此版本仍在开发中，尚未被视为稳定版本。对于最新的稳定版本，请使用 Spring Security 6.4.1！spring-doc.cn

注销

Spring Security 默认提供注销端点。登录后，您可以查看默认的注销确认页面，也可以启动注销。这将：GET /logoutPOST /logoutspring-doc.cn

清除、和ServerCsrfTokenRepositoryServerSecurityContextRepositoryspring-doc.cn
重定向回登录页面spring-doc.cn

通常，您还希望在注销时使会话无效。为此，您可以将添加到注销配置中，如下所示：WebSessionServerLogoutHandlerspring-doc.cn

Javaspring-doc.cn
Kotlinspring-doc.cn

@Bean
SecurityWebFilterChain http(ServerHttpSecurity http) throws Exception {
    DelegatingServerLogoutHandler logoutHandler = new DelegatingServerLogoutHandler(
            new WebSessionServerLogoutHandler(), new SecurityContextServerLogoutHandler()
    );

    http
        .authorizeExchange((exchange) -> exchange.anyExchange().authenticated())
        .logout((logout) -> logout.logoutHandler(logoutHandler));

    return http.build();
}

@Bean
fun http(http: ServerHttpSecurity): SecurityWebFilterChain {
    val customLogoutHandler = DelegatingServerLogoutHandler(
        WebSessionServerLogoutHandler(), SecurityContextServerLogoutHandler()
    )

    return http {
        authorizeExchange {
            authorize(anyExchange, authenticated)
        }
        logout {
            logoutHandler = customLogoutHandler
        }
    }
}