如何使用springboot安全性創建註銷

Question

這是我的登錄信息。我將使用path("/logout")實現註銷方法，以便當前用戶會話真正註銷。我使用Spring Security的

@POST 
@Path("/login") 
@Consumes(MediaType.APPLICATION_JSON) 
@Produces(MediaType.APPLICATION_JSON) 
public Response login(User credentials) { 

    if(credentials == null){ 
     return Response.status(Response.Status.BAD_REQUEST).build(); 
    } 

    try { 
     User userInfo = new User(); 
     UserDetails userDetails = userDetailsService.loadUserByUsername(credentials.getUsername 

     // Create authRequest Object with User ind DB, Credentials from Web-client 
     UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken(userDetails, credentials.getPassword(), userDetails.getAuthorities()); 

     // Authenticate the user 
     Authentication authentication = authenticationManager.authenticate(authRequest); 
     SecurityContext securityContext = SecurityContextHolder.getContext(); 
     securityContext.setAuthentication(authentication); 

     userInfo.setUsername(authentication.getName()); 

     return Response.status(Response.Status.OK).entity("Login succesfull").build(); 
    } 
    catch (Exception e) { 
     SecurityContextHolder.getContext().setAuthentication(null); 
     return Response.status(Response.Status.UNAUTHORIZED).entity("Login failed").build(); 
    } 
} 

Answer 1

@GetMapping("/logout") 
    public String getLogoutPage(HttpServletRequest request, HttpServletResponse response){ 

     Authentication authentication = SecurityContextHolder.getContext().getAuthentication(); 
     if (authentication != null) 
      new SecurityContextLogoutHandler().logout(request, response, authentication); 

     return "redirect:/login"; 
    } 

Answer 2

另一種解決方案是使用彈簧安全適配器。

檢查文檔：https://docs.spring.io/spring-security/site/docs/4.2.4.BUILD-SNAPSHOT/reference/htmlsingle/#jc-logout

@Configuration 
@EnableWebSecurity 
public class SecurityConfig extends WebSecurityConfigurerAdapter { 



    @Override 
    protected void configure(HttpSecurity http) throws Exception { 
     http    
       .logout().logoutUrl("/logout.html"); 

    } 
}