From 2f4555ade506bd5e7c8cafef5d717c635edfab2d Mon Sep 17 00:00:00 2001
From: guoshilong <123456>
Date: Tue, 09 Apr 2024 16:13:51 +0800
Subject: [PATCH] Merge remote-tracking branch 'origin/jtdev' into jtdev
---
skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java | 20 ++++++++++++++++++++
1 files changed, 20 insertions(+), 0 deletions(-)
diff --git a/skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java b/skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java
index 6f927d0..37f4615 100644
--- a/skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java
+++ b/skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java
@@ -19,9 +19,11 @@
import cn.gistack.auth.support.BladePasswordEncoderFactories;
import lombok.AllArgsConstructor;
import lombok.SneakyThrows;
+import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.authentication.AuthenticationManager;
+import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.builders.WebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
@@ -35,6 +37,20 @@
@Configuration(proxyBeanMethods = false)
@AllArgsConstructor
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {
+
+ @Autowired
+ private MyAuthenticationProvider myAuthenticationProvider;
+
+ /**
+ * 认证设置
+ * @param auth 认证manager
+ * @throws Exception 异常
+ */
+ @Override
+ protected void configure(AuthenticationManagerBuilder auth) throws Exception {
+ //设置自定义认证provider
+ auth.authenticationProvider(myAuthenticationProvider);
+ }
@Bean
@Override
@@ -54,6 +70,10 @@
http.headers().frameOptions().disable();
http.httpBasic().and().csrf().disable();
http.formLogin().loginPage("/oauth/login").loginProcessingUrl("/oauth/form");
+
+ // 添加对 /v2/api-docs 的访问控制
+ http.authorizeRequests()
+ .antMatchers("/v2/api-docs").denyAll(); // 拒绝所有对 /v2/api-docs 的访问
}
@Override
--
Gitblit v1.9.3