SecurityBuilder
public interface SecurityBuilder<O> {
O build() throws Exception;
}
这个Builder的重要子类
Builder.png
-
AuthenticationManagerBuilder要build的对象是AuthenticationManager -
WebSecurity要build的对象是Filter -
HttpSecurity要build的对象是DefaultSecurityFilterChain
SecurityConfigurer
public interface SecurityConfigurer<O, B extends SecurityBuilder<O>> {
//Initialize the {@link SecurityBuilder}.
void init(B builder) throws Exception;
//Configure the {@link SecurityBuilder} by setting the necessary properties on the
void configure(B builder) throws Exception;
}
这个SecurityConfigurer重要子类就是WebSecurityConfigurerAdapter
spring security的配置主要是由WebSecurityConfiguration实现的，WebSecurityConfigurerAdapter或者其子类被添加到WebSecurity的属性private final LinkedHashMap<Class<? extends SecurityConfigurer<O, B>>, List<SecurityConfigurer<O, B>>> configurers = new LinkedHashMap<>();中，在WebSecurityConfigurerAdapter配置WebSecurity的过程中，init这一步会创建HttpSecurity实例对象http，并调用WebSecurity的addSecurityFilterChainBuilder这一个方法，把http添加到WebSecurity的securityFilterChainBuilders
