|
@@ -1,9 +1,6 @@
|
|
|
package cn.reghao.autodop.dmaster.auth.config;
|
|
package cn.reghao.autodop.dmaster.auth.config;
|
|
|
|
|
|
|
|
-import cn.reghao.autodop.dmaster.auth.jwt.JwtTokenFilter;
|
|
|
|
|
-import cn.reghao.autodop.dmaster.auth.jwt.UserDetailsServiceImpl;
|
|
|
|
|
-import cn.reghao.autodop.dmaster.auth.jwt.UsernamePasswordAuthFilter;
|
|
|
|
|
-import cn.reghao.autodop.dmaster.auth.jwt.UsernamePasswordAuthProvider;
|
|
|
|
|
|
|
+import cn.reghao.autodop.dmaster.auth.jwt.*;
|
|
|
import org.springframework.context.annotation.Bean;
|
|
import org.springframework.context.annotation.Bean;
|
|
|
import org.springframework.context.annotation.Configuration;
|
|
import org.springframework.context.annotation.Configuration;
|
|
|
import org.springframework.security.access.expression.SecurityExpressionHandler;
|
|
import org.springframework.security.access.expression.SecurityExpressionHandler;
|
|
@@ -43,7 +40,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
.antMatchers("/**").permitAll()
|
|
.antMatchers("/**").permitAll()
|
|
|
// TODO 放行所有接口(测试时使用)
|
|
// TODO 放行所有接口(测试时使用)
|
|
|
//.antMatchers("/api/**").permitAll()
|
|
//.antMatchers("/api/**").permitAll()
|
|
|
- //.antMatchers("/*").permitAll()
|
|
|
|
|
|
|
+ .antMatchers("/logout").permitAll()
|
|
|
.antMatchers("/actuator/health").permitAll()
|
|
.antMatchers("/actuator/health").permitAll()
|
|
|
.anyRequest().authenticated();
|
|
.anyRequest().authenticated();
|
|
|
|
|
|
|
@@ -66,6 +63,11 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
.and()
|
|
.and()
|
|
|
.httpBasic().disable();
|
|
.httpBasic().disable();
|
|
|
|
|
|
|
|
|
|
+ // TODO 处理 POST /logout, spring security 中默认的 /logout 不能处理 options 请求
|
|
|
|
|
+ http.logout()
|
|
|
|
|
+ .logoutUrl("/signout")
|
|
|
|
|
+ .logoutSuccessHandler(new LogoutSuccessHandlerImpl());
|
|
|
|
|
+
|
|
|
http.addFilterBefore(usernamePasswordAuthFilter(), UsernamePasswordAuthenticationFilter.class);
|
|
http.addFilterBefore(usernamePasswordAuthFilter(), UsernamePasswordAuthenticationFilter.class);
|
|
|
http.addFilterAfter(new JwtTokenFilter(), UsernamePasswordAuthFilter.class);
|
|
http.addFilterAfter(new JwtTokenFilter(), UsernamePasswordAuthFilter.class);
|
|
|
}
|
|
}
|