Authentication
否
SecurityContextHolder
RememberMeServices
是否配置登录页
AuthenticationManager
Security Filterₙ
Client
Filter₀
Security Filter₀
SecurityFilterChain₀
通过各种过滤器过滤
失败
FilterChianProxy
LogoutSuccessHandler
认证成功后的处理
过滤器
Servlet
Filter₁
.....
是
AccessDeniedHandler
SpringSecurity执行请求的流程图
Continue Processing Request Normally
认证器n
SessionAuthenticationStrategy
认证失败后的处理
AuthenticationSuccessHandler
FilterChain
SecurityFilterChain
/api/**
SecurityContextPersistenceFilter
Security Filter₁
SecurityFilterChainₙ
构建登录页
DelegatingFilterProxy
......
LogoutHandler
UsernamePasswordAuthenticationFilter
ExceptionTranslationFilter
.......
认证通过
/**
LogoutFilter
AbstractAuthenticationProcessingFilter
AuthenticationFailureHandler
AuthenticationEntryPoint
成功
认证鉴权或处理
授权成功？
是否为登录请求
Filter₂
Access Denied
认证器1
RequestCache
ApplicationEventPublisher
是否是登出url
继续业务操作
SecurityException
