|
@@ -8,6 +8,7 @@ import org.springframework.beans.factory.annotation.Autowired;
|
|
|
import org.springframework.beans.factory.annotation.Value;
|
|
|
import org.springframework.context.annotation.Bean;
|
|
|
import org.springframework.context.annotation.Configuration;
|
|
|
+import org.springframework.core.annotation.Order;
|
|
|
import org.springframework.http.HttpMethod;
|
|
|
import org.springframework.security.authentication.AuthenticationManager;
|
|
|
import org.springframework.security.authentication.ProviderManager;
|
|
@@ -99,6 +100,7 @@ public class SecurityConfig {
|
|
|
* authenticated | 用户登录后可访问
|
|
|
*/
|
|
|
@Bean
|
|
|
+ @Order(1)
|
|
|
protected SecurityFilterChain filterChain(HttpSecurity httpSecurity) throws Exception {
|
|
|
return httpSecurity
|
|
|
// CSRF禁用,因为不使用session
|