最新版的 flowable 6.6.0 绕过自带的登录限制（之前6.5版配置无效）

╰+哭是因爲堅強的太久メ 2022-10-10 06:03 140阅读 0赞

1. 找到项目maven目录

![acc8215f5b16b2d66f195ef1f956a036.png][]

2.在自己项目里面建相同包名，类名

package org.flowable.ui.modeler.conf; 重写ModelerSecurityConfiguration

package org.flowable.ui.modeler.conf;
    
    import org.flowable.ui.common.security.SecurityConstants;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.core.annotation.Order;
    import org.springframework.security.config.annotation.web.builders.HttpSecurity;
    import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
    import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
    import org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler;
    
    /**
     * 说明：重构ModelerSecurity
     * from：www.fhadmin.org
     */
    @Configuration(proxyBeanMethods = false)
    @EnableWebSecurity
    public class ModelerSecurityConfiguration {
    
        @Configuration
        @Order(SecurityConstants.MODELER_API_SECURITY_ORDER)
        public static class ModelerApiWebSecurityConfigurationAdapter extends WebSecurityConfigurerAdapter {
        	
            @Override
            protected void configure(HttpSecurity http) throws Exception {
            	
            	SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler();
        		successHandler.setTargetUrlParameter("redirectTo");
    
        		http.headers().frameOptions().disable();
            	
            	http.csrf().disable().authorizeRequests().antMatchers("/**/**").permitAll().anyRequest().authenticated().and().httpBasic();
            }
    
        }
    
    }

[acc8215f5b16b2d66f195ef1f956a036.png]: /images/20221005/c2985503329f419d9485778bc8397bfe.png