Permission verification technology of Spring Security+JWT

JWT is a token mechanism for judging user login.
Spring Security is a framework for back-end authentication of requested resources. It can customize login/logout logic, specify release interface, verification interface, and add JWT filter implementation to the inspection interface
The interface that is allowed by login permission verification will not perform JWT filter verification. JWT's filet verification can use the interceptor interface of the spring mvc framework, so that when Spring Security releases the interface, the spring mvc interceptor loses its effect. When Spring Security verifies the interface, spring MVC plays a role and can use this mechanism to perform jwt authentication, so as to realize the restriction that certain interfaces can only be accessed after the user logs in.