SpringBoot3.0 + SpringSecurity6.0+JWT

Spring Boot 3.0 和 Spring Security 6.0 的整合以及 JWT（JSON Web Tokens）的应用还未有成熟的实践经验。尽管如此，我们仍可以尝试创建一个简单的示例来说明如何在 Spring Boot 3.0 和 Spring Security 6.0 中使用 JWT。

以下是一个基本的示例，展示了如何在 Spring Boot 3.0 和 Spring Security 6.0 中集成 JWT：

1. 添加依赖到 pom.xml：

<dependencies>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-web</artifactId>
    </dependency>
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
    </dependency>
    <dependency>
        <groupId>io.jsonwebtoken</groupId>
        <artifactId>jjwt</artifactId>
        <version>0.9.1</version>
    </dependency>
</dependencies>

2. 配置 SecurityConfig 类：

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
    @Autowired
    private JwtAuthenticationEntryPoint jwtAuthenticationEntryPoint;
 
    @Autowired
    private JwtRequestFilter jwtRequestFilter;
 
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        // 配置用户详情服务
    }
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.cors().and().csrf().disable()
            .exceptionHandling().authenticationEntryPoint(jwtAuthenticationEntryPoint)
            .and()
            .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
            .and()
            .authorizeRequests()
            .antMatchers("/api/auth/**").permitAll()
            .anyRequest().authenticated();
 
        http.addFilterBefore(jwtRequestFilter, UsernamePasswordAuthenticationFilter.class);
    }
}

3. 创建 JwtAuthenticationEntryPoint 类：

@Component
public class JwtAuthenticationEntryPoint implements AuthenticationEntryPoint {
    @Override
    public void commence(HttpServletRequest request, HttpServletResponse response,
                         AuthenticationException authException) throws IOException {
        response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Unauthorized");
    }
}

4. 创建 JwtRequestFilter 类：

@Component
public class JwtRequestFilter extends OncePerRequestFilter {
 
    @Autowired
    private JwtTokenProvider tokenProvider;
 
    @Overrid