"status": 401, "error": "Unauthorized", "message": "Unauthorized", "path": "/order/confirms"
阿新 • • 發佈:2020-07-26
<dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-security</artifactId> </dependency>
有這個依賴的話,需要配置:
@Configuration @EnableWebSecurity @EnableGlobalMethodSecurity(prePostEnabled=true) public class WebSecurityConfig extends WebSecurityConfigurerAdapter { @Overrideprotected void configure( HttpSecurity httpSecurity ) throws Exception { //httpSecurity.authorizeRequests().anyRequest().permitAll(); httpSecurity.csrf().disable(); httpSecurity.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and() .authorizeRequests() .antMatchers(HttpMethod.OPTIONS,"/**").permitAll() .antMatchers(HttpMethod.POST).permitAll() .antMatchers(HttpMethod.PUT).permitAll() .antMatchers(HttpMethod.DELETE).permitAll() .antMatchers(HttpMethod.GET).permitAll(); httpSecurity.headers().cacheControl(); } }
或者
import org.springframework.context.annotation.Configuration; import org.springframework.security.config.annotation.web.builders.HttpSecurity; import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter; /** * 忽略安全登入 */ @Configuration public class SecurityConfig extends WebSecurityConfigurerAdapter { @Override protected void configure(HttpSecurity http) throws Exception { http.authorizeRequests().antMatchers("/**").permitAll(); http.csrf().disable(); } }