升级到SpringBoot3 + Spring Security 6之后配置失效

来源:10-3 SpringSecurity5.7改造

咸鱼翻了身还是咸鱼

2023-01-13

@Bean
    public SecurityFilterChain filterChain(HttpSecurity httpSecurity) throws Exception {
        httpSecurity
                .csrf(AbstractHttpConfigurer::disable)
                .httpBasic(AbstractHttpConfigurer::disable)
                .formLogin(AbstractHttpConfigurer::disable)
                .logout(AbstractHttpConfigurer::disable)
                .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
                .and()
                .exceptionHandling().authenticationEntryPoint(authenticationEntryPoint())
                .and()
                .authorizeHttpRequests(authorizationRequest -> {
                    ignoreUrlsConfig.getUrls().forEach(url -> authorizationRequest.requestMatchers(url).permitAll());
                    authorizationRequest.requestMatchers(HttpMethod.OPTIONS).permitAll();
                    authorizationRequest.anyRequest().authenticated();
                })
                .addFilterBefore(tokenFilter, UsernamePasswordAuthenticationFilter.class);
        return httpSecurity.build();
    }

ignoreUrlsConfig里面的urls和OPTIONS请求都已经permitAll了,但是这些请求还是会进过滤器,并且报错。请问老师Spring Security有什么配置上的变化么,谢谢

写回答

1回答

接灰的电子产品

2023-01-13

我已经在课程里面说了短期内不会升级到 水平 boot 3 和 security 6,因为他们要求最低 java17,这个跨度过大,我们短期内不会升级

0
0

Spring Security+OAuth2 精讲,打造企业级认证与授权

一站式掌握主流安全框架与行业解决方案,从容应对各种安全难题。

1042 学习 · 316 问题

查看课程