SpringSecurity6 | 退出登录后的JSON处理

在Spring Security中，处理退出登录并返回JSON响应涉及到自定义登出过滤器（LogoutFilter）的配置。以下是一个配置自定义登出过滤器的示例，该过滤器在退出登录时返回一个JSON响应：

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.web.authentication.logout.LogoutFilter;
import org.springframework.security.web.authentication.logout.LogoutSuccessHandler;
 
import javax.servlet.Filter;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
 
@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {
 
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        // ... 其他配置 ...
 
        // 自定义登出成功处理器
        LogoutSuccessHandler logoutSuccessHandler = (request, response, authentication) -> {
            response.setStatus(HttpServletResponse.SC_OK);
            response.setContentType("application/json");
            response.getWriter().write("{\"message\":\"Logout successful.\"}");
        };
 
        // 添加自定义登出过滤器
        http.logout()
            .addLogoutHandler(customLogoutFilter(logoutSuccessHandler));
 
        // ... 其他配置 ...
    }
 
    private Filter customLogoutFilter(LogoutSuccessHandler logoutSuccessHandler) throws Exception {
        LogoutFilter logoutFilter = new LogoutFilter(
            "/api/logout",
            logoutSuccessHandler,
            new HttpStatusLogoutSuccessHandler() // 可以使用这个默认实现返回简单的HTTP状态码
        );
        logoutFilter.setFilterProcessesUrl("/api/logout"); // 确保与你的登出请求URL匹配
        return logoutFilter;
    }
}
 
// 简单的登出成功处理器，返回200 OK状态码
class HttpStatusLogoutSuccessHandler implements LogoutSuccessHandler {
    @Override
    public void onLogoutSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException, ServletException {
        response.setStatus(HttpServletResponse.SC_OK);
    }
}

在上述配置中，我们创建了一个自定义的登出过滤器customLogoutFilter，并指定了一个自定义的登出成功处理器logoutSuccessHandler。在登出成功时，这个处理器会设置响应的状态码为SC_OK，并返回一个JSON格式的消息体。

请注意，你需要根据自己的项目需求调整URL和其他配置。