|
|
@@ -22,7 +22,7 @@ import org.springframework.security.web.authentication.AuthenticationSuccessHand
|
|
|
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
|
|
|
import org.springframework.security.web.authentication.logout.LogoutHandler;
|
|
|
import org.springframework.security.web.authentication.logout.LogoutSuccessHandler;
|
|
|
-import org.springframework.security.web.context.SecurityContextPersistenceFilter;
|
|
|
+import org.springframework.security.web.context.SecurityContextHolderFilter;
|
|
|
|
|
|
/**
|
|
|
* Web 应用安全配置
|
|
|
@@ -65,7 +65,7 @@ public class WebSecurityConfig {
|
|
|
.authorizeHttpRequests(request -> request
|
|
|
.requestMatchers("/api/account/**").authenticated()
|
|
|
.anyRequest().permitAll())
|
|
|
- .addFilterAfter(new LoginRedirectFilter(), SecurityContextPersistenceFilter.class)
|
|
|
+ .addFilterAfter(new LoginRedirectFilter(), SecurityContextHolderFilter.class)
|
|
|
.addFilterBefore(accountAuthFilter(authenticationManager), UsernamePasswordAuthenticationFilter.class)
|
|
|
.addFilterBefore(thirdPartyAuthFilter(authenticationManager), UsernamePasswordAuthenticationFilter.class)
|
|
|
.securityContext().securityContextRepository(mySecurityContextRepository)
|