限制用户操作数据权限范围

RuoYi

2024-05-29 4b699cd34c729f36a6ad4bb9ddcc0520c4bf3e61

 src/main/java/com/ruoyi/framework/config/SecurityConfig.java

@@ -98,10 +98,12 @@
        // 注解标记允许匿名访问的url

        ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry registry = httpSecurity.authorizeRequests();

        permitAllUrl.getUrls().forEach(url -> registry.antMatchers(url).permitAll());

 


        httpSecurity

                // CSRF禁用，因为不使用session

                .csrf().disable()

                // 禁用HTTP响应标头

                .headers().cacheControl().disable().and()

                // 认证失败处理类

                .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()

                // 基于token，所以不需要session