| | |
|---|
| | | // 注解标记允许匿名访问的url |
|---|
| | | .authorizeHttpRequests((requests) -> { |
|---|
| | | permitAllUrl.getUrls().forEach(url -> requests.requestMatchers(url).permitAll()); |
|---|
| | | // 对于登录login 注册register 验证码captchaImage 允许匿名访问 |
|---|
| | | requests.requestMatchers("/login", "/register", "/captchaImage").permitAll() |
|---|
| | | // 对于登录login 注册register 允许匿名访问 |
|---|
| | | requests.requestMatchers("/login", "/register").permitAll() |
|---|
| | | // 静态资源，可匿名访问 |
|---|
| | | .requestMatchers(HttpMethod.GET, "/", "/*.html", "/**.html", "/**.css", "/**.js", "/profile/**").permitAll() |
|---|
| | | .requestMatchers(HttpMethod.GET, "/", "/*.html", "/**.html", "/**.css", "/**.js", "/profile/**", "/img/**", "/word/**").permitAll() |
|---|
| | | .requestMatchers("/swagger-ui.html", "/v3/api-docs/**", "/swagger-ui/**", "/druid/**").permitAll() |
|---|
| | | // 除上面外的所有请求全部需要鉴权认证 |
|---|
| | | .anyRequest().authenticated(); |
|---|
