webflux+springsecrity+thymeleaf自定义登录页

@Slf4j
@Configuration
@EnableWebFluxSecurity
public class SecurityConfig {


    ServerAuthenticationFailureHandler failureHandler = new FormAuthenticationFailureHandler("/login?error");

    ServerLogoutSuccessHandler logoutSuccessHandler = new FormServerLogoutSuccessHandler("/login?logout");

    @Bean
    public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {

        http
                .formLogin() // 表单方式
                .loginPage("/login")
                .requiresAuthenticationMatcher(ServerWebExchangeMatchers.pathMatchers(HttpMethod.POST,"/login"))
                .authenticationFailureHandler(failureHandler)
                .and()
                .logout()
                // 注销操作的URL
                .requiresLogout(ServerWebExchangeMatchers.pathMatchers(HttpMethod.GET,"/logout"))
                .logoutSuccessHandler(logoutSuccessHandler)
                .and()
                .authorizeExchange()
                .pathMatchers("/index")
                .authenticated()
                .anyExchange()
                .permitAll()
                .and()
                .csrf()
                .disable()
                .cors();

        return http.build();
    }
}

public class FormAuthenticationFailureHandler implements ServerAuthenticationFailureHandler {

    private final URI location;

    private ServerRedirectStrategy redirectStrategy = new DefaultServerRedirectStrategy();

    public FormAuthenticationFailureHandler(String location) {
        Assert.notNull(location, "location cannot be null");
        this.location = URI.create(location);
    }

    @Override
    public Mono<Void> onAuthenticationFailure(WebFilterExchange exchange, AuthenticationException exception) {
        exchange.getExchange().getSession().block().getAttributes().put(WebAttributes.AUTHENTICATION_EXCEPTION, exception);
        return this.redirectStrategy.sendRedirect(exchange.getExchange(), this.location);
    }
}

public class FormServerLogoutSuccessHandler implements ServerLogoutSuccessHandler {

    public static final String DEFAULT_LOGOUT_SUCCESS_URL = "/login?logout";

    private URI logoutSuccessUrl = URI.create(DEFAULT_LOGOUT_SUCCESS_URL);

    private ServerRedirectStrategy redirectStrategy = new DefaultServerRedirectStrategy();


    public FormServerLogoutSuccessHandler(String logoutSuccessUrl) {
        Assert.notNull(logoutSuccessUrl, "logoutSuccessUrl cannot be null");
        this.logoutSuccessUrl = URI.create(logoutSuccessUrl);
    }

    @Override
    public Mono<Void> onLogoutSuccess(WebFilterExchange exchange, Authentication authentication) {
        exchange.getExchange().getSession().block().invalidate();
        return this.redirectStrategy
                .sendRedirect(exchange.getExchange(), this.logoutSuccessUrl);
    }
}

@Controller
public class IndexController {

    @GetMapping("/index")
    public String index() {
        return "index";
    }

    @GetMapping("/login")
    public String toLogin() {
        return "login";
    }

    @GetMapping("/logout")
    public String logout() {
        return "login";
    }
}