/**
 * 配置端点的过滤器链
 *
 * @param http spring security核心配置类
 * @return 过滤器链
 * @throws Exception 抛出
 */
@Bean
public SecurityFilterChain authorizationServerSecurityFilterChain(HttpSecurity http)throws Exception{
    // 自定义配置 (重要：必须写在OAuth2AuthorizationServerConfiguration.applyDefaultSecurity(http);之前，让该自定义配置在
    // OAuth2AuthorizationServerMetadataEndpointConfigurer配置之前)
    // 添加密码模式
    http.with(new ResourceOwnerPasswordConfigurer(),Customizer.withDefaults());

    // 配置默认的设置，忽略认证端点的csrf校验
    OAuth2AuthorizationServerConfiguration.applyDefaultSecurity(http);

    http.getConfigurer(OAuth2AuthorizationServerConfigurer.class);
    // 其它认证服务配置

    return http.build();
}

/**
 * 配置认证相关的过滤器链
 *
 * @param http spring security核心配置类
 * @return 过滤器链
 * @throws Exception 抛出
 */
@Bean
public SecurityFilterChain defaultSecurityFilterChain(HttpSecurity http)throws Exception{    // ... 其它资源服务配置

    http.with(new BasicLoginConfigurer(),basicLoginConfigurer->basicLoginConfigurer
        // 添加短信登录，默认登录接口：/login/sms
        .smsCaptchaLogin(Customizer.withDefaults())
        // 添加邮件登录，默认登录接口：/login/email
        .emailCaptchaLogin(Customizer.withDefaults())
        // 当添加了短信登录或者邮件登录的配置时，默认添加验证码过滤器(这两种登录方式依赖验证码校验)，或如下显示添加验证码配置
        .captchaAuthorization(Customizer.withDefaults())
    );

    // ... 其它资源服务配置

    return http.build();
}

/**
 * 验证码接口
 *
 * @author vains
 */
@Slf4j
@RestController
@RequiredArgsConstructor
@RequestMapping("/captcha")
public class CaptchaController {

    private final CaptchaRepository captchaRepository;

    @GetMapping("/image")
    public BasicCaptcha imageCaptcha(HttpServletRequest request,
                                     HttpServletResponse response) {
        // 生成验证码

        ImageCaptcha imageCaptcha = new ImageCaptcha();
        imageCaptcha.setCode...
        imageCaptcha.setType(CaptchaType.IMAGE_CAPTCHA);

        captchaRepository.save(new ServletWebRequest(request, response), imageCaptcha);
        return imageCaptcha;
    }

    @GetMapping("/sms")
    public BasicCaptcha smsCaptcha(@NotBlank @RequestHeader String phone,
                                   HttpServletRequest request,
                                   HttpServletResponse response) {
        // 生成验证码
        log.debug("手机号[{}]获取验证码", phone);
        BasicCaptcha captcha = new BasicCaptcha();
        // 默认 1234
        captcha.setCode...
        captcha.setType(CaptchaType.SMS_CAPTCHA);

        captchaRepository.save(new ServletWebRequest(request, response), captcha);
        return captcha;
    }

    @GetMapping("/email")
    public BasicCaptcha emailCaptcha(HttpServletRequest request,
                                     HttpServletResponse response) {

        // 生成验证码
        BasicCaptcha captcha = new BasicCaptcha();
        captcha.setType(CaptchaType.EMAIL_CAPTCHA);
        // ...

        captchaRepository.save(new ServletWebRequest(request, response), captcha);
        return captcha;
    }

}

@Bean(DefaultConstants.SMS_CAPTCHA_VALIDATE)
@ConditionalOnMissingBean(name = DefaultConstants.SMS_CAPTCHA_VALIDATE)
public CaptchaValidator smsCaptchaValidator(CaptchaRepository captchaRepository) {
    return new SmsCaptchaValidator(captchaRepository, captchaValidateProperties);
}

@Bean(DefaultConstants.EMAIL_CAPTCHA_VALIDATE)
@ConditionalOnMissingBean(name = DefaultConstants.EMAIL_CAPTCHA_VALIDATE)
public CaptchaValidator emailCaptchaValidator(CaptchaRepository captchaRepository) {
    return new EmailCaptchaValidator(captchaRepository, captchaValidateProperties);
}

@Bean(DefaultConstants.IMAGE_CAPTCHA_VALIDATE)
@ConditionalOnMissingBean(name = DefaultConstants.IMAGE_CAPTCHA_VALIDATE)
public CaptchaValidator imageCaptchaValidator(CaptchaRepository captchaRepository) {
    return new ImageCaptchaValidator(captchaRepository, captchaValidateProperties);
}

@Bean
public CaptchaRepository sessionCaptchaRepository(CaptchaValidateProperties captchaValidateProperties) {
    return new SessionCaptchaRepository(captchaValidateProperties);
}