创建从ajax到控制器的post (Spring安全性)

@Controller
public class MyController {
    @RequestMapping(value = "/myEndpoint", method = RequestMethod.POST)
    public ResponseEntity<String> handlePostRequest() {
        // 处理POST请求的逻辑
        return new ResponseEntity<>("Success", HttpStatus.OK);
    }
}

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/myEndpoint").hasRole("USER")
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .and()
            .httpBasic();
    }
}

<meta name="_csrf" th:content="${_csrf.token}"/>
<meta name="_csrf_header" th:content="${_csrf.headerName}"/>

var token = $("meta[name='_csrf']").attr("content");
var header = $("meta[name='_csrf_header']").attr("content");

$.ajax({
    url: "/myEndpoint",
    type: "POST",
    beforeSend: function(xhr) {
        xhr.setRequestHeader(header, token);
    },
    success: function(response) {
        // 处理成功响应
    },
    error: function(xhr, status, error) {
        // 处理错误响应
    }
});