<security:http auto-config="true" use-expressions="false">
    <!-- 配置鏈接地址，表示任意路徑都需要ROLE_USER權(quán)限,這里可以配置
     一個(gè)逗號(hào)隔開(kāi)的角色列表-->
    <security:intercept-url pattern="/**" access="ROLE_USER"/>

    <!--自定義登錄頁(yè)面-->
    <security:form-login login-page="/login.html" login-processing-url="/login"
               username-parameter="username" password-parameter="password"
               authentication-failure-forward-url="/failed.html"
               default-target-url="/index.html"

    />
    <!--關(guān)閉csrf,默認(rèn)是開(kāi)啟的-->
    <security:csrf disabled="true"/>

    <security:remember-me remember-me-parameter="remembermeParamater" />
    <!-- 退出 -->
    <security:logout invalidate-session="true" logout-url="/logout.do" logout-success-url="/login.html"/>
  </security:http>

<form action="/login" method="post">
    用戶名:<input type="text" name="username" placeholder="請(qǐng)輸入用戶名"><br>
    密 碼:<input type="password" name="password" placeholder="請(qǐng)輸入密碼"><br>
    記住我:<input id="_spring_security_remember_me" type="checkbox" name="remembermeParamater" value="true">
    <input type="submit" value="登錄">
  </form>

-- 創(chuàng)建記錄rememberme記錄的表
CREATE TABLE persistent_logins
(
 username VARCHAR(64),
 series  VARCHAR(64),
 token   VARCHAR(64),
 last_used DATE 
 );

<security:remember-me remember-me-parameter="remembermeParamater" data-source-ref="dataSource"
               token-validity-seconds="86400"/>

@GetMapping("/isRemembermeUser")
public boolean isRemembermeUser(){
  Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
  if(authentication==null){
    return false;
  }
  //判斷當(dāng)前用戶是否是通過(guò)rememberme登錄，是返回true,否返回false
  return RememberMeAuthenticationToken.class.isAssignableFrom(authentication.getClass());
}