java - @EnableWebSecurity 和 @EnableWebMvcSecurity 有什么区别？

Question

@EnableWebSecurity

JavaDoc 文档:

Add this annotation to an @Configuration class to have the Spring Security configuration defined in any WebSecurityConfigurer or more likely by extending the WebSecurityConfigurerAdapter base class and overriding individual methods.

@EnableWebMvcSecurity

JavaDoc 文档:

Add this annotation to an @Configuration class to have the Spring Security configuration integrate with Spring MVC.

• “与 Spring MVC 集成”究竟意味着什么？我会得到哪些额外的行为？
• 我找到了 guides & answers ，这表明此注解将 CSRF Tokens 添加到 Spring MVC 表单中，这是它唯一添加的吗？

Answer 1

As of Spring Security 4.0, @EnableWebMvcSecurity is deprecated. The replacement is @EnableWebSecurity which will determine adding the Spring MVC features based upon the classpath.

To enable Spring Security integration with Spring MVC add the @EnableWebSecurity annotation to your configuration.

source