|
|
@ -13,12 +13,16 @@ import cc.hiver.core.config.security.validate.ImageValidateFilter; |
|
|
import cc.hiver.core.config.security.validate.SmsValidateFilter; |
|
|
import cc.hiver.core.config.security.validate.SmsValidateFilter; |
|
|
import lombok.extern.slf4j.Slf4j; |
|
|
import lombok.extern.slf4j.Slf4j; |
|
|
import org.springframework.beans.factory.annotation.Autowired; |
|
|
import org.springframework.beans.factory.annotation.Autowired; |
|
|
|
|
|
import org.springframework.context.annotation.Bean; |
|
|
import org.springframework.context.annotation.Configuration; |
|
|
import org.springframework.context.annotation.Configuration; |
|
|
|
|
|
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder; |
|
|
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; |
|
|
import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity; |
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity; |
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity; |
|
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; |
|
|
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; |
|
|
import org.springframework.security.config.annotation.web.configurers.ExpressionUrlAuthorizationConfigurer; |
|
|
import org.springframework.security.config.annotation.web.configurers.ExpressionUrlAuthorizationConfigurer; |
|
|
import org.springframework.security.config.http.SessionCreationPolicy; |
|
|
import org.springframework.security.config.http.SessionCreationPolicy; |
|
|
|
|
|
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder; |
|
|
|
|
|
import org.springframework.security.crypto.password.PasswordEncoder; |
|
|
import org.springframework.security.web.access.intercept.FilterSecurityInterceptor; |
|
|
import org.springframework.security.web.access.intercept.FilterSecurityInterceptor; |
|
|
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; |
|
|
import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter; |
|
|
|
|
|
|
|
|
@ -62,6 +66,19 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter { |
|
|
@Autowired |
|
|
@Autowired |
|
|
private SecurityUtil securityUtil; |
|
|
private SecurityUtil securityUtil; |
|
|
|
|
|
|
|
|
|
|
|
@Autowired |
|
|
|
|
|
private UserDetailsServiceImpl userDetailsService; |
|
|
|
|
|
|
|
|
|
|
|
@Bean |
|
|
|
|
|
public PasswordEncoder passwordEncoder() { |
|
|
|
|
|
return new BCryptPasswordEncoder(); |
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
@Override |
|
|
|
|
|
protected void configure(AuthenticationManagerBuilder auth) throws Exception { |
|
|
|
|
|
auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder()); |
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
@Override |
|
|
@Override |
|
|
protected void configure(HttpSecurity http) throws Exception { |
|
|
protected void configure(HttpSecurity http) throws Exception { |
|
|
ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry registry = http |
|
|
ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry registry = http |
|
|
|