@EnableGlobalMethodSecurity(prePostEnabled = true)
public class SecurityConfig{
    .....
}

@RestController
public class HelloController {
     @RequestMapping("/hello")
     @PreAuthorize("hasAuthority('test')")
     public String hello(){
         return "hello";
     }
 }

@Data
@NoArgsConstructor
public class LoginUser implements UserDetails{
    private User user;
    //查詢到的權限列表
    private List<String> list;
    public LoginUser(User user, List<String> list) {
        this.list = list;
        this.user = user;
    }
    //自定義一個權限列表的集合  中轉操作
    @JSONField(serialize = false)
    List<SimpleGrantedAuthority> authorities;
    //返回權限
    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        if (authorities != null) {
            return authorities;
        }
        authorities = new ArrayList<>();
        for (String item : list) {
            SimpleGrantedAuthority authority = new SimpleGrantedAuthority(item);
            authorities.add(authority);
        }
        return authorities;
    }
    //獲取密碼
    @Override
    public String getPassword() {
        return user.getPassword();
    }
    //獲取用戶名
    @Override
    public String getUsername() {
        return user.getUserName();
    }
    //判斷賬號是否未過期
    @Override
    public boolean isAccountNonExpired() {
        return true;
    }
    //判斷賬號是否沒有鎖定
    @Override
    public boolean isAccountNonLocked() {
        return true;
    }
    //判斷賬號是否沒有超時
    @Override
    public boolean isCredentialsNonExpired() {
        return true;
    }
    //判斷賬號是否可用
    @Override
    public boolean isEnabled() {
        return true;
    }
}

@Service
public class UserDetailServiceImpl implements UserDetailsService {
    @Autowired
    private UserMapper userMapper;
    @Autowired
    private MenuMapper menuMapper;
    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        //1.查詢用戶信息
        QueryWrapper<User> queryWrapper = new QueryWrapper<>();
        queryWrapper.eq("user_name", username);
        User user = userMapper.selectOne(queryWrapper);
        //如果沒有查詢到用戶，就拋出異常
        if (Objects.isNull(user)) {
            throw new RuntimeException("用戶名或密碼錯誤");
        }
        //2.查詢用戶對應的權限信息
//        List<String> list = new ArrayList<>();
//        list.add("select");
//        list.add("delete");
        List<String> list =  menuMapper.selectPermsByUserId(user.getId());
        //3.返回UserDetails對象
        return new LoginUser(user, list);
    }
}