| | |
|---|
| | | |
|---|
| | | @Override |
|---|
| | | protected void configure(AuthenticationManagerBuilder auth) throws Exception { |
|---|
| | | auth.authenticationProvider(new DaoAuthenticationProvider()); |
|---|
| | | auth.userDetailsService(userDetailsService).passwordEncoder(new BCryptPasswordEncoder()); |
|---|
| | | } |
|---|
| | | |
|---|
| | |
|---|
| | | registry.and() |
|---|
| | | // 表单登录方式 |
|---|
| | | .formLogin() |
|---|
| | | .loginPage("/xboot/common/needLogin") |
|---|
| | | //.loginPage("/xboot/common/needLogin") |
|---|
| | | .loginPage("/index.html") |
|---|
| | | // 登录请求url |
|---|
| | | .loginProcessingUrl("/xboot/login") |
|---|
| | | //.loginProcessingUrl("/login") |
|---|
| | | .permitAll() |
|---|
| | | // 成功处理类 |
|---|
| | | .successHandler(successHandler) |
|---|
| | |
|---|
| | | .authenticated() |
|---|
| | | .and() |
|---|
| | | // 允许跨域 |
|---|
| | | .cors().and() |
|---|
| | | //.cors().and() |
|---|
| | | // 关闭跨站请求防护 |
|---|
| | | .csrf().disable() |
|---|
| | | // 前后端分离采用JWT 不需要session |
|---|
| | |
|---|
| | | // 自定义权限拒绝处理类 |
|---|
| | | .exceptionHandling().accessDeniedHandler(accessDeniedHandler) |
|---|
| | | .and() |
|---|
| | | // 图形验证码过滤器 |
|---|
| | | .addFilterBefore(imageValidateFilter, UsernamePasswordAuthenticationFilter.class) |
|---|
| | | //图形验证码过滤器 |
|---|
| | | //.addFilterBefore(imageValidateFilter, UsernamePasswordAuthenticationFilter.class) |
|---|
| | | // 短信验证码过滤器 |
|---|
| | | .addFilterBefore(smsValidateFilter, UsernamePasswordAuthenticationFilter.class) |
|---|
| | | //.addFilterBefore(smsValidateFilter, UsernamePasswordAuthenticationFilter.class) |
|---|
| | | // vaptcha验证码过滤器 |
|---|
| | | .addFilterBefore(vaptchaValidateFilter, UsernamePasswordAuthenticationFilter.class) |
|---|
| | | //.addFilterBefore(vaptchaValidateFilter, UsernamePasswordAuthenticationFilter.class) |
|---|
| | | // email验证码过滤器 |
|---|
| | | .addFilterBefore(emailValidateFilter, UsernamePasswordAuthenticationFilter.class) |
|---|
| | | //.addFilterBefore(emailValidateFilter, UsernamePasswordAuthenticationFilter.class) |
|---|
| | | // 添加自定义权限过滤器 |
|---|
| | | .addFilterBefore(myFilterSecurityInterceptor, FilterSecurityInterceptor.class) |
|---|
| | | // 添加JWT认证过滤器 |
|---|
