Spring Cloud Security监控示例-安全审计日志示例

@Component
public class AuditLog {

  private static final Logger logger = LoggerFactory.getLogger(AuditLog.class);

  public void logLoginSuccess(String username) {
    logger.info("User {} logged in successfully.", username);
  }

  public void logLoginFailure(String username) {
    logger.info("User {} failed to log in.", username);
  }

}

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

  @Autowired
  private AuditLog auditLog;

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    http
      .authorizeRequests()
        .antMatchers("/public/**").permitAll()
        .anyRequest().authenticated()
        .and()
      .formLogin()
        .loginPage("/login")
        .successHandler(new AuditLogAuthenticationSuccessHandler(auditLog))
        .failureHandler(new AuditLogAuthenticationFailureHandler(auditLog))
        .permitAll()
        .and()
      .logout()
        .logoutSuccessUrl("/login?logout")
        .permitAll()
      .and()
      .csrf().disable();
  }

  @Autowired
  public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
    auth
      .inMemoryAuthentication()
        .withUser("user").password("{noop}password").roles("USER")
        .and()
        .withUser("admin").password("{noop}password").roles("USER", "ADMIN");
  }

}