From f16e9c9e40e06bf59452195aaddf5b365aed9457 Mon Sep 17 00:00:00 2001
From: xieb <vip_xiaobin810@163.com>
Date: Tue, 09 Apr 2024 16:11:58 +0800
Subject: [PATCH] 拒绝/v2/api-docs 的访问控制
---
skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java | 4 ++++
1 files changed, 4 insertions(+), 0 deletions(-)
diff --git a/skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java b/skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java
index a154963..37f4615 100644
--- a/skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java
+++ b/skjcmanager/skjcmanager-auth/src/main/java/cn/gistack/auth/config/SecurityConfiguration.java
@@ -70,6 +70,10 @@
http.headers().frameOptions().disable();
http.httpBasic().and().csrf().disable();
http.formLogin().loginPage("/oauth/login").loginProcessingUrl("/oauth/form");
+
+ // 添加对 /v2/api-docs 的访问控制
+ http.authorizeRequests()
+ .antMatchers("/v2/api-docs").denyAll(); // 拒绝所有对 /v2/api-docs 的访问
}
@Override
--
Gitblit v1.9.3