spring - AuthenticationManagerBuilder 和 HttpSecurity.authenticationProvider 之间的区别

Question

要在 Spring Boot 中提供自定义身份验证提供程序，我是否需要以下两项？它们有什么区别？

AuthenticationManagerBuilder

HttpSecurity.authenticationProvider(...)

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter{

  @Autowired
  private MyAuthenticationProvider myAuthenticationProvider;

  @Autowired
  @Override
  protected void configure(AuthenticationManagerBuilder auth) throws Exception {
      auth.authenticationProvider(myAuthenticationProvider);
  }

  // --------------- OR/AND ? ----------------
  @Override
  protected void configure(HttpSecurity http) throws Exception {
      http
      .authenticationProvider(myAuthenticationProvider)
      // ...
  }
}

Answer 1

您只需使用这两个选项之一。在内部，http.authenticationProvider 只是调用 AuthenticationManagerBuilder.authenticationProvider。