diff --git a/mall-security/src/main/java/com/macro/mall/security/config/SecurityConfig.java b/mall-security/src/main/java/com/macro/mall/security/config/SecurityConfig.java index ecaefe5..2c4b660 100644 --- a/mall-security/src/main/java/com/macro/mall/security/config/SecurityConfig.java +++ b/mall-security/src/main/java/com/macro/mall/security/config/SecurityConfig.java @@ -46,23 +46,23 @@ public class SecurityConfig { //允许跨域请求的OPTIONS请求 registry.antMatchers(HttpMethod.OPTIONS) .permitAll(); - // 任何请求需要身份认证 + //任何请求都需要身份认证 registry.and() .authorizeRequests() .anyRequest() .authenticated() - // 关闭跨站请求防护及不使用session + //关闭跨站请求防护及不使用session .and() .csrf() .disable() .sessionManagement() .sessionCreationPolicy(SessionCreationPolicy.STATELESS) - // 自定义权限拒绝处理类 + //自定义权限拒绝处理类 .and() .exceptionHandling() .accessDeniedHandler(restfulAccessDeniedHandler) .authenticationEntryPoint(restAuthenticationEntryPoint) - // 自定义权限拦截器JWT过滤器 + //自定义权限拦截器JWT过滤器 .and() .addFilterBefore(jwtAuthenticationTokenFilter, UsernamePasswordAuthenticationFilter.class); //有动态权限配置时添加动态权限校验过滤器