@Override
 protected void configure(HttpSecurity http) throws Exception {
 http.authorizeRequests()
  .antMatchers("/api/user/**").hasRole("user") //user 角色訪問/api/user/開頭的路由
  .antMatchers("/api/admin/**").hasRole("admin") //admin 角色訪問/api/admin/開頭的路由
  .antMatchers("/api/public/**").permitAll()   //允許所有可以訪問/api/public/開頭的路由
  .and()
  .formLogin()
  .and()
  .rememberMe().userDetailsService(userDetailsService()); //記住密碼
 }

public class PersistentRememberMeToken {
 private final String username;
 private final String series;
 private final String tokenValue;
 private final Date date;

 public PersistentRememberMeToken(String username, String series, String tokenValue, Date date) {
  this.username = username;
  this.series = series;
  this.tokenValue = tokenValue;
  this.date = date;
 }

 public String getUsername() {
  return this.username;
 }

 public String getSeries() {
  return this.series;
 }

 public String getTokenValue() {
  return this.tokenValue;
 }

 public Date getDate() {
  return this.date;
 }
}

@Service
public class MyPersistentTokenRepositoryImpl implements PersistentTokenRepository {

 @Autowired
 private JPAPersistentTokenRepository repository;

 @Override
 public void createNewToken(PersistentRememberMeToken persistentRememberMeToken) {
  MyPersistentToken myPersistentToken = new MyPersistentToken();
  myPersistentToken.setSeries(persistentRememberMeToken.getSeries());
  myPersistentToken.setUsername(persistentRememberMeToken.getUsername());
  myPersistentToken.setTokenValue(persistentRememberMeToken.getTokenValue());
  myPersistentToken.setUser_last(persistentRememberMeToken.getDate());
  repository.save(myPersistentToken);
 }

 @Override
 public void updateToken(String series, String tokenValue, Date lastUsed) {
  MyPersistentToken myPersistentToken = repository.findBySeries(series);
  myPersistentToken.setUser_last(lastUsed);
  myPersistentToken.setTokenValue(tokenValue);
  repository.save(myPersistentToken);
 }

 @Override
 public PersistentRememberMeToken getTokenForSeries(String series) {
  MyPersistentToken myPersistentToken = repository.findBySeries(series);
  PersistentRememberMeToken persistentRememberMeToken = new PersistentRememberMeToken(myPersistentToken.getUsername(), myPersistentToken.getSeries(), myPersistentToken.getTokenValue(), myPersistentToken.getUser_last());
  return persistentRememberMeToken;
 }

 @Override
 @Transactional
 public void removeUserTokens(String username) {
  repository.deleteByUsername(username);
 }
}

public interface JPAPersistentTokenRepository extends JpaRepository<MyPersistentToken,Long> {
 MyPersistentToken findBySeries(String series);
 void deleteByUsername(String username);
}

@Entity
@Table(name = "persistent_token")
public class MyPersistentToken {
 @Id
 @GeneratedValue(strategy = GenerationType.SEQUENCE)
 private Long id;
 private String username;
 @Column(unique = true)
 private String series;
 private String tokenValue;
 private Date user_last;

 public Long getId() {
  return id;
 }

 public void setId(Long id) {
  this.id = id;
 }

 public String getUsername() {
  return username;
 }

 public void setUsername(String username) {
  this.username = username;
 }

 public String getSeries() {
  return series;
 }

 public void setSeries(String series) {
  this.series = series;
 }

 public String getTokenValue() {
  return tokenValue;
 }

 public void setTokenValue(String tokenValue) {
  this.tokenValue = tokenValue;
 }

 public Date getUser_last() {
  return user_last;
 }

 public void setUser_last(Date user_last) {
  this.user_last = user_last;
 }
}