代码提交--标签相关

2020-09-27 17:35:31 +08:00
parent ba3c813106
commit fde1079d74
30 changed files with 788 additions and 290 deletions
@@ -1,4 +1,5 @@
 package com.yaoyuan.jiscuss.config;
+
 import org.springframework.context.annotation.Configuration;
 import org.springframework.web.servlet.config.annotation.ResourceHandlerRegistry;
 import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
@@ -15,18 +15,18 @@ import springfox.documentation.swagger2.annotations.EnableSwagger2;
@EnableSwagger2
 public class SwaggerConfiguration {

-	@Bean
-	public Docket createRestApi() {
-		return new Docket(DocumentationType.SWAGGER_2).apiInfo(apiInfo()).select()
-				.apis(RequestHandlerSelectors.basePackage("com.yaoyuan.jiscuss.controller")).paths(PathSelectors.any())
-				.build();
-	}
+    @Bean
+    public Docket createRestApi() {
+        return new Docket(DocumentationType.SWAGGER_2).apiInfo(apiInfo()).select()
+                .apis(RequestHandlerSelectors.basePackage("com.yaoyuan.jiscuss.controller")).paths(PathSelectors.any())
+                .build();
+    }
+
+    @SuppressWarnings("deprecation")
+    private ApiInfo apiInfo() {
+        return new ApiInfoBuilder().title("swagger-ui RESTful APIs").description("Jiscuss")
+                .termsOfServiceUrl("http://localhost/").contact("developer@mail.com").version("1.0").build();
+    }

-	@SuppressWarnings("deprecation")
-	private ApiInfo apiInfo() {
-		return new ApiInfoBuilder().title("swagger-ui RESTful APIs").description("Jiscuss")
-				.termsOfServiceUrl("http://localhost/").contact("developer@mail.com").version("1.0").build();
-	}
-	

 }
@@ -15,85 +15,89 @@ import org.springframework.security.core.userdetails.UserDetailsService;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;

 /**
-prePostEnabled :决定Spring Security的前注解是否可用 [@PreAuthorize,@PostAuthorize,..]
-secureEnabled : 决定是否Spring Security的保障注解 [@Secured] 是否可用
-jsr250Enabled ：决定 JSR-250 annotations 注解[@RolesAllowed..] 是否可用.
+ * prePostEnabled :决定Spring Security的前注解是否可用 [@PreAuthorize,@PostAuthorize,..]
+ * secureEnabled : 决定是否Spring Security的保障注解 [@Secured] 是否可用
+ * jsr250Enabled ：决定 JSR-250 annotations 注解[@RolesAllowed..] 是否可用.
 */
@Configurable
@EnableWebSecurity
 //开启 Spring Security 方法级安全注解 @EnableGlobalMethodSecurity
-@EnableGlobalMethodSecurity(prePostEnabled = true,securedEnabled = true,jsr250Enabled = true)
-public class WebSecurityConfig extends WebSecurityConfigurerAdapter{
+@EnableGlobalMethodSecurity(prePostEnabled = true, securedEnabled = true, jsr250Enabled = true)
+public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

