import org.springframework.security.oauth2.provider.expression.OAuth2WebSecurityExpressionHandler; //导入依赖的package包/类
@Override
protected void configure(HttpSecurity http) throws Exception {
	// @formatter:off
       http
           .authorizeRequests()
               .expressionHandler(new OAuth2WebSecurityExpressionHandler())
               .antMatchers("/**").fullyAuthenticated()
               .and()
           .requestMatchers()
               .antMatchers("/photos/**")
               .and()
           .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.NEVER)
               .and()
           .exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler())
               .and()
           .apply(new OAuth2ResourceServerConfigurer())
           	.tokenStore(tokenStore);
   	// @formatter:on
}
 

import org.springframework.security.oauth2.provider.expression.OAuth2WebSecurityExpressionHandler; //导入依赖的package包/类
@Override
protected void configure(HttpSecurity http) throws Exception {
	// @formatter:off
       http
           .authorizeRequests()
               .expressionHandler(new OAuth2WebSecurityExpressionHandler())
               .antMatchers("/photos").access("#oauth2.denyOAuthClient() and hasRole('ROLE_USER') or #oauth2.hasScope('read')")
               .antMatchers("/photos/trusted/**").access("#oauth2.denyOAuthClient() and hasRole('ROLE_USER') or #oauth2.hasScope('trust')")
               .antMatchers("/photos/user/**").access("#oauth2.denyOAuthClient() and hasRole('ROLE_USER') or #oauth2.hasScope('trust')")
               .antMatchers("/photos/**").access("#oauth2.denyOAuthClient() and hasRole('ROLE_USER') or #oauth2.hasScope('read')")
            .regexMatchers(HttpMethod.DELETE, "/oauth/users/([^/].*?)/tokens/.*")
                .access("#oauth2.clientHasRole('ROLE_CLIENT') and (hasRole('ROLE_USER') or #oauth2.isClient()) and #oauth2.hasScope('write')")
            .regexMatchers(HttpMethod.GET, "/oauth/users/.*")
                .access("#oauth2.clientHasRole('ROLE_CLIENT') and (hasRole('ROLE_USER') or #oauth2.isClient()) and #oauth2.hasScope('read')")
            .regexMatchers(HttpMethod.GET, "/oauth/clients/.*")
                .access("#oauth2.clientHasRole('ROLE_CLIENT') and #oauth2.isClient() and #oauth2.hasScope('read')")
               .and()
           .requestMatchers()
               .antMatchers("/photos/**", "/oauth/users/**", "/oauth/clients/**")
               .and()
           .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.NEVER)
               .and()
           .exceptionHandling().accessDeniedHandler(new OAuth2AccessDeniedHandler())
               .and()
           // CSRF protection is awkward for machine clients
           .csrf()
               .requireCsrfProtectionMatcher(new AntPathRequestMatcher("/oauth/**")).disable()
           .apply(new OAuth2ResourceServerConfigurer()).tokenStore(tokenStore)
               .resourceId(SPARKLR_RESOURCE_ID);
   	// @formatter:on
}
 

import org.springframework.security.oauth2.provider.expression.OAuth2WebSecurityExpressionHandler; //导入依赖的package包/类
@Bean
public OAuth2WebSecurityExpressionHandler oAuth2WebSecurityExpressionHandler(ApplicationContext applicationContext){
    OAuth2WebSecurityExpressionHandler expressionHandler = new OAuth2WebSecurityExpressionHandler();
    expressionHandler.setApplicationContext(applicationContext);
    return expressionHandler;
}
 

import org.springframework.security.oauth2.provider.expression.OAuth2WebSecurityExpressionHandler; //导入依赖的package包/类
@Override
protected Class<?> getBeanClass(Element element) {
	return OAuth2WebSecurityExpressionHandler.class;
}