SecurityContextHolder, to provide access to the SecurityContext. SecurityContext: to hold the Authentication and possibly request-specific security information. Authentication: 表示用户认证信息 GrantedAuthority: 当前用户拥有的权限,通过Authentication的getAuthorities()获取,…