package com.ks.tool.bkz;
|
|
import org.springframework.context.annotation.Configuration;
|
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
import org.springframework.security.config.annotation.web.builders.WebSecurity;
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
|
|
//@Configuration
|
//@EnableWebSecurity
|
public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
@Override
|
protected void configure(HttpSecurity http) throws Exception {
|
super.configure(http);
|
http.authorizeRequests()
|
.antMatchers("/").permitAll() //主路径允许访问
|
.anyRequest().authenticated() //验证
|
.and()
|
.logout().permitAll() //注销也是运行访问
|
.and()
|
.formLogin();
|
http.csrf().disable(); //关闭csrf() 认证
|
}
|
|
@Override
|
public void configure(WebSecurity web) throws Exception {
|
super.configure(web);
|
web.ignoring().antMatchers("/js/**", "/css/**", "/images/**");
|
}
|
|
@Override
|
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
|
super.configure(auth);
|
}
|
}
|