From 2617b4a5ae33b85f79b06cf497329f7f9bf8887b Mon Sep 17 00:00:00 2001 From: admin Date: Mon, 12 May 2025 16:39:08 +0900 Subject: [PATCH] =?UTF-8?q?=E6=9A=82=E6=97=B6=E5=BC=80=E6=94=BE=E6=89=80?= =?UTF-8?q?=E6=9C=89=E6=9D=83=E9=99=90?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../app/config/security/SecurityConfig.java | 28 +++++++++++++------ 1 file changed, 20 insertions(+), 8 deletions(-) diff --git a/src/main/java/co/jp/app/config/security/SecurityConfig.java b/src/main/java/co/jp/app/config/security/SecurityConfig.java index 131727c..a912e8c 100644 --- a/src/main/java/co/jp/app/config/security/SecurityConfig.java +++ b/src/main/java/co/jp/app/config/security/SecurityConfig.java @@ -21,11 +21,11 @@ import org.springframework.security.web.authentication.UsernamePasswordAuthentic @Configuration public class SecurityConfig { - private final JwtAuthenticationFilter jwtAuthenticationFilter; + //private final JwtAuthenticationFilter jwtAuthenticationFilter; private final UserDetailsService userDetailsService; public SecurityConfig(@Lazy JwtAuthenticationFilter jwtAuthenticationFilter, @Lazy UserDetailsService userDetailsService) { - this.jwtAuthenticationFilter = jwtAuthenticationFilter; + //this.jwtAuthenticationFilter = jwtAuthenticationFilter; this.userDetailsService = userDetailsService; } @@ -47,16 +47,28 @@ public class SecurityConfig { return authenticationConfiguration.getAuthenticationManager(); } +// @Bean +// public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { +// http.csrf(AbstractHttpConfigurer::disable) +// .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) +// .authorizeHttpRequests(auth -> auth +// .requestMatchers("/api/user/login", "/api/user/register").permitAll() +// .anyRequest().authenticated() +// ) +// .authenticationProvider(authenticationProvider()) +// .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class); +// +// return http.build(); +// } + @Bean + //暂时开放所有权限 public SecurityFilterChain filterChain(HttpSecurity http) throws Exception { + http.csrf(AbstractHttpConfigurer::disable) - .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) .authorizeHttpRequests(auth -> auth - .requestMatchers("/api/user/login", "/api/user/register").permitAll() - .anyRequest().authenticated() - ) - .authenticationProvider(authenticationProvider()) - .addFilterBefore(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class); + .anyRequest().permitAll() + ); return http.build(); }