lims项目框架修改优化--后端
blame | 历史 | 补丁 | 提交 | 提交对比 | 忽略空白
liding
2026-08-27 e39c7ba23d87c222960526f6ee90b38b2f73c2b1 
 ruoyi-framework/src/main/java/com/ruoyi/framework/config/SecurityConfig.java


@@ -1,13 +1,11 @@


package com.ruoyi.framework.config;




import com.ruoyi.framework.web.ssoAuth.SsoCodeAuthenticationProvider;


import org.springframework.beans.factory.annotation.Autowired;


import org.springframework.beans.factory.annotation.Qualifier;


import org.springframework.context.annotation.Bean;


import org.springframework.context.annotation.Configuration;


import org.springframework.http.HttpMethod;


import org.springframework.security.authentication.AuthenticationManager;


import org.springframework.security.authentication.AuthenticationProvider;


import org.springframework.security.authentication.ProviderManager;


import org.springframework.security.authentication.dao.DaoAuthenticationProvider;


import org.springframework.security.config.annotation.method.configuration.EnableMethodSecurity;


@@ -24,9 +22,6 @@


import com.ruoyi.framework.security.handle.AuthenticationEntryPointImpl;


import com.ruoyi.framework.security.handle.LogoutSuccessHandlerImpl;




import java.util.ArrayList;


import java.util.List;




/**


 * spring security配置


 *


@@ -42,13 +37,6 @@


    @Autowired


    @Qualifier("UserDetailsServiceImpl")


    private UserDetailsService userDetailsService;




    /**


     * sso自定义校验


     */


    @Autowired


    @Qualifier("UserDetailsByOpenIdServiceImpl")


    private UserDetailsService userDetailsServiceByOpenId;




    /**


     * 认证失败处理类


@@ -90,15 +78,7 @@


        daoAuthenticationProvider.setUserDetailsService(userDetailsService);


        daoAuthenticationProvider.setPasswordEncoder(bCryptPasswordEncoder());




        // sso登陆鉴权 Provider


        SsoCodeAuthenticationProvider wxCodeAuthenticationProvider = new SsoCodeAuthenticationProvider();


        wxCodeAuthenticationProvider.setUserDetailsService(userDetailsServiceByOpenId);


        List<AuthenticationProvider> providers = new ArrayList<>();




        providers.add(wxCodeAuthenticationProvider);


        providers.add(daoAuthenticationProvider);




        return new ProviderManager(providers);


        return new ProviderManager(daoAuthenticationProvider);


    }




    /**


@@ -134,7 +114,7 @@


            .authorizeHttpRequests((requests) -> {


                permitAllUrl.getUrls().forEach(url -> requests.antMatchers(url).permitAll());


                // 对于登录login 注册register 验证码captchaImage 允许匿名访问


                requests.antMatchers("/login", "/register", "/captchaImage", "/getSsoAuthUrl", "/loginBySSO").permitAll()


                requests.antMatchers("/login", "/register", "/captchaImage").permitAll()


                    // 静态资源，可匿名访问


                    .antMatchers(HttpMethod.GET, "/", "/*.html", "/**/*.html", "/**/*.css", "/**/*.js", "/profile/**", "/img/**", "/word/**").permitAll()


                    .antMatchers("/swagger-ui.html", "/swagger-resources/**", "/webjars/**", "/*/api-docs", "/druid/**").permitAll()