Java 为什么我的Spring安全认证不起作用？

我在

/src/main/java/com/dog/bootstrap

中放置了以下配置：

@EnableWebSecurity
@Configuration
public class CustomWebSecurityConfigurerAdapter extends WebSecurityConfigurerAdapter {
    @Override
    public void configure(AuthenticationManagerBuilder auth) throws Exception {
        System.out.println("hello");
        auth.inMemoryAuthentication()
            .withUser("user")
            .password("password")
            .roles("USER");
    }
}

我将按如下方式加载它：

public class WebInitializer implements WebApplicationInitializer {
@Override
public void onStartup(ServletContext container) {
    // Create the dispatcher servlet's Spring application context
    AnnotationConfigWebApplicationContext dispatcherContext = new AnnotationConfigWebApplicationContext();
    dispatcherContext.scan("com.dog.bootstrap");

    // Manage the lifecycle of the root application context
    container.addListener(new ContextLoaderListener(dispatcherContext));

    // Register and map the dispatcher servlet
    ServletRegistration.Dynamic dispatcher =
            container.addServlet("dispatcher", new DispatcherServlet(dispatcherContext));
    dispatcher.setLoadOnStartup(1);

    Set<String> mappingConflicts = dispatcher.addMapping("/");
    if (!mappingConflicts.isEmpty()) {
        throw new IllegalStateException("'dispatcher' could not be mapped to '/' due " +
                "to an existing mapping.");
    }
}

---

当我启动应用程序时，我确实看到正在打印

hello

，因此正在调用

configure（AuthenticationManagerBuilder auth）

。但是，没有一个端点要求我输入登录页面。当我转到

localhost:8080/dog

时，它输出

dogs

，而不要求我进行身份验证

您实际上没有包括过滤器链。尝试添加此默认初始值设定项，它映射到

/*

：

@Component public class SecurityWebApplicationInitializer 
    extends AbstractSecurityWebApplicationInitializer {
}

---

就这样！谢谢：）

@Component public class SecurityWebApplicationInitializer 
    extends AbstractSecurityWebApplicationInitializer {
}