下面是使用postman进行身份验证的端点：

@PostMapping ("/authenticate")
public ResponseEntity<?> createAuthenticationToken(@RequestBody AuthenticationRequest authenticationRequest) throws Exception {
    try {
        authenticationManager.authenticate(
                new UsernamePasswordAuthenticationToken(
                        authenticationRequest.getUsername(), authenticationRequest.getPassword()));

    } catch (BadCredentialsException e)
    {
        throw new Exception("Incorrect UserName or Password!",e);
    }

    UserDetails userDetails =
            customUserDetailsService.loadUserByUsername(authenticationRequest.getUsername());
    String jwt = jwtUtil.generateToken(userDetails);

    return ResponseEntity.ok(new AuthenticationResponse(jwt));

}

以下是我的安全配置：http. csrf文件（）.禁用（）.授权请求（）. ant匹配器（“/"、"/注册/"、"/注销”、"/登录”、"/验证”）。允许全部（）. ant匹配器（“/helloAdmin”）.具有角色（“管理员”）.antMatchers（“/helloUser”）.具有角色（“用户”）.antMatchers（“/students/”）.具有角色（“管理员”）.antMatchers（“/subjects/**”）.具有任何角色（“/login”）.和（）.登录页面（“/login”）.和（）.注销（）.注销成功URL（“/login？注销”）;

http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);

            http.addFilterBefore(jwtRequestFilter, UsernamePasswordAuthenticationFilter.class);