Spring Boot 中的全局方法安全性

xml
    org.springframework.boot
    spring-boot-starter-security

java
@Configuration
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    // 配置其他安全规则
}

java
@Service
public class UserDetailsServiceImpl implements UserDetailsService {
    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        // 加载用户信息和权限
    }
}

java
@RestController
@RequestMapping("/api")
public class ExampleController {
    @GetMapping("/admin")
    @Secured("ROLE_ADMIN")
    public String adminOnly() {
        return "Only admin can access this method";
    }
    
    @GetMapping("/user")
    @PreAuthorize("hasAnyRole('ROLE_USER', 'ROLE_ADMIN')")
    public String userAndAdmin() {
        return "Both user and admin can access this method";
    }
}

java
@RestController
@RequestMapping("/api")
public class ExampleController {
    @GetMapping("/admin")
    @Secured("ROLE_ADMIN")
    public String adminOnly() {
        return "Only admin can access this method";
    }
    
    @GetMapping("/user")
    @PreAuthorize("hasAnyRole('ROLE_USER', 'ROLE_ADMIN')")
    public String userAndAdmin() {
        return "Both user and admin can access this method";
    }
}