升级到SpringBoot3 + Spring Security 6之后配置失效
来源:10-3 SpringSecurity5.7改造

咸鱼翻了身还是咸鱼
2023-01-13
@Bean
public SecurityFilterChain filterChain(HttpSecurity httpSecurity) throws Exception {
httpSecurity
.csrf(AbstractHttpConfigurer::disable)
.httpBasic(AbstractHttpConfigurer::disable)
.formLogin(AbstractHttpConfigurer::disable)
.logout(AbstractHttpConfigurer::disable)
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
.and()
.exceptionHandling().authenticationEntryPoint(authenticationEntryPoint())
.and()
.authorizeHttpRequests(authorizationRequest -> {
ignoreUrlsConfig.getUrls().forEach(url -> authorizationRequest.requestMatchers(url).permitAll());
authorizationRequest.requestMatchers(HttpMethod.OPTIONS).permitAll();
authorizationRequest.anyRequest().authenticated();
})
.addFilterBefore(tokenFilter, UsernamePasswordAuthenticationFilter.class);
return httpSecurity.build();
}
ignoreUrlsConfig里面的urls和OPTIONS请求都已经permitAll了,但是这些请求还是会进过滤器,并且报错。请问老师Spring Security有什么配置上的变化么,谢谢
写回答
1回答
-
接灰的电子产品
2023-01-13
我已经在课程里面说了短期内不会升级到 水平 boot 3 和 security 6,因为他们要求最低 java17,这个跨度过大,我们短期内不会升级
00
相似问题