优化密码输入错误时登录日志重复问题

RuoYi

2023-12-13 828156f53cb1a97f37772dfcc3bd31eb6ecd9742

 src/main/java/com/ruoyi/framework/config/SecurityConfig.java

@@ -98,10 +98,12 @@
        // 注解标记允许匿名访问的url

        ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry registry = httpSecurity.authorizeRequests();

        permitAllUrl.getUrls().forEach(url -> registry.antMatchers(url).permitAll());

 


        httpSecurity

                // CSRF禁用，因为不使用session

                .csrf().disable()

                // 禁用HTTP响应标头

                .headers().cacheControl().disable().and()

                // 认证失败处理类

                .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()

                // 基于token，所以不需要session