mirror of
https://github.com/macrozheng/mall.git
synced 2025-06-27 04:20:01 +00:00
Update SecurityConfig.java
This commit is contained in:
parent
0511fc48ff
commit
c6a225ff46
@ -46,23 +46,23 @@ public class SecurityConfig {
|
||||
//允许跨域请求的OPTIONS请求
|
||||
registry.antMatchers(HttpMethod.OPTIONS)
|
||||
.permitAll();
|
||||
// 任何请求需要身份认证
|
||||
//任何请求都需要身份认证
|
||||
registry.and()
|
||||
.authorizeRequests()
|
||||
.anyRequest()
|
||||
.authenticated()
|
||||
// 关闭跨站请求防护及不使用session
|
||||
//关闭跨站请求防护及不使用session
|
||||
.and()
|
||||
.csrf()
|
||||
.disable()
|
||||
.sessionManagement()
|
||||
.sessionCreationPolicy(SessionCreationPolicy.STATELESS)
|
||||
// 自定义权限拒绝处理类
|
||||
//自定义权限拒绝处理类
|
||||
.and()
|
||||
.exceptionHandling()
|
||||
.accessDeniedHandler(restfulAccessDeniedHandler)
|
||||
.authenticationEntryPoint(restAuthenticationEntryPoint)
|
||||
// 自定义权限拦截器JWT过滤器
|
||||
//自定义权限拦截器JWT过滤器
|
||||
.and()
|
||||
.addFilterBefore(jwtAuthenticationTokenFilter, UsernamePasswordAuthenticationFilter.class);
|
||||
//有动态权限配置时添加动态权限校验过滤器
|
||||
|
Loading…
x
Reference in New Issue
Block a user