content: package com.xuan.chapter12.oauth2.client.config;
  
  import org.springframework.boot.autoconfigure.security.oauth2.client.EnableOAuth2Sso;
  import org.springframework.context.annotation.Configuration;
  import org.springframework.security.config.annotation.web.builders.HttpSecurity;
  import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
  import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
  import org.springframework.security.config.http.SessionCreationPolicy;
  import org.springframework.stereotype.Component;
  
  /**
   * Created by xuan on 2018/4/10.
   */
  
  @Component
  @EnableOAuth2Sso
  public class SecurityConfig extends WebSecurityConfigurerAdapter {
  
  
      @Override
      protected void configure(HttpSecurity http) throws Exception {
          http.csrf().disable()
                  .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.IF_REQUIRED)
                  .and()
                  .requestMatchers().anyRequest()
                  .and()
                  .authorizeRequests()
                  .antMatchers("/user/**").authenticated()
                  .and()
                  .formLogin().successForwardUrl("/index")
                  .and()
                  .logout().logoutUrl("/logout").permitAll()
                  .logoutSuccessUrl("/");
  
      }
  
  }
  