blame | 历史 | 补丁 | 提交 | 提交对比 | ignore whitespace
xiangpei
2024-07-11 5073a245f53fd5ca936e779be8c6b9b19d42f67d 
 src/main/java/com/ycl/jxkg/config/spring/security/SecurityConfigurer.java


@@ -2,7 +2,7 @@




import com.ycl.jxkg.config.property.CookieConfig;


import com.ycl.jxkg.config.property.SystemConfig;


import com.ycl.jxkg.domain.enums.RoleEnum;


import com.ycl.jxkg.enums.RoleEnum;


import org.springframework.beans.factory.annotation.Autowired;


import org.springframework.context.annotation.Bean;


import org.springframework.context.annotation.Configuration;


@@ -67,6 +67,12 @@


            this.restAccessDeniedHandler = restAccessDeniedHandler;


        }




        @Bean


        public SessionFilter sessionFilter() throws Exception {


            SessionFilter jwtTokenFilter = new SessionFilter(authenticationManagerBean());


            return jwtTokenFilter;


        }




        /**


         * @param http http


         * @throws Exception exception


@@ -84,8 +90,10 @@


                    .and().authenticationProvider(restAuthenticationProvider)


                    .authorizeRequests()


                    .antMatchers(securityIgnoreUrls.toArray(ignores)).permitAll()


                    .antMatchers("/api/admin/user/update/password").permitAll()


                    .antMatchers("/api/admin/**").hasRole(RoleEnum.ADMIN.getName())


                    .antMatchers("/api/student/**").hasRole(RoleEnum.STUDENT.getName())


                    .antMatchers("/api/register/**").anonymous()


                    .anyRequest().permitAll()


                    .and().exceptionHandling().accessDeniedHandler(restAccessDeniedHandler)


                    .and().formLogin().successHandler(restAuthenticationSuccessHandler).failureHandler(restAuthenticationFailureHandler)


@@ -93,6 +101,7 @@


                    .and().rememberMe().key(CookieConfig.getName()).tokenValiditySeconds(CookieConfig.getInterval()).userDetailsService(formDetailsService)


                    .and().csrf().disable()


                    .cors();


            http.addFilter(sessionFilter());


        }