| | |
|---|
| | | .and().authenticationProvider(restAuthenticationProvider) |
|---|
| | | .authorizeRequests() |
|---|
| | | .antMatchers(securityIgnoreUrls.toArray(ignores)).permitAll() |
|---|
| | | .antMatchers("/api/admin/user/update/password").permitAll() |
|---|
| | | .antMatchers("/api/admin/**").hasRole(RoleEnum.ADMIN.getName()) |
|---|
| | | .antMatchers("/api/student/**").hasAnyRole(RoleEnum.STUDENT.getName(),RoleEnum.ADMIN.getName()) |
|---|
| | | .antMatchers("/api/student/**").hasRole(RoleEnum.STUDENT.getName()) |
|---|
| | | .antMatchers("/api/register/**").anonymous() |
|---|
| | | .anyRequest().permitAll() |
|---|
| | | .and().exceptionHandling().accessDeniedHandler(restAccessDeniedHandler) |
|---|
