问在第二个控制器方法调用中出现401错误

EN

@Configuration
@EnableWebSecurity
public class BasicAuthConfiguration extends WebSecurityConfigurerAdapter {

@Bean("authenticationManager")
@Override
public AuthenticationManager authenticationManagerBean() throws Exception {
    return super.authenticationManagerBean();
  }

@Override
public void configure(AuthenticationManagerBuilder authenticationManagerBuilder) {
    authenticationManagerBuilder
            .authenticationProvider(authenticationProvider());
  }

@Bean
public DaoAuthenticationProvider authenticationProvider() {
    DaoAuthenticationProvider authProvider = new DaoAuthenticationProvider();
    authProvider.setUserDetailsService(userService);
    authProvider.setPasswordEncoder(getPasswordEncoder());

    return authProvider;
  }

@Override
  protected void configure(HttpSecurity http) throws Exception {
    http.csrf().disable()
            .authorizeRequests()
            .antMatchers(HttpMethod.OPTIONS, "/**").permitAll()
            .antMatchers("/login").permitAll()
            .anyRequest()
            .authenticated()
            .and()
            .httpBasic();
    http.cors();
}

@RestController
@Api(tags = "user")
@CrossOrigin(value = "*", allowedHeaders = {"*"})
public class UserController {

  @Resource(name = "authenticationManager")
  private AuthenticationManager authManager;

  @RequestMapping("/login")
  public boolean login(@RequestParam("username") final String username, @RequestParam("password") final String password, final HttpServletRequest request) {
    UsernamePasswordAuthenticationToken authReq =
            new UsernamePasswordAuthenticationToken(username, password);
    Authentication auth = authManager.authenticate(authReq);
    SecurityContext sc = SecurityContextHolder.getContext();
    sc.setAuthentication(auth);
    HttpSession session = request.getSession(true);
    session.setAttribute("SPRING_SECURITY_CONTEXT", sc);
    return
            username.equals("john.doe") && password.equals("passwd");
  }

@RequestMapping(value = "/user")
  public Principal user(HttpServletRequest request) {
    String authToken = request.getHeader("Authorization")
            .substring("Basic".length()).trim();

    return () -> new String(Base64.getDecoder()
            .decode(authToken)).split(":")[0];
  }
}

@Injectable({
  providedIn: 'root'
})
export class AuthService {

  constructor(private http: HttpClient, private router: Router) { }

userName: string;

auth() {
    const headers = new HttpHeaders({
      authorization: 'Basic ' + btoa('john.doe:passwd')
    });

    let url = 'http://localhost:8080/login';

    const formData = new FormData();
    formData.append("username", "john.doe")
    formData.append("password", "passwd")

    this.http.post(url, formData, { headers: headers }).subscribe(isValid => {
      if (isValid) {
        console.log("isValid", isValid);

        sessionStorage.setItem('token', btoa('john.doe:passwd'));
        this.router.navigate(['']);
      } else {
        alert("Authentication failed.")
      }
    });
  }


  getUser() {
    let url = 'http://localhost:8080/user';

    let headers: HttpHeaders = new HttpHeaders({
      'Authorization': 'Basic ' + sessionStorage.getItem('token')
    });

    let options = { headers: headers };


    // this.http.post(url, "johndoe").
    this.http.get(url, options).
      subscribe(principal => {
        console.log(principal);

        this.userName = principal['name'];
      },
        error => {
          if (error.status == 401)
            alert('Unauthorized');
        }
      );
  }

@Component({
  selector: 'app-login',
  templateUrl: './login.component.html',
  styleUrls: ['./login.component.scss']
})
export class LoginComponent implements OnInit {

  constructor(private authService: AuthService, private http: HttpClient,  
  private router: Router) {}

  ngOnInit() {
    sessionStorage.setItem('token', '');
    this.authService.auth()
  }
}