spring securityの画面遷移

package com.example.demo.config;

import java.io.IOException;

import org.springframework.boot.autoconfigure.security.servlet.PathRequest;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.userdetails.User;
import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.provisioning.InMemoryUserDetailsManager;
import org.springframework.security.web.SecurityFilterChain;
import org.springframework.security.web.authentication.AuthenticationSuccessHandler;

import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;

@Configuration
@EnableWebSecurity
@EnableMethodSecurity
public class SecurityConfig {

	@Bean
	public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
		http
				.authorizeHttpRequests(authz -> authz
						.requestMatchers(PathRequest.toStaticResources().atCommonLocations()).permitAll()
						.requestMatchers("/").permitAll()
						.requestMatchers("/user/list").hasRole("FUNCTION1") // /user/listへのアクセスはFUNCTION1の役割が必要
						.requestMatchers("/user/employ").hasRole("FUNCTION2") // /user/employへのアクセスはFUNCTION2の役割が必要
						.anyRequest().authenticated()) // それ以外のリクエストは認証が必要
				.formLogin(formLogin -> formLogin
						.successHandler(authenticationSuccessHandler())) // ログイン成功時のハンドラを設定
				.exceptionHandling(exceptionHandling -> exceptionHandling
						.accessDeniedHandler((request, response, accessDeniedException) -> {
							response.sendRedirect("/");
						})); // アクセス拒否時のハンドラを設定
		return http.build();
	}

	@Bean
	public InMemoryUserDetailsManager userDetailsService() {
		// ユーザー1の設定
		UserDetails user1 = User.withUsername("user1")
				.passwordEncoder(passwordEncoder()::encode) // パスワードのエンコード
				.password("1111") // パスワード
				.roles("FUNCTION1") // ロール（役割）
				.build();

		// ユーザー2の設定
		UserDetails user2 = User.withUsername("user2")
				.passwordEncoder(passwordEncoder()::encode) // パスワードのエンコード
				.password("2222") // パスワード
				.roles("FUNCTION2") // ロール（役割）
				.build();

		return new InMemoryUserDetailsManager(user1, user2);
	}

	@Bean
	public PasswordEncoder passwordEncoder() {
		return new BCryptPasswordEncoder();
	}

	@Bean
	public AuthenticationSuccessHandler authenticationSuccessHandler() {
		return new CustomAuthenticationSuccessHandler();
	}

	// ログイン成功時のハンドラクラス
	private static class CustomAuthenticationSuccessHandler implements AuthenticationSuccessHandler {

		@Override
		public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response,
				Authentication authentication) throws IOException, ServletException {
			if (request.isUserInRole("FUNCTION1")) {
				response.sendRedirect("/user/list"); // FUNCTION1の役割を持つユーザーは/user/listにリダイレクト
			} else if (request.isUserInRole("FUNCTION2")) {
				response.sendRedirect("/user/employ"); // FUNCTION2の役割を持つユーザーは/user/employにリダイレクト
			} else {
				response.sendRedirect("/"); // 上記以外のユーザーはルート(/)にリダイレクト
			}
		}
	}
}