From 4226bfc255dd827f8c90bb7a9cc6aa4649925de9 Mon Sep 17 00:00:00 2001
From: Helius <wangdoubleone@gmail.com>
Date: Mon, 11 Jul 2022 14:32:19 +0800
Subject: [PATCH] fix
---
src/main/java/com/xcong/farmer/cms/configurations/security/WebSecurityConfig.java | 14 ++++++++++++++
1 files changed, 14 insertions(+), 0 deletions(-)
diff --git a/src/main/java/com/xcong/farmer/cms/configurations/security/WebSecurityConfig.java b/src/main/java/com/xcong/farmer/cms/configurations/security/WebSecurityConfig.java
index 7012aae..6e4ae50 100644
--- a/src/main/java/com/xcong/farmer/cms/configurations/security/WebSecurityConfig.java
+++ b/src/main/java/com/xcong/farmer/cms/configurations/security/WebSecurityConfig.java
@@ -1,6 +1,8 @@
package com.xcong.farmer.cms.configurations.security;
+import com.xcong.farmer.cms.configurations.WebMvcConfig;
import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.autoconfigure.AutoConfigureAfter;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.HttpMethod;
@@ -22,6 +24,7 @@
* @date 2020-05-11
**/
@Slf4j
+@AutoConfigureAfter(WebMvcConfig.class)
@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(prePostEnabled = true)
@@ -29,6 +32,7 @@
@Resource
private UserDetailsService userDetailsService;
+
@Override
protected void configure(HttpSecurity http) throws Exception {
@@ -39,9 +43,19 @@
.authorizeRequests()
.antMatchers(HttpMethod.OPTIONS, "/**").permitAll()
.antMatchers("/login").permitAll()
+ .antMatchers("/cms/**").permitAll()
+ .antMatchers("/html").permitAll()
.antMatchers("/swagger**/**").permitAll()
.antMatchers("/webjars/**").permitAll()
.antMatchers("/v2/**").permitAll()
+ .antMatchers("/api/common/login").permitAll()
+ .antMatchers("/api/common/captcha").permitAll()
+ .antMatchers("/api/common/doUpload").permitAll()
+ .antMatchers("/api/common/uploadFile").permitAll()
+ .antMatchers("/api/messageBoard/addMessage").permitAll()
+ .antMatchers("/api/article/webArticleInPage").permitAll()
+ .antMatchers("/api/column/webColumnInList").permitAll()
+ .antMatchers("/image/**").permitAll()
.anyRequest().authenticated()
.and().apply(securityConfiguereAdapter());
}
--
Gitblit v1.9.1