我想将安全部分添加到项目中，我正在使用springsecurity来提供后端安全性。当我添加自定义登录过滤器时 AbstractAuthenticationProcessingFilter 关于spring security，我遇到了一个关于跨源问题的错误。现在我又加了一句 http.cors(); 到websecurityconfig，我再也不会收到跨源错误了。
我正在向后端发送请求 http://localhost:8081/user/sys-role/verifyTargetUrl . 现在，确切的错误是 Uncaught (in promise) Error: Infinite redirect in navigation guard at eval (vue-router.esm-bundler.js?6c02:2913) . 因此，不知何故，前端vue路由器守卫发现自己在一个无限的循环。我将感谢你的任何帮助。

更新：

结果我没有得到200的响应码，这导致了vue路由器中的无限循环。我的问题变成了纯spring安全问题，因为vue路由器似乎没有问题。我发了一封邮件到 http://localhost:8081/user/sys-role/verifyTargetUrl 但是我的请求没有进入后台的postmapping。而是输入下面显示的customauthenticationentrypoint并将代码设置为504。但在verifytargeturl的后端我设置为200。除此之外， onAuthenticationSuccess 的 CustomAuthenticationSuccessfulHandler 也在后端调用。

public class CustomAuthenticationEntryPoint implements AuthenticationEntryPoint {

@Override
public void commence(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, AuthenticationException e) throws IOException, ServletException {

    Message msg=new Message();
    msg.setCode(504);
    msg.setMsg("authenticate fail");

    httpServletResponse.setStatus(HttpServletResponse.SC_OK);
    httpServletResponse.setContentType(MediaType.APPLICATION_JSON_VALUE);
    httpServletResponse.setCharacterEncoding(StandardCharsets.UTF_8.toString());
    httpServletResponse.getWriter().write(JSON.toJSONString(msg));
}

}

浏览器控制台： config: {url: "http://localhost:8081/user/sys-role/verifyTargetUrl", method: "post", data: "{"userId":1017,"targetUrl":"/Main"}", headers: {…}, transformRequest: Array(1), …} data: {code: 504, msg: "authenticate fail"}更新2：更多代码

customjsonloginfilter.java文件

public class CustomJSONLoginFilter  extends AbstractAuthenticationProcessingFilter {

private final ISysUserService iUserService;

public CustomJSONLoginFilter(String defaultFilterProcessesUrl, ISysUserService iUserService) {
    super(new AntPathRequestMatcher(defaultFilterProcessesUrl, HttpMethod.POST.name()));
    this.iUserService = iUserService;
}

@Override
public Authentication attemptAuthentication(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) throws AuthenticationException, IOException, ServletException {
    JSONObject requestBody=  getRequestBody(httpServletRequest);
    String username= requestBody.getString("username");
    String password= requestBody.getString("password");

    // get user info  by username
    SysUser sysUser= iUserService.getUserInfoByUsername(username);

    //verify password
    String encorderType=EncryptionAlgorithm.ENCODER_TYPE.get(1);
    PasswordEncoder passwordEncoder =EncryptionAlgorithm.ENCODER_MAP.get(encorderType);
    System.out.println(passwordEncoder);
    System.out.println(sysUser);
    System.out.println(password);
    if(sysUser==null){
        throw new UsernameNotFoundException("can't find userinfo by username:"+username);
    }else if(!passwordEncoder.matches(password,sysUser.getPassword())){
        throw new BadCredentialsException("password wrong!");
    }else{
        List<SysRole> list= iUserService.findRolesByUsername(username);
        List<SimpleGrantedAuthority> simpleGrantedAuthorities=  new ArrayList<SimpleGrantedAuthority>();

        Iterator<SysRole> i=list.iterator();
        while(i.hasNext()){
            simpleGrantedAuthorities.add(new SimpleGrantedAuthority(i.next().getRoleName()));
        }

        return new UsernamePasswordAuthenticationToken(username,password,simpleGrantedAuthorities);
    }

}

private JSONObject getRequestBody(HttpServletRequest request) throws AuthenticationException{
    try {
        StringBuilder stringBuilder = new StringBuilder();
        InputStream inputStream = request.getInputStream();
        byte[] bs = new byte[StreamUtils.BUFFER_SIZE];
        int len;
        while ((len = inputStream.read(bs)) != -1) {
            stringBuilder.append(new String(bs, 0, len));
        }
        return JSON.parseObject(stringBuilder.toString());
    } catch (IOException e) {
        System.out.println("get request body error.");
    }
    throw new AuthenticationServiceException("invalid request body");
}