package cn.iocoder.yudao.module.infra.framework.security.config;
|
|
import cn.iocoder.yudao.framework.security.config.AuthorizeRequestsCustomizer;
|
import org.springframework.context.annotation.Bean;
|
import org.springframework.context.annotation.Configuration;
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
import org.springframework.security.config.annotation.web.configurers.AuthorizeHttpRequestsConfigurer;
|
|
/**
|
* Infra 模块的 Security 配置
|
*/
|
@Configuration(proxyBeanMethods = false, value = "infraSecurityConfiguration")
|
public class SecurityConfiguration {
|
|
@Bean("infraAuthorizeRequestsCustomizer")
|
public AuthorizeRequestsCustomizer authorizeRequestsCustomizer() {
|
return new AuthorizeRequestsCustomizer() {
|
|
@Override
|
public void customize(AuthorizeHttpRequestsConfigurer<HttpSecurity>.AuthorizationManagerRequestMatcherRegistry registry) {
|
// Swagger 接口文档
|
registry.requestMatchers("/v3/api-docs/**").permitAll()
|
.requestMatchers("/webjars/**").permitAll()
|
.requestMatchers("/swagger-ui.html").permitAll()
|
.requestMatchers("/swagger-ui/**").permitAll();
|
// Spring Boot Actuator 的安全配置
|
registry.requestMatchers("/actuator").permitAll()
|
.requestMatchers("/actuator/**").permitAll();
|
// Druid 监控
|
registry.requestMatchers("/druid/**").permitAll();
|
// 文件读取
|
registry.requestMatchers(buildAdminApi("/infra/file/*/get/**")).permitAll();
|
}
|
|
};
|
}
|
|
}
|