| | |
|---|
| | | |
|---|
| | | // 忽略登录请求的token验证 |
|---|
| | | String requestURI = request.getRequestURI(); |
|---|
| | | if ((requestURI.startsWith("/doc.html") || requestURI.startsWith("/swagger-ui") ) && !userSetting.getDocEnable()) { |
|---|
| | | response.setStatus(HttpServletResponse.SC_NOT_FOUND); |
|---|
| | | return; |
|---|
| | | } |
|---|
| | | if (requestURI.equalsIgnoreCase("/api/user/login")) { |
|---|
| | | chain.doFilter(request, response); |
|---|
| | | return; |
|---|
| | | } |
|---|
| | | |
|---|
| | | if (!userSetting.isInterfaceAuthentication()) { |
|---|
| | | UsernamePasswordAuthenticationToken token = new UsernamePasswordAuthenticationToken(null, null, new ArrayList<>() ); |
|---|
| | | SecurityContextHolder.getContext().setAuthentication(token); |
|---|
