spring security 使用正确的用户名密码仍然提示用户名或密码错误是为什么呢？

Question

使用的MybatisPlus连接数据库，测试数据库数据可以正常读取，但是就是无法登录。
相关代码如下

package com.mavenbase.minilibspringboot.service;

import com.mavenbase.minilibspringboot.dao.AccountMapper;
import com.mavenbase.minilibspringboot.pojo.Account;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.core.authority.SimpleGrantedAuthority;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UsernameNotFoundException;
import org.springframework.stereotype.Service;

@Service
public class UserDetailsServiceImpl implements UserDetailsService {
    @Autowired
    AccountMapper accountMapper;
    /*@Autowired
    PasswordEncoder passwordEncoder;

    @Bean
    public PasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
    }*/


    @Override
    public UserDetails loadUserByUsername(String name) throws UsernameNotFoundException {
        Account account = accountMapper.getAccount(name);
        if (account==null){
            throw new UsernameNotFoundException("用户不存在");
        }
        return User.withUsername(account.getName()).password(account.getPassword()).authorities(new SimpleGrantedAuthority("ROLE_" + account.getRole())).build();
    }
}

package com.mavenbase.minilibspringboot.config;

import com.mavenbase.minilibspringboot.service.UserDetailsService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Autowired
    UserDetailsService userDetailsService;

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .antMatchers("/book/*").hasRole("root")
                .antMatchers("/book/*").hasRole("user")
                .antMatchers("/book/*").hasRole("administrators");
        http.formLogin();
        http.csrf().ignoringAntMatchers("/druid/*");
    }

}

直接跳转错误请求了。

也是第一次手写代码，希望能够稍微详细一点，缕缕思路，谢谢！

Answer 1

UserDetail的那些boolean方法，可都是有用的，那一堆什么可用啊，没有被锁啊，登录流程中都是会校验的
密码校验前可是有这些boolen方法校验的，手动全部改成true再去跑

Answer 2

spring security属于比较重的框架了，而且默认必须配置密码加密模式，你就是没有配置密码加密就直接把明文密码放到.password(明文)里，它底层是按照加密模式来检查匹配的，所以一致验证错误，正确的姿势是传入加密后的密码：
.password(new BCryptPasswordEncoder().encode(account.getPassword()))