笔记：SpringSecurity认证授权注解使用

//开启注解
@EnableGlobalMethodSecurity(securedEnabled = true)

//只有具有此角色才能访问此方法
@Secured({"ROLE_admin","ROLE_user"})

//开启注解功能
@EnableGlobalMethodSecurity(prePostEnabled = true)

//判断是否有权限访问
@PreAuthorize("hasAnyAuthority('admin','user')")

//开启注解功能
@EnableGlobalMethodSecurity(prePostEnabled = true)

//在方法执行之后在进行权限认证
@PostAuthorize("hasAnyAuthority('admin')")

    @ResponseBody
    @RequestMapping("/all")
    @PostAuthorize("hasAnyAuthority('admin')")//在方法执行后再进行权限验证
    @PostFilter("filterObject.username == 'ceshi'")//对返回数据进行过滤，只返回匹配的数据
    public List<Users> getAllUser() {
        ArrayList<Users> list = new ArrayList<>();
        list.add(new Users(11,"测试1","2327972001","123456",'1',"",'1'));
        list.add(new Users(11,"测试2","admin","123456",'1',"",'1'));
        list.add(new Users(11,"测试3","ceshi","123456",'1',"",'1'));
        list.add(new Users(11,"测试4","tset","123456",'1',"",'1'));
        System.out.println(list);
        return list;
    }

    @RequestMapping("/testPreFilter")
    @PreAuthorize("hasRole('ROLE_admin')")//进入方法前的权限验证
    @PreFilter(value = "filterObject.id%2==0")//对传入的数据进行过滤
    @ResponseBody
    public List<Users> getTestPreFilter(@RequestBody List<Users>
                                                list) {
        list.forEach(t -> {
            System.out.println(t.getId() + "\t" + t.getUsername());
        });
        return list;
    }