SecurityBuilder

public interface SecurityBuilder<O> {
    O build() throws Exception;
}

這個Builder的重要子類

Builder.png

• AuthenticationManagerBuilder要build的對象是AuthenticationManager
• WebSecurity要build的對象是Filter
• HttpSecurity要build的對象是DefaultSecurityFilterChain

SecurityConfigurer

public interface SecurityConfigurer<O, B extends SecurityBuilder<O>> {
     //Initialize the {@link SecurityBuilder}. 
    void init(B builder) throws Exception;
    //Configure the {@link SecurityBuilder} by setting the necessary properties on the
    void configure(B builder) throws Exception;
}

這個SecurityConfigurer重要子類就是WebSecurityConfigurerAdapter
spring security的配置主要是由WebSecurityConfiguration實(shí)現(xiàn)的，WebSecurityConfigurerAdapter或者其子類被添加到WebSecurity的屬性private final LinkedHashMap<Class<? extends SecurityConfigurer<O, B>>, List<SecurityConfigurer<O, B>>> configurers = new LinkedHashMap<>();中，在WebSecurityConfigurerAdapter配置WebSecurity的過程中，init這一步會創(chuàng)建HttpSecurity實(shí)例對象http，并調(diào)用WebSecurity的addSecurityFilterChainBuilder這一個方法，把http添加到WebSecurity的securityFilterChainBuilders