启动：
1.SecurityConfiguration extends WebSecurityConfigurerAdapter-》SecurityConfiguration方法初始化安全配置类
2.AuditSecurityConfiguration-》auditorAware()创建bean
3.SecurityConfiguration extends WebSecurityConfigurerAdapter-》configure(HttpSecurity http)方法配置
4.AuditSecurityConfiguration-》auditorAware()创建bean
访问首页：/api
1.JwtAuthorizationFilter extends BasicAuthenticationFilter-》doFilterInternal从请求的Header中取出 token 信息，然后判断 token 信息是否为空以及 token 信息格式是否正确
2./api/users/sign-up,/api/users restful接口通过@PreAuthorize("hasAnyRole('ROLE_USER','ROLE_MANAGER','ROLE_ADMIN')")控制
通过JwtAuthorizationFilter extends BasicAuthenticationFilter-》doFilterInternal判断token信息