|
@@ -2,6 +2,7 @@ package com.css.simulation.resource.server.infrastructure.common.configuration;
|
|
|
|
|
|
import com.css.simulation.resource.server.infrastructure.common.oauth.MyUserAuthenticationConverter;
|
|
import com.css.simulation.resource.server.infrastructure.common.oauth.MyUserAuthenticationConverter;
|
|
import com.css.simulation.resource.server.infrastructure.common.oauth.OauthParameter;
|
|
import com.css.simulation.resource.server.infrastructure.common.oauth.OauthParameter;
|
|
|
|
+import lombok.SneakyThrows;
|
|
import org.springframework.context.annotation.Configuration;
|
|
import org.springframework.context.annotation.Configuration;
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
|
|
import org.springframework.security.config.http.SessionCreationPolicy;
|
|
import org.springframework.security.config.http.SessionCreationPolicy;
|
|
@@ -41,12 +42,13 @@ public class OAuth2Configuration extends ResourceServerConfigurerAdapter {
|
|
* 配置拦截请求,通过 scope
|
|
* 配置拦截请求,通过 scope
|
|
*/
|
|
*/
|
|
@Override
|
|
@Override
|
|
- public void configure(HttpSecurity http) throws Exception {
|
|
|
|
|
|
+ @SneakyThrows
|
|
|
|
+ public void configure(HttpSecurity http) {
|
|
http.csrf().disable() // 禁用 csrf
|
|
http.csrf().disable() // 禁用 csrf
|
|
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)// 无状态验证
|
|
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)// 无状态验证
|
|
.and()
|
|
.and()
|
|
.authorizeRequests()
|
|
.authorizeRequests()
|
|
- .antMatchers("/**/report/**").access("#oauth2.hasScope('other')")//算法平台接口
|
|
|
|
|
|
+ .antMatchers("/**/report/**").access("#oauth2.hasScope('all')")//算法平台接口
|
|
.antMatchers("/**/monitor/createAutomaticSubProject").permitAll()//定时任务接口
|
|
.antMatchers("/**/monitor/createAutomaticSubProject").permitAll()//定时任务接口
|
|
.antMatchers("/druid/**").permitAll()
|
|
.antMatchers("/druid/**").permitAll()
|
|
.anyRequest().access("#oauth2.hasScope('all')") // 拦截所有请求判断 scope
|
|
.anyRequest().access("#oauth2.hasScope('all')") // 拦截所有请求判断 scope
|