From a7d2d03fe177a58c22e960e9c87b32f7b05be74f Mon Sep 17 00:00:00 2001 From: CeDo <cedoo@qq.com> Date: 星期六, 01 五月 2021 22:57:48 +0800 Subject: [PATCH] add:添加小程序实名认证接口过滤(部分) --- springcloud_k8s_panzhihuazhihuishequ/zuul/src/main/java/com/panzhihua/zuul/config/SpringSecurityConfig.java | 21 ++++++++++----------- 1 files changed, 10 insertions(+), 11 deletions(-) diff --git a/springcloud_k8s_panzhihuazhihuishequ/zuul/src/main/java/com/panzhihua/zuul/config/SpringSecurityConfig.java b/springcloud_k8s_panzhihuazhihuishequ/zuul/src/main/java/com/panzhihua/zuul/config/SpringSecurityConfig.java index 8d74a7e..71bc6f9 100644 --- a/springcloud_k8s_panzhihuazhihuishequ/zuul/src/main/java/com/panzhihua/zuul/config/SpringSecurityConfig.java +++ b/springcloud_k8s_panzhihuazhihuishequ/zuul/src/main/java/com/panzhihua/zuul/config/SpringSecurityConfig.java @@ -1,5 +1,6 @@ package com.panzhihua.zuul.config; +import com.panzhihua.zuul.filters.AppletAuthenticationFilter; import com.panzhihua.zuul.filters.JWTAuthenticationTokenFilter; import com.panzhihua.zuul.filters.SercuritFilter; import com.panzhihua.zuul.handles.UserAuthAccessDeniedHandler; @@ -34,6 +35,7 @@ */ @Resource private UserAuthAccessDeniedHandler userAuthAccessDeniedHandler; + @Override protected void configure(HttpSecurity http) throws Exception { http.authorizeRequests() @@ -49,16 +51,13 @@ .and() // 配置没有权限自定义处理类 .exceptionHandling().accessDeniedHandler(userAuthAccessDeniedHandler) - .and() - .csrf().disable(); - // 基于Token不需要session - http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS); - // 禁用缓存 - http.headers().cacheControl(); - http.addFilterBefore(new JWTAuthenticationTokenFilter(), AnonymousAuthenticationFilter.class); - - - - + .and() + .csrf().disable(); + // 基于Token不需要session + http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS); + // 禁用缓存 + http.headers().cacheControl(); + http.antMatcher("/api/applet/**").addFilterBefore(new AppletAuthenticationFilter(), AnonymousAuthenticationFilter.class); + http.addFilterBefore(new JWTAuthenticationTokenFilter(), AnonymousAuthenticationFilter.class); } } -- Gitblit v1.7.1