要在WebSecurityConfig中的configure方法中配置登入

.formLogin()
.loginPage("/login")
.failureUrl("/login?error")
.defaultSuccessUrl("/home").successHandler(new LoginSuccessHandle())
.permitAll()

重點在.successHandler

建立一個LoginSuccessHandle的類

class LoginSuccessHandle implements AuthenticationSuccessHandler {
        public void onAuthenticationSuccess(HttpServletRequest request,
                                            HttpServletResponse response, Authentication authentication) throws IOException,ServletException {

            Set<String> roles = AuthorityUtils.authorityListToSet(authentication.getAuthorities());
            String path = request.getContextPath() ;
            String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
            if (roles.contains("ROLE_ADMIN")){
                response.sendRedirect(basePath+"adminHome");
                return;
            }
            response.sendRedirect(basePath+"home");
        }