springsecurity 登录认证一（ajax）

在Spring Security中使用AJAX进行登录认证，你需要创建一个控制器来处理AJAX请求，并使用Spring Security的支持来完成认证过程。以下是一个简单的例子：

1. 创建一个控制器来处理登录请求：

import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.AuthenticationException;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RestController;
 
@RestController
public class LoginController {
 
    private final AuthenticationManager authenticationManager;
 
    public LoginController(AuthenticationManager authenticationManager) {
        this.authenticationManager = authenticationManager;
    }
 
    @PostMapping("/login")
    public Authentication login(@RequestBody Authentication authentication) {
        return authenticationManager.authenticate(new UsernamePasswordAuthenticationToken(
                authentication.getName(), authentication.getCredentials()));
    }
}

2. 确保你的Spring Security配置使用了正确的HTTP安全配置：

import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
 
public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .anyRequest().authenticated()
                .and()
            .formLogin()
                .and()
            .csrf().disable(); // 禁用CSRF保护，为了简化示例
    }
}

3. 前端AJAX请求示例：

$.ajax({
    url: '/login',
    type: 'POST',
    contentType: 'application/json',
    data: JSON.stringify({
        name: 'username',
        credentials: 'password'
    }),
    success: function(response) {
        // 登录成功处理
    },
    error: function(xhr, status, error) {
        // 登录失败处理