feat: provides authentication and authorization expression dialects

[guqing]

What type of PR is this?

/kind feature
/milestone 2.0.0-rc.1
/area core

What this PR does / why we need it:

主题端支持使用表达式方言获取登录状态和判断权限，例如：

获取当前登录用户名

<div th:text="${#authentication.name}">
  The value of the "name" property of the authentication object should appear here.
</div>

关于判断登录状态我们并不推荐调用表达式 ${#authentication.isAuthenticated()}，因为始终返回 true，使用以下几种属性表达式代替：

<div sec:authorize="isAuthenticated()">
如果不是匿名用户你会看到我
</div>

<div sec:authorize="isFullyAuthenticated()">
如果不是匿名用户且不是 rememberMe 你会看到我
</div>

其他

<div sec:authorize="isAnonymous()">
如果是匿名用户你会看到我
</div>

<div sec:authorize="isRememberMe()">
如果是 rememberMe  你会看到我
</div>

更多请参考：
https://github.com/thymeleaf/thymeleaf-extras-springsecurity

Console 端判断是否登录需要改一下，目前所有未登录状态都属于一个叫 anonymousUser 的用户

Which issue(s) this PR fixes:

Fixes #2676

Special notes for your reviewer:

/cc @halo-dev/sig-halo

Does this PR introduce a user-facing change?

主题端支持使用表达式方言获取登录状态和判断权限

[f2c-ci-robot]

@guqing: The provided milestone is not valid for this repository. Milestones in this repository: [1.5.6, 1.5.x, 1.6.1, 1.6.x, 2.0.0-rc.1, 2.0.0-rc.2, 2.0.0, 2.0.x, Backlog]

Use /milestone clear to clear the milestone.

In response to this:

What type of PR is this?

/kind feature
/milestone 2.0
/area core

What this PR does / why we need it:

主题端支持使用表达式方言获取登录状态和判断权限，例如：

<div th:text="${#authentication.name}">
 The value of the "name" property of the authentication object should appear here.
</div>

更多请参考：
https://github.com/thymeleaf/thymeleaf-extras-springsecurity

Console 端判断是否登录需要改一下，目前所有未登录状态都属于一个叫 anonymousUser 的用户

Which issue(s) this PR fixes:

Fixes #2676

Special notes for your reviewer:

/cc @halo-dev/sig-halo

Does this PR introduce a user-facing change?

主题端支持使用表达式方言获取登录状态和判断权限

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[guqing]

/milestone 2.0.0-rc.1

[ruibaby]

/lgtm

[JohnNiang]

/approve

[f2c-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: JohnNiang

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [JohnNiang]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment