and().formLogin().and().csrf().disable();
    }
}

@EnableWebSecurity設置開啟Spring Security的java configuration方式

WebSecurityConfigurerAdapter

提供了Spring Security的基本配置，只需要根據要求重寫其中的方法。

啟動后記錄根據控制臺輸出的密碼
在瀏覽器輸入http://localhost:8080/test任意地址后，頁面自動跳轉到http://localhost:8080/login
輸入用戶名（user）和密碼，即可跳轉到前次輸入的地址。
以上就是Spring Security最簡單的配置。

Paste_Image.png

代碼示例：https://github.com/wexgundam/spring.security/tree/master/ch01