From 47a873454ed83a184c55dd7ee904375cee3d7386 Mon Sep 17 00:00:00 2001
From: xyc <jc_xiong@hotmail.com>
Date: 星期一, 21 九月 2026 13:08:00 +0800
Subject: [PATCH] docs: 新增汇总大表软件输出与手工定稿差异报告
---
traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java | 21 ++++++++++++++++++---
1 files changed, 18 insertions(+), 3 deletions(-)
diff --git a/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java b/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java
index ea40ee9..6adee4c 100644
--- a/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java
+++ b/traffic-audit-server/src/main/java/com/trafficaudit/security/config/SecurityConfig.java
@@ -1,5 +1,6 @@
package com.trafficaudit.security.config;
+import com.trafficaudit.security.filter.JwtAuthFilter;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
@@ -8,10 +9,16 @@
import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
+
+import javax.annotation.Resource;
@Configuration
@EnableWebSecurity
public class SecurityConfig {
+
+ @Resource
+ private JwtAuthFilter jwtAuthFilter;
@Bean
public PasswordEncoder passwordEncoder() {
@@ -22,11 +29,19 @@
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
http
.csrf().disable()
+ .cors().and()
.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)
.and()
.authorizeRequests()
- .antMatchers("/api/**").permitAll()
- .anyRequest().authenticated();
+ // 鐧诲綍鍓嶅繀椤诲彲鐢ㄧ殑鎺ュ彛
+ .antMatchers("/api/auth/login", "/api/auth/captcha", "/api/auth/captcha/verify",
+ "/api/auth/captcha-config").permitAll()
+ // 鍓嶇闈欐�佽祫婧�
+ .antMatchers("/", "/index.html", "/favicon.ico", "/js/**", "/css/**", "/fonts/**", "/img/**", "/static/**").permitAll()
+ .anyRequest().permitAll()
+ .and()
+ // 鎺ュ彛閴存潈鍦� JwtAuthFilter 鍐呭畬鎴愶紙杩斿洖 JSON 401锛�
+ .addFilterBefore(jwtAuthFilter, UsernamePasswordAuthenticationFilter.class);
return http.build();
}
-}
+}
\ No newline at end of file
--
Gitblit v1.9.1