blame | 历史 | 补丁 | 提交 | 提交对比 | ignore whitespace
admin
2021-06-26 6b2670dfa68af9ce2e36a5f9580125f4fc6da570 
 service-goldcorn/src/main/java/com/ks/goldcorn/config/WebSecurityConfig.java


@@ -5,10 +5,12 @@


import com.google.code.kaptcha.util.Config;


import com.ks.goldcorn.entity.AdminUser;


import com.ks.goldcorn.service.AdminUserManager;


import io.seata.rm.datasource.DataSourceProxy;


import net.sf.json.JSONObject;


import org.slf4j.Logger;


import org.slf4j.LoggerFactory;


import org.springframework.context.annotation.Bean;


import org.springframework.context.annotation.Primary;


import org.springframework.security.authentication.BadCredentialsException;


import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;


import org.springframework.security.authentication.dao.DaoAuthenticationProvider;


@@ -35,18 +37,20 @@


import javax.servlet.http.HttpServletRequest;


import javax.servlet.http.HttpServletResponse;


import javax.servlet.http.HttpSession;


import javax.sql.DataSource;


import java.io.IOException;


import java.util.Properties;




@EnableWebSecurity


public class WebSecurityConfig extends WebSecurityConfigurerAdapter {






    private Logger logger = LoggerFactory.getLogger(WebSecurityConfig.class);




    @Resource


    private AdminUserManager adminUserManager;




    private final String LOGIN_PROCESSING_URL="/admin/api/login";


    private final String LOGIN_PROCESSING_URL = "/admin/api/login";




    //图形验证码配置


    @Bean


@@ -126,9 +130,10 @@




    @Override


    protected void configure(HttpSecurity http) throws Exception {


        http.headers().frameOptions().disable();


        http.authorizeRequests()


                .antMatchers("/admin/api/captcha.jpg*").permitAll()


                .antMatchers("/admin/api/*").authenticated()


                .antMatchers("/admin/api/**", "/index.html").authenticated()


                .and()


                .formLogin()


                //自定义登录界面


@@ -170,7 +175,6 @@


            @Override


            public void onLogoutSuccess(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Authentication authentication) throws IOException, ServletException {


                logger.info("onLogoutSuccess");




            }


        })


                .and()