从 Postman POST 登录到 Spring Security

所以我们在编程方面还很陌生，我们正在做一个项目，其中后端使用 Spring Security，前端将使用 React。我一直在尝试将带有用户名和密码的 POST 发送到 Spring Security，但我被卡住了，我得到的唯一返回是 401 和 404。

我不希望 Spring Security 呈现登录页面，我只想能够 POST 和接收 Session，最后返回 Csrf 和 userId。

@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    private final PasswordEncoder passwordEncoder;
    private final UserDetailsService userDetailsService;
    private final RestAuthEntryPoint restAuthEntryPoint;

    @Autowired
    public SecurityConfig(PasswordEncoder passwordEncoder, UserDetailsService userDetailsService, RestAuthEntryPoint restAuthEntryPoint) {
        this.passwordEncoder = passwordEncoder;
        this.userDetailsService = userDetailsService;
        this.restAuthEntryPoint = restAuthEntryPoint;
    }

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder);
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
                .csrf().disable()
                .authorizeRequests()
                .antMatchers( "/api/user/login", "/login").permitAll()
                .anyRequest()
                .authenticated()
                .and()
                .exceptionHandling().authenticationEntryPoint(restAuthEntryPoint).and()
                .formLogin()
                .loginProcessingUrl("/api/user/login");

    }

我注意到如果我删除：

.exceptionHandling().authenticationEntryPoint(restAuthEntryPoint)

Postman 将返回整个 html 表单。

Postman picture