|
|
@ -22,8 +22,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
|
private String[] excluded;
|
|
|
|
private String[] excluded;
|
|
|
|
@Value("${r"${web.url.auth.included}"}")
|
|
|
|
@Value("${r"${web.url.auth.included}"}")
|
|
|
|
private String[] included;
|
|
|
|
private String[] included;
|
|
|
|
@Value("${r"${web.url.login}"}")
|
|
|
|
|
|
|
|
private String login;
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@Override
|
|
|
|
@Override
|
|
|
|
protected void configure(HttpSecurity http) throws Exception {
|
|
|
|
protected void configure(HttpSecurity http) throws Exception {
|
|
|
@ -32,7 +30,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
|
|
|
|
.authorizeRequests()
|
|
|
|
.authorizeRequests()
|
|
|
|
.antMatchers(excluded).permitAll()
|
|
|
|
.antMatchers(excluded).permitAll()
|
|
|
|
.antMatchers(included).access("@Authorization.hasPermission(request,authentication)")
|
|
|
|
.antMatchers(included).access("@Authorization.hasPermission(request,authentication)")
|
|
|
|
.and().formLogin().loginPage(login)
|
|
|
|
|
|
|
|
.and().cors()
|
|
|
|
.and().cors()
|
|
|
|
.and().headers().frameOptions().disable()
|
|
|
|
.and().headers().frameOptions().disable()
|
|
|
|
.and().csrf().disable();
|
|
|
|
.and().csrf().disable();
|
|
|
|