|
|
@@ -1,37 +1,21 @@
|
|
|
package seecoder.devcloud.web.infrastructure.config;
|
|
|
|
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
|
-import org.springframework.beans.factory.annotation.Qualifier;
|
|
|
import org.springframework.context.annotation.Bean;
|
|
|
import org.springframework.context.annotation.Configuration;
|
|
|
import org.springframework.context.annotation.DependsOn;
|
|
|
-import org.springframework.http.HttpMethod;
|
|
|
import org.springframework.security.authentication.AuthenticationManager;
|
|
|
-import org.springframework.security.authentication.AuthenticationProvider;
|
|
|
-import org.springframework.security.authentication.dao.DaoAuthenticationProvider;
|
|
|
-import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
|
|
|
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
|
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
|
-import org.springframework.security.config.annotation.web.builders.WebSecurity;
|
|
|
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
|
|
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
|
|
|
import org.springframework.security.config.http.SessionCreationPolicy;
|
|
|
-import org.springframework.security.core.userdetails.UserDetailsService;
|
|
|
-import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
|
|
|
-import org.springframework.security.crypto.password.PasswordEncoder;
|
|
|
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
|
|
|
import org.springframework.web.cors.CorsConfiguration;
|
|
|
import org.springframework.web.cors.CorsConfigurationSource;
|
|
|
import org.springframework.web.cors.CorsUtils;
|
|
|
import seecoder.devcloud.web.infrastructure.security.JwtAuthenticationTokenFilter;
|
|
|
import seecoder.devcloud.web.infrastructure.security.WebSecurityConstants;
|
|
|
-import seecoder.devcloud.web.service.impl.user.UserServiceImpl;
|
|
|
-
|
|
|
-import javax.servlet.http.HttpServletResponse;
|
|
|
-import javax.swing.*;
|
|
|
-import java.io.PrintWriter;
|
|
|
-import java.util.HashMap;
|
|
|
-import java.util.Map;
|
|
|
|
|
|
/**
|
|
|
* @author PuHong Weng
|
|
|
@@ -69,7 +53,6 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
.authorizeRequests()
|
|
|
//跨域的Options请求进行放行
|
|
|
.requestMatchers(CorsUtils::isPreFlightRequest).permitAll()
|
|
|
- //todo 具体角色权限配置等开发完成之后再配, 这里先配为默认所有权限
|
|
|
.antMatchers("/**").hasAnyRole(WebSecurityConstants.STUDENT_ROLE, WebSecurityConstants.ADMIN_ROLE)
|
|
|
//其他所有接口都要在登陆认证状态下请求
|
|
|
.anyRequest().authenticated();
|