在Spring boot中验证Rest控制器URL

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/api/**").authenticated()
                .anyRequest().permitAll()
                .and()
            .formLogin()
                .and()
            .httpBasic();
    }
}

@RestController
@RequestMapping("/api")
public class ApiController {

    @GetMapping("/users/{id}")
    @PreAuthorize("#id == authentication.principal.id")
    public User getUser(@PathVariable Long id) {
        // 根据id获取用户信息
    }

    @PostMapping("/users")
    @PreAuthorize("hasRole('ADMIN')")
    public void createUser(@RequestBody User user) {
        // 创建用户
    }
}