From 26d5fafd348c5db23e36a2f3cc1a6cd36729c9fb Mon Sep 17 00:00:00 2001 From: xiaoyong931011 <15274802129@163.com> Date: Tue, 09 Jun 2020 15:20:33 +0800 Subject: [PATCH] 20200609 代码提交 --- src/main/java/com/xcong/excoin/configurations/security/WebSecurityConfig.java | 157 ++++++++++++++++++++++++++-------------------------- 1 files changed, 79 insertions(+), 78 deletions(-) diff --git a/src/main/java/com/xcong/excoin/configurations/security/WebSecurityConfig.java b/src/main/java/com/xcong/excoin/configurations/security/WebSecurityConfig.java index 31b0a2d..bf4af09 100644 --- a/src/main/java/com/xcong/excoin/configurations/security/WebSecurityConfig.java +++ b/src/main/java/com/xcong/excoin/configurations/security/WebSecurityConfig.java @@ -1,78 +1,79 @@ -package com.xcong.excoin.configurations.security; - -import lombok.extern.slf4j.Slf4j; -import org.springframework.context.annotation.Bean; -import org.springframework.context.annotation.Configuration; -import org.springframework.http.HttpMethod; -import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; -import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; -import org.springframework.security.config.annotation.web.builders.HttpSecurity; -import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; -import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; -import org.springframework.security.core.userdetails.UserDetailsService; -import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; -import org.springframework.security.crypto.password.PasswordEncoder; -import org.springframework.security.web.AuthenticationEntryPoint; -import org.springframework.security.web.access.AccessDeniedHandler; - -import javax.annotation.Resource; - -/** - * @author wzy - * @date 2020-05-11 - **/ -@Slf4j -@Configuration -@EnableWebSecurity -@EnableGlobalMethodSecurity(prePostEnabled = true) -public class WebSecurityConfig extends WebSecurityConfigurerAdapter { - - @Resource - private UserDetailsService userDetailsService; - - @Override - protected void configure(HttpSecurity http) throws Exception { - http.httpBasic().and(). - cors().and().csrf().disable() - .exceptionHandling().authenticationEntryPoint(authenticationEntryPoint()) - .and() - .authorizeRequests() - .antMatchers(HttpMethod.OPTIONS, "/**").permitAll() - .antMatchers("/login").permitAll() - .antMatchers("/register").permitAll() - .antMatchers("/swagger**/**").permitAll() - .antMatchers("/webjars/**").permitAll() - .antMatchers("/v2/**").permitAll() - .antMatchers("/api/symbols/**").permitAll() - .antMatchers("/common/**").permitAll() - .antMatchers("/api/exchange/**").permitAll() - .antMatchers("/api/member/getMemberAccountInfo").permitAll() - .antMatchers("/api/member/memberForgetPwd").permitAll() - .anyRequest().authenticated() - .and().apply(securityConfiguereAdapter()); - } - - @Override - protected void configure(AuthenticationManagerBuilder auth) throws Exception { - auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder()); - } - - @Bean - public PasswordEncoder passwordEncoder() { - return new BCryptPasswordEncoder(); - } - - @Bean - public AccessDeniedHandler accessDeniedHandler() { - return new CustomAccessDeniedHandler(); - } - - @Bean - public AuthenticationEntryPoint authenticationEntryPoint() { - return new CustomAuthenticationEntryPoint(); - } - - public TokenConfigurer securityConfiguereAdapter() { - return new TokenConfigurer(); - } -} +package com.xcong.excoin.configurations.security; + +import lombok.extern.slf4j.Slf4j; +import org.springframework.context.annotation.Bean; +import org.springframework.context.annotation.Configuration; +import org.springframework.http.HttpMethod; +import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; +import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; +import org.springframework.security.config.annotation.web.builders.HttpSecurity; +import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity; +import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; +import org.springframework.security.core.userdetails.UserDetailsService; +import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; +import org.springframework.security.crypto.password.PasswordEncoder; +import org.springframework.security.web.AuthenticationEntryPoint; +import org.springframework.security.web.access.AccessDeniedHandler; + +import javax.annotation.Resource; + +/** + * @author wzy + * @date 2020-05-11 + **/ +@Slf4j +@Configuration +@EnableWebSecurity +@EnableGlobalMethodSecurity(prePostEnabled = true) +public class WebSecurityConfig extends WebSecurityConfigurerAdapter { + + @Resource + private UserDetailsService userDetailsService; + + @Override + protected void configure(HttpSecurity http) throws Exception { + http.httpBasic().and(). + cors().and().csrf().disable() + .exceptionHandling().authenticationEntryPoint(authenticationEntryPoint()) + .and() + .authorizeRequests() + .antMatchers(HttpMethod.OPTIONS, "/**").permitAll() + .antMatchers("/login").permitAll() + .antMatchers("/register").permitAll() + .antMatchers("/swagger**/**").permitAll() + .antMatchers("/webjars/**").permitAll() + .antMatchers("/v2/**").permitAll() + .antMatchers("/api/symbols/**").permitAll() + .antMatchers("/common/**").permitAll() + .antMatchers("/api/exchange/**").permitAll() + .antMatchers("/api/member/getMemberAccountInfo").permitAll() + .antMatchers("/api/member/memberForgetPwd").permitAll() + .antMatchers("/api/orderCoin/searchSymbolResultList").permitAll() + .anyRequest().authenticated() + .and().apply(securityConfiguereAdapter()); + } + + @Override + protected void configure(AuthenticationManagerBuilder auth) throws Exception { + auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder()); + } + + @Bean + public PasswordEncoder passwordEncoder() { + return new BCryptPasswordEncoder(); + } + + @Bean + public AccessDeniedHandler accessDeniedHandler() { + return new CustomAccessDeniedHandler(); + } + + @Bean + public AuthenticationEntryPoint authenticationEntryPoint() { + return new CustomAuthenticationEntryPoint(); + } + + public TokenConfigurer securityConfiguereAdapter() { + return new TokenConfigurer(); + } +} -- Gitblit v1.9.1