WebSecurityConfig 设置忽略拦截

约定不等于承诺〃 2021-09-25 13:44 559阅读 0赞

这是官方文档给出的基本配置，默认会拦截所有路径

import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.builders.WebSecurity;
    import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    import org.springframework.security.core.userdetails.User;
    import org.springframework.security.core.userdetails.UserDetails;
    import org.springframework.security.core.userdetails.UserDetailsService;
    
    @Configuration
    @EnableWebSecurity
    public class WebSecurityConfig extends WebSecurityConfigurerAdapter { 
    	@Override
    	protected void configure(HttpSecurity http) throws Exception { 
    		http
    		.authorizeRequests()
    			.antMatchers("/", "/home").permitAll()
    			.anyRequest().authenticated()
    			.and()
    		.formLogin()
    			.loginPage("/login")
    			.permitAll()
    			.and()
    		.logout()
    			.permitAll();
    	}
    
    	@Bean
    	@Override
    	public UserDetailsService userDetailsService() { 
    		UserDetails user =
    				User.withUsername("admin1").password("123456").roles("admin").build();
    // User.withDefaultPasswordEncoder()
    // .username("user")
    // .password("password")
    // .roles("USER")
    // .build();
    
    		return null;
    	}
    
    }

如果有一个请求路径是`http://localhost:8125/test/method1`不想被拦截，需要在这个类里边加上这一句

@Override
    	public void configure(WebSecurity web) throws Exception { 
    	    web.ignoring().antMatchers("/test/method1");
    	}

也可以用正则表达式

web.ignoring().antMatchers("/test/method*");

这样会忽略所有路径

web.ignoring().antMatchers("/**");