## ``` org.springframework.boot spring-boot-starter-web org.springframework.boot spring-boot-starter-data-jpa com.h2database h2 ``` 视图模板: ``` org.springframework.boot spring-boot-starter-thymeleaf ``` ``` spring.thymeleaf.cache=false spring.thymeleaf.enabled=true spring.thymeleaf.prefix=classpath:/templates/ spring.thymeleaf.suffix=.html spring.application.name=Bootstrap Spring Boot ``` 安全: ``` org.springframework.boot spring-boot-starter-security ``` 所有端点都会根据 Spring Security 的内容协商策略使用 httpBasic 或 formLogin 进行默认安全保护 ``` @Configuration @EnableWebSecurity public class SecurityConfig { @Bean public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { http.authorizeHttpRequests(expressionInterceptUrlRegistry -> expressionInterceptUrlRegistry .anyRequest() .permitAll()) .csrf(AbstractHttpConfigurer::disable); return http.build(); } } ```