Spring Security

    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication){
        //保存入登录日志
        Map map=[:];
        String username=authentication.getPrincipal().username;
        map.remoteaddr=request.getRemoteAddr();
        map.sessionId=request.getSession().getId();
        map.loginTime=new Date();
        Timer timer=new Timer();
        //100毫秒后分离线程执行
        timer.runAfter(100){
            SystemLoginRecord.withNewSession{
                SystemLoginRecord systemLoginRecord=new SystemLoginRecord(map);
                systemLoginRecord.baseUser=BaseUser.findByUsername(username);
                systemLoginRecord.save(flush:true);
            }
        }
    }

import org.springframework.boot.autoconfigure.EnableAutoConfiguration
import org.springframework.context.annotation.Configuration
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter

@Configuration
@EnableAutoConfiguration
//@EnableGlobalMethodSecurity(securedEnabled=true)
@EnableGlobalMethodSecurity(jsr250Enabled=true)
class ProjectSecurityConfig extends WebSecurityConfigurerAdapter{
}

    //@Secured("ROLE_ADMIN")
    //@PermitAll
    //@RolesAllowed("ROLE_USER,ROLE_ADMIN")
    @DenyAll
    public Map index2(){
        return [result:true]
    }

gb:
    springsecurity:
      password:
        encodeHashAsBase64: false
        algorithm: SM3 # bcrypt,pbkdf2,SHA-512,SHA-384,SHA-256,SHA-224,SHA-1,MD5,MD2,SM3,SM4
        sm4Key: 86C63180C2806ED1F47B859EE501215C

admin:{SM3}dc1fd00e3eeeb940ff46f457bf97d66ba7fcc36e0b20802383de142860e76ae6
user:{SM3}92e7fbdcca8b9f36be0638e48e77cbeeb49ef15886b6cd12d46e09d74a232a81

gb:
  springsecurity:
    password:
      encodeHashAsBase64: false
      algorithm: custom # bcrypt,pbkdf2,SHA-512,SHA-384,SHA-256,SHA-224,SHA-1,MD5,MD2,SM3,SM4,custom   (1)
      useCustomMethodAlgorithm: bcrypt    (2)

    public String customPasswordEncoder(CoreUser currentLoadUser, PasswordEncoder passwordEncoder,CharSequence plainTextPassword){
        //passwordEncoder 是useCustomMethodAlgorithm配置项制定的算法加密器
        String encodeStr=passwordEncoder.encode(plainTextPassword)
        return encodeStr;
        //因spring security5后不再使用salt，可以自己定制盐值加密类，以便与遗留系统集成
        //return Md5Encoder.encode(plainTextPassword,currentLoadUser.id);
    }

    public boolean customPasswordMatches(CoreUser currentLoadUser, PasswordEncoder passwordEncoder,CharSequence rawPassword, String encodedPassword){
        //passwordEncoder 是useCustomMethodAlgorithm配置项制定的算法加密器
        return passwordEncoder.matches(rawPassword,encodedPassword)
        //因spring security5后不再使用salt，可以自己定制盐值加密类，以便与遗留系统集成
        //return Md5Encoder.encode(rawPassword,currentLoadUser.id).equals(encodedPassword);
    }

gb:
  springsecurity:
    password:
        withoutIdPrefix: true

class BaseUser implements Serializable {
    。。。。。。
    protected void encodePassword() {
        CoreUser coreUser=new CoreUser(username, password, enabled, !accountExpired, !passwordExpired, !accountLocked, [], id)
        password = GbSpringUtils.getBean("passwordEncoder").encode(coreUser,password)
    }
}

gb:
  springsecurity:
        password:
          useCustomLoadUser: true

    public BaseUser customLoadUser(String inputUsername){
    //示例，可自由定制，返回BaseUser实例对象即可
        return BaseUser.findByUsernameOrEmailOrPhone(inputUsername,inputUsername,inputUsername);
    }

@Configuration
@Slf4j
class NewSecurityAuthSuccessAppListener implements ApplicationListener<AppSecurityAuthSuccessEvent> {
    @Override
    void onApplicationEvent(AppSecurityAuthSuccessEvent event) {
        println "login user is : ${event.source.authentication.principal.username}";
    }
}