protected void configure(HttpSecurity http) {
    http.formLogin().loginPage("/token/login").loginProcessingUrl("/token/custom")
            .successHandler(tenantSavedRequestAwareAuthenticationSuccessHandler())
            .failureHandler(authenticationFailureHandler()).and().logout()
            .logoutSuccessHandler(logoutSuccessHandler()).deleteCookies("JSESSIONID").invalidateHttpSession(true)
            .and().authorizeRequests().antMatchers("/token/**", "/actuator/**", "/mobile/**").permitAll()
            .anyRequest().authenticated().and().csrf().disable();
}

@Controller
@RequestMapping("token")
public class PageController {

    @GetMapping("/login")
    public String login(){
        System.out.println();
        return "login";
    }

    @PostMapping("/custom")
    public void ok(HttpServletResponse response ,@RequestParam("username")String username ,@RequestParam("password")String password){
        //自定义校验逻辑
        //...
        //处理完后重定向到之前的请求路径
        response.sendRedirect("https://www.baidu.com");
    }
}