@Entity
@Table(name = "user_info")//使用user作为名字将导致报错，user是H2 SQL的保留字
public class User {

//    private static final long serialVersionUID = 3340373364530753417L;

    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    private Long id;

    @Column(name = "user_name", columnDefinition = "varchar(100)", nullable = false, unique = true)
    private String userName;

    @Column(name = "nick_name", columnDefinition = "varchar(100)")
    private String nickName;

    @Column(name = "password", columnDefinition = "varchar(100)", nullable = false)
    private String password;

    @Column(name = "email", columnDefinition = "varchar(100)", nullable = false)
    private String email;

    @Column(name = "organization", columnDefinition = "varchar(100)", nullable = false)
    private String organization;

    @Column(name = "region", columnDefinition = "varchar(100)", nullable = false)
    private String region;

    @Column(name = "enabled", columnDefinition = "BOOL", nullable = false)
    private boolean enabled;
}

@Entity
@Table(name = "user_role")
public class UserRole {

    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    private Long id;

    @Column(name = "user_name", columnDefinition = "varchar(100)", nullable = false)
    private String userName;

    @Column(name = "role", columnDefinition = "varchar(100)", length = 20, nullable = false)
    private String role;
}

 @Bean
    public SecurityFilterChain securityFilterChain(HttpSecurity http,
                                                   HandlerMappingIntrospector introspector) throws Exception {
        //http策略设置
        MvcRequestMatcher.Builder mvcMatcherBuilder = new MvcRequestMatcher.Builder(introspector);
        http.csrf(csrfConfigurer ->
                csrfConfigurer.ignoringRequestMatchers(mvcMatcherBuilder.pattern("/**"),
                        PathRequest.toH2Console()));
        http.headers(headersConfigurer ->
                headersConfigurer.frameOptions(HeadersConfigurer.FrameOptionsConfig::sameOrigin));
        //http放行策略设置
        http
                .authorizeRequests((authorize) -> authorize
                        //这里想要放行某个访问，当有2个servelet时(本实验是H2和demo两个servlet)只能用这种方法
                        .requestMatchers(new AntPathRequestMatcher("/registration")).permitAll()
                        //放行某个角色对某页面的访问
                        .requestMatchers(new AntPathRequestMatcher("/dev/**")).hasRole("Administer")
                        .requestMatchers(new AntPathRequestMatcher("/h2/**")).access("hasRole('Administer') or hasRole('DBA')")
//                        .requestMatchers(new AntPathRequestMatcher("/")).permitAll()
                        .anyRequest().authenticated()
                )
                //登录设置
                .formLogin((form) -> form
                        .loginPage("/login")
                        .permitAll()
                );
        http
                //logout设置
                .logout()
                .logoutUrl("/logout")
                .logoutSuccessUrl("/")
//                .logoutSuccessHandler(logoutSuccessHandler)
                .invalidateHttpSession(true);
//                .addLogoutHandler(logoutHandler)
//                .deleteCookies(cookieNamesToClear)
        // @formatter:on
        return http.build();
    }

    //初始化jdbc用户信息管理对象
    MyJdbcUserDetailsManager users = new MyJdbcUserDetailsManager(dataSource);
        //用户注册统一接口
        try {
            //初始化待插入信息
            UserDto user = new UserDto(
                    "dev",
                    "dev",
                    "password",
                    "password",
                    "[email protected]",
                    "fdu",
                    "China",
                    "Administer"
            );
            //对密码进行加密
            user.encryptPassword(16);
            //插入用户至数据库
            users.createUser(user);
            }catch (UserAlreadyExistException | NullUserNameException | PasswordNotMatchException e){
            e.printStackTrace();
        }