-	@Autowired
-	private CustomAccessDeniedHandler customAccessDeniedHandler;
-	@Qualifier("userDetailServiceImpl")
-	@Autowired
-	private UserDetailsService userDetailsService;
-	
-	/**
-	 * 静态资源设置
-	 */
-	@Override
-	public void configure(WebSecurity webSecurity) {
-		//不拦截静态资源,所有用户均可访问的资源
-		webSecurity.ignoring().antMatchers(
-				"/",
-				"/css/**",
-				"/js/**",
-				"/images/**",
-				"/static/**",
-				"/h2-console/**",
-				"/druid/**"
-				);
-	}
-	/**
-	 * http请求设置
-	 */
-	@Override
-	public void configure(HttpSecurity http) throws Exception {
-		//http.csrf().disable(); //注释就是使用 csrf 功能		
-		http.headers().frameOptions().disable();//解决 in a frame because it set 'X-Frame-Options' to 'DENY' 问题			
-		//http.anonymous().disable();
-		http.authorizeRequests()
-			.antMatchers("/login/**","/initUserData")//不拦截登录相关方法		
-			.permitAll()		
-			//.antMatchers("/user").hasRole("ADMIN")  // user接口只有ADMIN角色的可以访问
+    @Autowired
+    private CustomAccessDeniedHandler customAccessDeniedHandler;
+    @Qualifier("userDetailServiceImpl")
+    @Autowired
+    private UserDetailsService userDetailsService;
+
+    /**
+     * 静态资源设置
+     */
+    @Override
+    public void configure(WebSecurity webSecurity) {
+        //不拦截静态资源,所有用户均可访问的资源
+        webSecurity.ignoring().antMatchers(
+                "/",
+                "/css/**",
+                "/js/**",
+                "/images/**",
+                "/static/**",
+                "/h2-console/**",
+                "/test/**",
+                "/druid/**"
+        );
+    }
+
+    /**
+     * http请求设置
+     */
+    @Override
+    public void configure(HttpSecurity http) throws Exception {
+        //http.csrf().disable(); //注释就是使用 csrf 功能
+        http.headers().frameOptions().disable();//解决 in a frame because it set 'X-Frame-Options' to 'DENY' 问题
+        //http.anonymous().disable();
+        http.authorizeRequests()
+                .antMatchers("/login/**", "/initUserData")//不拦截登录相关方法
+                .permitAll()
+                //.antMatchers("/user").hasRole("ADMIN")  // user接口只有ADMIN角色的可以访问
 //			.anyRequest()
 //			.authenticated()// 任何尚未匹配的URL只需要验证用户即可访问
-			.anyRequest()
-			.access("@rbacPermission.hasPermission(request, authentication)")//根据账号权限访问			
-			.and()
-			.formLogin()
+                .anyRequest()
+                .access("@rbacPermission.hasPermission(request, authentication)")//根据账号权限访问
+                .and()
+                .formLogin()
 //			.loginPage("/")
-			.loginPage("/login")   //登录请求页
-			.loginProcessingUrl("/login")  //登录POST请求路径
-			.usernameParameter("username") //登录用户名参数
-			.passwordParameter("password") //登录密码参数
-			.defaultSuccessUrl("/index")   //默认登录成功页面
-			.and()
-			.exceptionHandling()
-			.accessDeniedHandler(customAccessDeniedHandler) //无权限处理器
-			.and()
-			.logout()
-			.logoutSuccessUrl("/login?logout");  //退出登录成功URL
-			
-	}
-	/**
-	 * 自定义获取用户信息接口
-	 */
-	@Override
-	public void configure(AuthenticationManagerBuilder auth) throws Exception {
-		auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder());
-	}
-	
-	/**
+                .loginPage("/login")   //登录请求页
+                .loginProcessingUrl("/login")  //登录POST请求路径
+                .usernameParameter("username") //登录用户名参数
+                .passwordParameter("password") //登录密码参数
+                .defaultSuccessUrl("/index")   //默认登录成功页面
+                .and()
+                .exceptionHandling()
+                .accessDeniedHandler(customAccessDeniedHandler) //无权限处理器
+                .and()
+                .logout()
+                .logoutSuccessUrl("/login?logout");  //退出登录成功URL
+
+    }
+
+    /**
+     * 自定义获取用户信息接口
+     */
+    @Override
+    public void configure(AuthenticationManagerBuilder auth) throws Exception {
+        auth.userDetailsService(userDetailsService).passwordEncoder(passwordEncoder());
+    }
+
+    /**
     * 密码加密算法
+     *
     * @return
     */
    @Bean
    public BCryptPasswordEncoder passwordEncoder() {
        return new BCryptPasswordEncoder();
- 
+
    }
 }