若依 3.8.5

RuoYi

2023-01-01 e8a4a8b999edd51397527cd16aefa9e7e4761c55

 src/main/java/com/ruoyi/framework/config/SecurityConfig.java

@@ -98,10 +98,12 @@
        // 注解标记允许匿名访问的url

        ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry registry = httpSecurity.authorizeRequests();

        permitAllUrl.getUrls().forEach(url -> registry.antMatchers(url).permitAll());

 


        httpSecurity

                // CSRF禁用，因为不使用session

                .csrf().disable()

                // 禁用HTTP响应标头

                .headers().cacheControl().disable().and()

                // 认证失败处理类

                .exceptionHandling().authenticationEntryPoint(unauthorizedHandler).and()

                // 基于token，所以不需要session