疯狂的狮子li
2022-01-11 26fc652d33fb82a75d6ec7771ca50ee414b21723
ruoyi-extend/ruoyi-monitor-admin/src/main/java/com/ruoyi/monitor/admin/config/SecurityConfig.java
@@ -16,33 +16,33 @@
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
   private final String adminContextPath;
    private final String adminContextPath;
   public SecurityConfig(AdminServerProperties adminServerProperties) {
      this.adminContextPath = adminServerProperties.getContextPath();
   }
    public SecurityConfig(AdminServerProperties adminServerProperties) {
        this.adminContextPath = adminServerProperties.getContextPath();
    }
   @Override
   protected void configure(HttpSecurity httpSecurity) throws Exception {
      SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler();
      successHandler.setTargetUrlParameter("redirectTo");
      successHandler.setDefaultTargetUrl(adminContextPath + "/");
      // admin监控 用户鉴权
      httpSecurity.authorizeRequests()
         //授予对所有静态资产和登录页面的公共访问权限。
         .antMatchers(adminContextPath + "/assets/**").permitAll()
         .antMatchers(adminContextPath + "/login").permitAll()
    @Override
    protected void configure(HttpSecurity httpSecurity) throws Exception {
        SavedRequestAwareAuthenticationSuccessHandler successHandler = new SavedRequestAwareAuthenticationSuccessHandler();
        successHandler.setTargetUrlParameter("redirectTo");
        successHandler.setDefaultTargetUrl(adminContextPath + "/");
        // admin监控 用户鉴权
        httpSecurity.authorizeRequests()
            //授予对所有静态资产和登录页面的公共访问权限。
            .antMatchers(adminContextPath + "/assets/**").permitAll()
            .antMatchers(adminContextPath + "/login").permitAll()
            .antMatchers("/actuator").permitAll()
            .antMatchers("/actuator/**").permitAll()
         //必须对每个其他请求进行身份验证
         .anyRequest().authenticated().and()
         //配置登录和注销
         .formLogin().loginPage(adminContextPath + "/login")
         .successHandler(successHandler).and()
         .logout().logoutUrl(adminContextPath + "/logout").and()
         //启用HTTP-Basic支持。这是Spring Boot Admin Client注册所必需的
         .httpBasic().and().csrf().disable()
         .headers().frameOptions().disable();
   }
            //必须对每个其他请求进行身份验证
            .anyRequest().authenticated().and()
            //配置登录和注销
            .formLogin().loginPage(adminContextPath + "/login")
            .successHandler(successHandler).and()
            .logout().logoutUrl(adminContextPath + "/logout").and()
            //启用HTTP-Basic支持。这是Spring Boot Admin Client注册所必需的
            .httpBasic().and().csrf().disable()
            .headers().frameOptions().disable();
    }
}