From c3271d7407e43c176d03c777a89367357c2262e2 Mon Sep 17 00:00:00 2001
From: 64850858 <648540858@qq.com>
Date: 星期四, 08 七月 2021 09:26:12 +0800
Subject: [PATCH] 优化鉴权例外， 添加.gitignore
---
.gitignore | 1 +
src/main/java/com/genersoft/iot/vmp/conf/security/WebSecurityConfig.java | 12 ++++++++++--
src/main/resources/all-application.yml | 2 +-
3 files changed, 12 insertions(+), 3 deletions(-)
diff --git a/.gitignore b/.gitignore
index 54054a0..51ebf9e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,3 +26,4 @@
/.idea/
/target/
+/src/main/resources/static/
diff --git a/src/main/java/com/genersoft/iot/vmp/conf/security/WebSecurityConfig.java b/src/main/java/com/genersoft/iot/vmp/conf/security/WebSecurityConfig.java
index 2841681..1c06e0c 100644
--- a/src/main/java/com/genersoft/iot/vmp/conf/security/WebSecurityConfig.java
+++ b/src/main/java/com/genersoft/iot/vmp/conf/security/WebSecurityConfig.java
@@ -1,6 +1,8 @@
package com.genersoft.iot.vmp.conf.security;
import com.genersoft.iot.vmp.conf.UserSetup;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
@@ -23,6 +25,8 @@
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
+
+ private final static Logger logger = LoggerFactory.getLogger(WebSecurityConfig.class);
@Autowired
private UserSetup userSetup;
@@ -88,9 +92,13 @@
.antMatchers("/v3/api-docs/**")
.antMatchers("/js/**");
List<String> interfaceAuthenticationExcludes = userSetup.getInterfaceAuthenticationExcludes();
- System.out.println(interfaceAuthenticationExcludes.size());
for (String interfaceAuthenticationExclude : interfaceAuthenticationExcludes) {
- web.ignoring().antMatchers(interfaceAuthenticationExclude);
+ if (interfaceAuthenticationExclude.split("/").length < 4 ) {
+ logger.warn("{}涓嶆弧瓒充袱鏋佺洰褰曪紝宸插拷鐣�", interfaceAuthenticationExclude);
+ }else {
+ web.ignoring().antMatchers(interfaceAuthenticationExclude);
+ }
+
}
}
}
diff --git a/src/main/resources/all-application.yml b/src/main/resources/all-application.yml
index 3e8456c..127cbcf 100644
--- a/src/main/resources/all-application.yml
+++ b/src/main/resources/all-application.yml
@@ -134,7 +134,7 @@
wait-track: false
# 鏄惁寮�鍚帴鍙ｉ壌鏉�
interface-authentication: true
- # 鎺ュ彛閴存潈渚嬪鐨勬帴鍙�, 鍗充笉杩涜鎺ュ彛閴存潈鐨勬帴鍙�
+ # 鎺ュ彛閴存潈渚嬪鐨勬帴鍙�, 鍗充笉杩涜鎺ュ彛閴存潈鐨勬帴鍙�,灏介噺璇︾粏涔﹀啓锛屽敖閲忎笉鐢�/**锛岃嚦灏戜袱绾х洰褰�
interface-authentication-excludes:
- /api/v1/**
# 鎺ㄦ祦鐩存挱鏄惁褰曞埗
--
Gitblit v1.8.0